CVE-2026-11753

A vulnerability exists in armeria-saml versions prior to 1.41.1 where an attacker-controlled RelayState is reflected into the HTTP Location header following successful authentication. This flaw allows for an unvalidated redirect to an attacker-controlled URL. No specific exploit information or re...