4587 matches found
CVE-2026-18571
A flaw was found in the user creation component of Keycloak when Fine-Grained Admin Permissions V2 FGAP V2 is enabled. This issue allows a sub-administrator with permission to create users to add those users to any group, even groups the sub-administrator is not authorized to manage. This could...
GHSA-93WV-JW9V-4972 vulnerabilities
Vulnerabilities for packages: elasticsearch, kayenta, spark-kubernetes-operator-fips, camunda-zeebe, keycloak, keycloak-fips, neo4j, apache-camel-karavan-devmode...
CVE-2026-56819 vulnerabilities
Vulnerabilities for packages: elasticsearch, kayenta, spark-kubernetes-operator-fips, camunda-zeebe, keycloak, keycloak-fips, neo4j, apache-camel-karavan-devmode...
CVE-2026-56819 vulnerabilities
Vulnerabilities for packages: keycloak, neo4j...
GHSA-93WV-JW9V-4972 vulnerabilities
Vulnerabilities for packages: keycloak, neo4j...
CVE-2026-53573
GeoNetwork is a catalog application to manage spatially referenced resources. From 3.12.0 until 4.2.16 and 4.4.11, unsafe redirect validation in GeonetworkOAuth2LoginAuthenticationFilter and KeycloakAuthenticationProcessingFilter permits an attacker-controlled external redirect after login. This...
core-geonetwork has an Open Redirect Bypass
Summary GeoNetwork's post-login redirect handling can be bypassed to redirect users to an attacker-controlled external site, even though the code attempts to restrict redirect targets to relative, in-application URLs. This affects both supported SSO login methods: OAuth2/OIDC and Keycloak. Detail...
CVE-2026-53573 core-geonetwork has an Open Redirect Bypass
GeoNetwork is a catalog application to manage spatially referenced resources. From 3.12.0 until 4.2.16 and 4.4.11, unsafe redirect validation in GeonetworkOAuth2LoginAuthenticationFilter and KeycloakAuthenticationProcessingFilter permits an attacker-controlled external redirect after login. This...
CVE-2026-53573 core-geonetwork has an Open Redirect Bypass
GeoNetwork is a catalog application to manage spatially referenced resources. From 3.12.0 until 4.2.16 and 4.4.11, unsafe redirect validation in GeonetworkOAuth2LoginAuthenticationFilter and KeycloakAuthenticationProcessingFilter permits an attacker-controlled external redirect after login. This...
GHSA-R5W3-XV2F-J59Q vulnerabilities
Vulnerabilities for packages: keycloak-config-cli, apache-nifi-registry...
CVE-2026-41852 vulnerabilities
Vulnerabilities for packages: keycloak-config-cli, apache-nifi-registry...
CVE-2026-41850 vulnerabilities
Vulnerabilities for packages: keycloak-config-cli, apache-nifi-registry...
CVE-2026-41848 vulnerabilities
Vulnerabilities for packages: keycloak-config-cli, apache-nifi-registry...
GHSA-9F52-RJQV-25QV vulnerabilities
Vulnerabilities for packages: keycloak-config-cli, apache-nifi-registry...
CVE-2026-41851 vulnerabilities
Vulnerabilities for packages: keycloak-config-cli, apache-nifi-registry...
GHSA-659M-PX2C-25WJ vulnerabilities
Vulnerabilities for packages: keycloak-config-cli, apache-nifi-registry...
GHSA-WXPP-56Q6-5PCG vulnerabilities
Vulnerabilities for packages: keycloak-config-cli, apache-nifi-registry...
GHSA-9F52-RJQV-25QV vulnerabilities
Vulnerabilities for packages: jenkins, apache-activemq-fips, camunda, apache-nifi-registry, apache-activemq, keycloak-config-cli, camunda-zeebe, apache-camel-karavan-devmode...