Descriptions

Central Dogma versions before 0.78.0 contain an Open Redirect vulnerability that allows attackers to redirect users to untrusted sites via specially crafted URLs, potentially facilitating phishing attacks and credential theft.

Severity

  • CVSSv3.1 Score: 6.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)

Affected Versions

  • Central Dogma before 0.78.0

Fix

  • Central Dogma should be updated to latest version (>= 0.78.0).

Reference

  • https://www.cve.org/CVERecord?id=CVE-2025-11222
  • https://github.com/line/centraldogma/security/advisories/GHSA-4hr2-xf7w-jf76

Updated: