Intranda goobi-viewer-core input validation error vulnerability

A security vulnerability exists in Intranda Goobi Viewer Core versions from 25.08 up to but not including 26.05. This vulnerability stems from the auth/login and auth/token endpoints in IIIF Auth 2.0 accepting unvalidated origin query parameters in AuthorizationFlowResource. These parameters are...