org.geonetwork-opensource:geonetwork
Maven3 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting org.geonetwork-opensource:geonetworkpage 1 of 1
- CVE-2026-39379HIGHCVSS 7.1EG 7.1fixed in 4.2.15 or 4.4.10, by version range2026-07-01
GeoNetwork is a catalog application to manage spatially referenced resources. From 3.0.0 until 4.2.15 and 4.4.10, requesting a nonexistent or unauthorized service URL can cause an error page to reflect attacker-controlled request content i…
- CVE-2026-46487HIGHCVSS 7.5EG 7.5fixed in 4.2.16 or 4.4.11, by version range2026-07-01
GeoNetwork is a catalog application to manage spatially referenced resources. From 4.0.0-alpha.1 until 4.2.16 and 4.4.11, the Elasticsearch-backed search proxy can skip GeoNetwork's access-control filter injection when a client request has…
- CVE-2026-53573MEDIUMCVSS 4.8EG 4.8fixed in 4.2.16 or 4.4.11, by version range2026-07-31
GeoNetwork is a catalog application to manage spatially referenced resources. From 3.12.0 until 4.2.16 and 4.4.11, unsafe redirect validation in GeonetworkOAuth2LoginAuthenticationFilter and KeycloakAuthenticationProcessingFilter permits a…
Check whether org.geonetwork-opensource:geonetwork is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for org.geonetwork-opensource:geonetwork CVEs against the assets you own.
Book a Demo →