4793 matches found
PT-2026-67138
Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw in the keycloak-services component, used for managing authentication and authorization flows, allows a bypass of client access-type policy conditions. When a realm administrator...
GHSA-93WV-JW9V-4972 vulnerabilities
Vulnerabilities for packages: celeborn, druid, kayenta-fips, neo4j, opensearch, spark, kserve-modelmesh, localstack, tinkerpop, spark-fips, keycloak, kafbat-ui-fips, kayenta, keycloak-fips, apache-pulsar, elasticsearch, spark-kubernetes-operator-fips, apache-camel-karavan-devmode, opensearch-fips...
CVE-2026-56819 vulnerabilities
Vulnerabilities for packages: celeborn, druid, kayenta-fips, neo4j, opensearch, spark, kserve-modelmesh, localstack, tinkerpop, spark-fips, keycloak, kafbat-ui-fips, kayenta, keycloak-fips, apache-pulsar, elasticsearch, spark-kubernetes-operator-fips, apache-camel-karavan-devmode, opensearch-fips...
CVE-2026-56819 vulnerabilities
Vulnerabilities for packages: neo4j, celeborn, apache-pulsar, keycloak, zipkin, spark, druid, kserve-modelmesh...
GHSA-93WV-JW9V-4972 vulnerabilities
Vulnerabilities for packages: neo4j, celeborn, apache-pulsar, keycloak, zipkin, spark, druid, kserve-modelmesh...
CVE-2026-53573
GeoNetwork is a catalog application to manage spatially referenced resources. From 3.12.0 until 4.2.16 and 4.4.11, unsafe redirect validation in GeonetworkOAuth2LoginAuthenticationFilter and KeycloakAuthenticationProcessingFilter permits an attacker-controlled external redirect after login. This...
core-geonetwork has an Open Redirect Bypass
Summary GeoNetwork's post-login redirect handling can be bypassed to redirect users to an attacker-controlled external site, even though the code attempts to restrict redirect targets to relative, in-application URLs. This affects both supported SSO login methods: OAuth2/OIDC and Keycloak. Detail...
CVE-2026-53573
GeoNetwork is a catalog application to manage spatially referenced resources. From 3.12.0 until 4.2.16 and 4.4.11, unsafe redirect validation in GeonetworkOAuth2LoginAuthenticationFilter and KeycloakAuthenticationProcessingFilter permits an attacker-controlled external redirect after login. This...
CVE-2026-53573 core-geonetwork has an Open Redirect Bypass
GeoNetwork is a catalog application to manage spatially referenced resources. From 3.12.0 until 4.2.16 and 4.4.11, unsafe redirect validation in GeonetworkOAuth2LoginAuthenticationFilter and KeycloakAuthenticationProcessingFilter permits an attacker-controlled external redirect after login. This...
CVE-2026-53573 core-geonetwork has an Open Redirect Bypass
GeoNetwork is a catalog application to manage spatially referenced resources. From 3.12.0 until 4.2.16 and 4.4.11, unsafe redirect validation in GeonetworkOAuth2LoginAuthenticationFilter and KeycloakAuthenticationProcessingFilter permits an attacker-controlled external redirect after login. This...
CVE-2026-41850 vulnerabilities
Vulnerabilities for packages: zipkin, apache-nifi-registry, keycloak-config-cli...
CVE-2026-41852 vulnerabilities
Vulnerabilities for packages: zipkin, apache-nifi-registry, keycloak-config-cli...
GHSA-R5W3-XV2F-J59Q vulnerabilities
Vulnerabilities for packages: zipkin, apache-nifi-registry, keycloak-config-cli...
CVE-2026-41848 vulnerabilities
Vulnerabilities for packages: zipkin, apache-nifi-registry, keycloak-config-cli...
GHSA-9F52-RJQV-25QV vulnerabilities
Vulnerabilities for packages: zipkin, apache-nifi-registry, keycloak-config-cli...
GHSA-659M-PX2C-25WJ vulnerabilities
Vulnerabilities for packages: zipkin, apache-nifi-registry, keycloak-config-cli...
CVE-2026-41851 vulnerabilities
Vulnerabilities for packages: zipkin, apache-nifi-registry, keycloak-config-cli...
GHSA-WXPP-56Q6-5PCG vulnerabilities
Vulnerabilities for packages: zipkin, apache-nifi-registry, keycloak-config-cli...
CVE-2026-41851 vulnerabilities
Vulnerabilities for packages: keycloak-config-cli, jenkins, zipkin, kafbat-ui-fips, camunda, camunda-zeebe, apache-camel-karavan-devmode, kafbat-ui, apache-nifi-registry, apache-activemq, apache-activemq-fips...
CVE-2026-41852 vulnerabilities
Vulnerabilities for packages: keycloak-config-cli, jenkins, zipkin, kafbat-ui-fips, camunda, camunda-zeebe, apache-camel-karavan-devmode, kafbat-ui, apache-nifi-registry, apache-activemq, apache-activemq-fips...