6023 matches found
GHSA-93WV-JW9V-4972 vulnerabilities
Vulnerabilities for packages: tinkerpop, kafbat-ui-fips, seata, localstack, opensearch-fips, celeborn, kayenta-fips, apache-pulsar, hadoop-fips, elasticsearch, spark-fips, kserve-modelmesh, keycloak, metabase, opensearch, spark, neo4j, trino, apache-camel-karavan-devmode, kayenta, keycloak-fips,...
CVE-2026-56819 vulnerabilities
Vulnerabilities for packages: tinkerpop, kafbat-ui-fips, seata, localstack, opensearch-fips, celeborn, kayenta-fips, apache-pulsar, hadoop-fips, elasticsearch, spark-fips, kserve-modelmesh, keycloak, metabase, opensearch, spark, neo4j, trino, apache-camel-karavan-devmode, kayenta, keycloak-fips,...
GHSA-93WV-JW9V-4972 vulnerabilities
Vulnerabilities for packages: keycloak, apache-pulsar, zipkin, druid, spark, neo4j, kserve-modelmesh, opensearch, trino, sonarqube, celeborn...
CVE-2026-56819 vulnerabilities
Vulnerabilities for packages: keycloak, apache-pulsar, zipkin, druid, spark, neo4j, kserve-modelmesh, opensearch, trino, sonarqube, celeborn...
CVE-2026-53573
GeoNetwork is a catalog application to manage spatially referenced resources. From 3.12.0 until 4.2.16 and 4.4.11, unsafe redirect validation in GeonetworkOAuth2LoginAuthenticationFilter and KeycloakAuthenticationProcessingFilter permits an attacker-controlled external redirect after login. This...
core-geonetwork has an Open Redirect Bypass
Summary GeoNetwork's post-login redirect handling can be bypassed to redirect users to an attacker-controlled external site, even though the code attempts to restrict redirect targets to relative, in-application URLs. This affects both supported SSO login methods: OAuth2/OIDC and Keycloak. Detail...
GHSA-PJP7-Q6WP-97QX core-geonetwork has an Open Redirect Bypass
Summary GeoNetwork's post-login redirect handling can be bypassed to redirect users to an attacker-controlled external site, even though the code attempts to restrict redirect targets to relative, in-application URLs. This affects both supported SSO login methods: OAuth2/OIDC and Keycloak. Detail...
CVE-2026-53573
GeoNetwork is a catalog application to manage spatially referenced resources. From 3.12.0 until 4.2.16 and 4.4.11, unsafe redirect validation in GeonetworkOAuth2LoginAuthenticationFilter and KeycloakAuthenticationProcessingFilter permits an attacker-controlled external redirect after login. This...
CVE-2026-53573 core-geonetwork has an Open Redirect Bypass
GeoNetwork is a catalog application to manage spatially referenced resources. From 3.12.0 until 4.2.16 and 4.4.11, unsafe redirect validation in GeonetworkOAuth2LoginAuthenticationFilter and KeycloakAuthenticationProcessingFilter permits an attacker-controlled external redirect after login. This...
CVE-2026-53573 core-geonetwork has an Open Redirect Bypass
GeoNetwork is a catalog application to manage spatially referenced resources. From 3.12.0 until 4.2.16 and 4.4.11, unsafe redirect validation in GeonetworkOAuth2LoginAuthenticationFilter and KeycloakAuthenticationProcessingFilter permits an attacker-controlled external redirect after login. This...
GHSA-R5W3-XV2F-J59Q vulnerabilities
Vulnerabilities for packages: keycloak-config-cli, apache-nifi-registry, zipkin...
CVE-2026-41848 vulnerabilities
Vulnerabilities for packages: keycloak-config-cli, apache-nifi-registry, zipkin...
CVE-2026-41850 vulnerabilities
Vulnerabilities for packages: keycloak-config-cli, apache-nifi-registry, zipkin...
CVE-2026-41852 vulnerabilities
Vulnerabilities for packages: keycloak-config-cli, apache-nifi-registry, zipkin...
GHSA-9F52-RJQV-25QV vulnerabilities
Vulnerabilities for packages: keycloak-config-cli, apache-nifi-registry, zipkin...
GHSA-WXPP-56Q6-5PCG vulnerabilities
Vulnerabilities for packages: keycloak-config-cli, apache-nifi-registry, zipkin...
GHSA-659M-PX2C-25WJ vulnerabilities
Vulnerabilities for packages: keycloak-config-cli, apache-nifi-registry, zipkin...
CVE-2026-41851 vulnerabilities
Vulnerabilities for packages: keycloak-config-cli, apache-nifi-registry, zipkin...
CVE-2026-41848 vulnerabilities
Vulnerabilities for packages: apache-activemq, keycloak-config-cli, apache-activemq-fips, kafbat-ui-fips, apache-camel-karavan-devmode, camunda-zeebe, apache-nifi-registry, jenkins, kafbat-ui, camunda, zipkin...
CVE-2026-41850 vulnerabilities
Vulnerabilities for packages: apache-activemq, keycloak-config-cli, apache-activemq-fips, kafbat-ui-fips, apache-camel-karavan-devmode, camunda-zeebe, apache-nifi-registry, jenkins, kafbat-ui, camunda, zipkin...