<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="rss.xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>line — recent CVEs</title>
    <link>https://vulnogram.org/</link>
    <atom:link href="https://vulnogram.org/rss/line" rel="self" type="application/rss+xml"/>
    <description>Most recent CVEs assigned by line (line).</description>
    <image>
      <url>https://vulnogram.org/seaview/icons/line.png</url>
      <title>line — recent CVEs</title>
      <link>https://vulnogram.org/</link>
    </image>
    <lastBuildDate>Wed, 21 Oct 2026 07:00:07 GMT</lastBuildDate>
    <item>
      <title>CVE-2024-1143 · 9.3 CRITICAL 🌩️</title>
      <link>https://vulnogram.org/CVE-2024-1143</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-1143</guid>
      <description>Central Dogma versions prior to 0.64.1 is vulnerable to Cross-Site Scripting (XSS), which could allow for the leakage of user sessions and subsequent authentication bypass.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Fri, 02 Feb 2024 06:01:39 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-5554 · 4.8 MEDIUM 🌩️</title>
      <link>https://vulnogram.org/CVE-2023-5554</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-5554</guid>
      <description>Lack of TLS certificate verification in log transmission of a financial module within LINE client for iOS prior to 13.16.0.</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Thu, 12 Oct 2023 09:34:01 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2022-41568 · 7.5 HIGH 🌩️</title>
      <link>https://vulnogram.org/CVE-2022-41568</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2022-41568</guid>
      <description>LINE client for iOS before 12.17.0 might be crashed by sharing an invalid shared key of e2ee in group chat.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 29 Nov 2022 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2022-29505</title>
      <link>https://vulnogram.org/CVE-2022-29505</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2022-29505</guid>
      <description>Due to build misconfiguration in openssl dependency, LINE for Windows before 7.8 is vulnerable to DLL injection that could lead to privilege escalation.</description>
      <pubDate>Wed, 27 Apr 2022 14:28:30 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2022-22820</title>
      <link>https://vulnogram.org/CVE-2022-22820</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2022-22820</guid>
      <description>Due to the lack of media file checks before rendering, it was possible for an attacker to cause abnormal CPU consumption for message recipient by sending specially crafted gif image in LINE for Windows before 7.4.</description>
      <pubDate>Thu, 20 Jan 2022 11:47:43 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2021-41011</title>
      <link>https://vulnogram.org/CVE-2021-41011</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2021-41011</guid>
      <description>LINE client for iOS before 11.15.0 might expose authentication information for a certain service to external entities under certain conditions. This is usually impossible, but in combination with a server-side bug, attackers could get this informatio…</description>
      <pubDate>Wed, 22 Sep 2021 15:07:42 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2021-38388 · 8.8 HIGH</title>
      <link>https://vulnogram.org/CVE-2021-38388</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2021-38388</guid>
      <description>Central Dogma allows privilege escalation with mirroring to the internal dogma repository that has a file managing the authorization of the project.</description>
      <category>High</category>
      <pubDate>Wed, 08 Sep 2021 17:50:45 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2021-36216</title>
      <link>https://vulnogram.org/CVE-2021-36216</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2021-36216</guid>
      <description>LINE for Windows 6.2.1.2289 and before allows arbitrary code execution via malicious DLL injection.</description>
      <pubDate>Wed, 08 Sep 2021 17:50:44 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2021-36215</title>
      <link>https://vulnogram.org/CVE-2021-36215</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2021-36215</guid>
      <description>LINE client for iOS 10.21.3 and before allows address bar spoofing due to inappropriate address handling.</description>
      <pubDate>Wed, 08 Sep 2021 17:50:43 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2021-36214 · 6.1 MEDIUM 🌩️</title>
      <link>https://vulnogram.org/CVE-2021-36214</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2021-36214</guid>
      <description>LINE client for iOS before 10.16.3 allows cross site script with specific header in WebView.</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 13 Jul 2021 17:47:37 GMT</pubDate>
    </item>
  </channel>
</rss>
