core-geonetwork has an Open Redirect Bypass

Summary GeoNetwork's post-login redirect handling can be bypassed to redirect users to an attacker-controlled external site, even though the code attempts to restrict redirect targets to relative, in-application URLs. This affects both supported SSO login methods: OAuth2/OIDC and Keycloak. Detail...

GHSA-PJP7-Q6WP-97QX core-geonetwork has an Open Redirect Bypass

Summary GeoNetwork's post-login redirect handling can be bypassed to redirect users to an attacker-controlled external site, even though the code attempts to restrict redirect targets to relative, in-application URLs. This affects both supported SSO login methods: OAuth2/OIDC and Keycloak. Detail...

CVE-2026-53573 core-geonetwork has an Open Redirect Bypass

GeoNetwork is a catalog application to manage spatially referenced resources. From 3.12.0 until 4.2.16 and 4.4.11, unsafe redirect validation in GeonetworkOAuth2LoginAuthenticationFilter and KeycloakAuthenticationProcessingFilter permits an attacker-controlled external redirect after login. This...

CVE-2026-53573

GeoNetwork is a catalog application to manage spatially referenced resources. From 3.12.0 until 4.2.16 and 4.4.11, unsafe redirect validation in GeonetworkOAuth2LoginAuthenticationFilter and KeycloakAuthenticationProcessingFilter permits an attacker-controlled external redirect after login. This...

CVE-2026-53573 core-geonetwork has an Open Redirect Bypass

GeoNetwork is a catalog application to manage spatially referenced resources. From 3.12.0 until 4.2.16 and 4.4.11, unsafe redirect validation in GeonetworkOAuth2LoginAuthenticationFilter and KeycloakAuthenticationProcessingFilter permits an attacker-controlled external redirect after login. This...

GHSA-9F52-RJQV-25QV vulnerabilities

Vulnerabilities for packages: zipkin, apache-nifi-registry, keycloak-config-cli...

GHSA-WXPP-56Q6-5PCG vulnerabilities

Vulnerabilities for packages: zipkin, apache-nifi-registry, keycloak-config-cli...

GHSA-659M-PX2C-25WJ vulnerabilities

Vulnerabilities for packages: zipkin, apache-nifi-registry, keycloak-config-cli...

CVE-2026-41850 vulnerabilities

Vulnerabilities for packages: zipkin, apache-nifi-registry, keycloak-config-cli...

CVE-2026-41852 vulnerabilities

Vulnerabilities for packages: zipkin, apache-nifi-registry, keycloak-config-cli...

CVE-2026-41851 vulnerabilities

Vulnerabilities for packages: zipkin, apache-nifi-registry, keycloak-config-cli...

GHSA-R5W3-XV2F-J59Q vulnerabilities

Vulnerabilities for packages: zipkin, apache-nifi-registry, keycloak-config-cli...

CVE-2026-41848 vulnerabilities

Vulnerabilities for packages: zipkin, apache-nifi-registry, keycloak-config-cli...

CVE-2026-41848 vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode, camunda-zeebe, apache-activemq, zipkin, keycloak-config-cli, kafbat-ui, jenkins, apache-nifi-registry, kafbat-ui-fips, apache-activemq-fips, camunda...

CVE-2026-41851 vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode, camunda-zeebe, apache-activemq, zipkin, keycloak-config-cli, kafbat-ui, jenkins, apache-nifi-registry, kafbat-ui-fips, apache-activemq-fips, camunda...

GHSA-WXPP-56Q6-5PCG vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode, camunda-zeebe, apache-activemq, zipkin, keycloak-config-cli, kafbat-ui, jenkins, apache-nifi-registry, kafbat-ui-fips, apache-activemq-fips, camunda...

CVE-2026-41850 vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode, camunda-zeebe, apache-activemq, zipkin, keycloak-config-cli, kafbat-ui, jenkins, apache-nifi-registry, kafbat-ui-fips, apache-activemq-fips, camunda...

CVE-2026-41852 vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode, camunda-zeebe, apache-activemq, zipkin, keycloak-config-cli, kafbat-ui, jenkins, apache-nifi-registry, kafbat-ui-fips, apache-activemq-fips, camunda...

GHSA-659M-PX2C-25WJ vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode, camunda-zeebe, apache-activemq, zipkin, keycloak-config-cli, kafbat-ui, jenkins, apache-nifi-registry, kafbat-ui-fips, apache-activemq-fips, camunda...

GHSA-9F52-RJQV-25QV vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode, camunda-zeebe, apache-activemq, zipkin, keycloak-config-cli, kafbat-ui, jenkins, apache-nifi-registry, kafbat-ui-fips, apache-activemq-fips, camunda...