CVE-2026-53573 core-geonetwork has an Open Redirect Bypass

GeoNetwork is a catalog application to manage spatially referenced resources. From 3.12.0 until 4.2.16 and 4.4.11, unsafe redirect validation in GeonetworkOAuth2LoginAuthenticationFilter and KeycloakAuthenticationProcessingFilter permits an attacker-controlled external redirect after login. This...

CVE-2026-53573 core-geonetwork has an Open Redirect Bypass

GeoNetwork is a catalog application to manage spatially referenced resources. From 3.12.0 until 4.2.16 and 4.4.11, unsafe redirect validation in GeonetworkOAuth2LoginAuthenticationFilter and KeycloakAuthenticationProcessingFilter permits an attacker-controlled external redirect after login. This...

GHSA-R5W3-XV2F-J59Q vulnerabilities

Vulnerabilities for packages: zipkin, keycloak-config-cli, apache-nifi-registry...

CVE-2026-41852 vulnerabilities

Vulnerabilities for packages: zipkin, keycloak-config-cli, apache-nifi-registry...

CVE-2026-41850 vulnerabilities

Vulnerabilities for packages: zipkin, keycloak-config-cli, apache-nifi-registry...

CVE-2026-41848 vulnerabilities

Vulnerabilities for packages: zipkin, keycloak-config-cli, apache-nifi-registry...

GHSA-9F52-RJQV-25QV vulnerabilities

Vulnerabilities for packages: zipkin, keycloak-config-cli, apache-nifi-registry...

CVE-2026-41851 vulnerabilities

Vulnerabilities for packages: zipkin, keycloak-config-cli, apache-nifi-registry...

GHSA-659M-PX2C-25WJ vulnerabilities

Vulnerabilities for packages: zipkin, keycloak-config-cli, apache-nifi-registry...

GHSA-WXPP-56Q6-5PCG vulnerabilities

Vulnerabilities for packages: zipkin, keycloak-config-cli, apache-nifi-registry...

GHSA-9F52-RJQV-25QV vulnerabilities

Vulnerabilities for packages: apache-activemq, kafbat-ui-fips, keycloak-config-cli, jenkins, apache-activemq-fips, kafbat-ui, camunda-zeebe, zipkin, apache-camel-karavan-devmode, camunda, apache-nifi-registry...

CVE-2026-41852 vulnerabilities

Vulnerabilities for packages: apache-activemq, kafbat-ui-fips, keycloak-config-cli, jenkins, apache-activemq-fips, kafbat-ui, camunda-zeebe, zipkin, apache-camel-karavan-devmode, camunda, apache-nifi-registry...

CVE-2026-41851 vulnerabilities

Vulnerabilities for packages: apache-activemq, kafbat-ui-fips, keycloak-config-cli, jenkins, apache-activemq-fips, kafbat-ui, camunda-zeebe, zipkin, apache-camel-karavan-devmode, camunda, apache-nifi-registry...

GHSA-659M-PX2C-25WJ vulnerabilities

Vulnerabilities for packages: apache-activemq, kafbat-ui-fips, keycloak-config-cli, jenkins, apache-activemq-fips, kafbat-ui, camunda-zeebe, zipkin, apache-camel-karavan-devmode, camunda, apache-nifi-registry...

CVE-2026-41850 vulnerabilities

Vulnerabilities for packages: apache-activemq, kafbat-ui-fips, keycloak-config-cli, jenkins, apache-activemq-fips, kafbat-ui, camunda-zeebe, zipkin, apache-camel-karavan-devmode, camunda, apache-nifi-registry...

CVE-2026-41848 vulnerabilities

Vulnerabilities for packages: apache-activemq, kafbat-ui-fips, keycloak-config-cli, jenkins, apache-activemq-fips, kafbat-ui, camunda-zeebe, zipkin, apache-camel-karavan-devmode, camunda, apache-nifi-registry...

GHSA-WXPP-56Q6-5PCG vulnerabilities

Vulnerabilities for packages: apache-activemq, kafbat-ui-fips, keycloak-config-cli, jenkins, apache-activemq-fips, kafbat-ui, camunda-zeebe, zipkin, apache-camel-karavan-devmode, camunda, apache-nifi-registry...

GHSA-R5W3-XV2F-J59Q vulnerabilities

Vulnerabilities for packages: apache-activemq, kafbat-ui-fips, keycloak-config-cli, jenkins, apache-activemq-fips, kafbat-ui, camunda-zeebe, zipkin, apache-camel-karavan-devmode, camunda, apache-nifi-registry...

Improper Verification of Cryptographic Signature

Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature in the backchannel logout endpoint of the keycloak-services...

CVE-2026-18218

A flaw was found in the TokenManager component of the Keycloak identity management service. When an administrator attempts to revoke tokens for a specific application client using a "not-before" policy, the revocation may be silently ignored if the overall security realm already has an older,...