{"action":"Upgrade org.geonetwork-opensource:geonetwork to 4.2.16 (4.2.x) or 4.4.11 (4.4.x) or later.","affected":[{"introduced":"3.12.0","last_affected":"3.12.12"},{"introduced":"4.0.0-alpha.1","last_affected":"4.0.6"},{"fixed":"4.2.16","introduced":"4.2.0"},{"fixed":"4.4.11","introduced":"4.4.0"}],"component":"org.geonetwork-opensource:geonetwork","cve_ids":["CVE-2026-53573"],"ecosystem":"Maven","epss":0.00648,"exploited":false,"fixed_versions":["4.2.16","4.4.11"],"ghsa_id":"GHSA-pjp7-q6wp-97qx","id":"tcs_01M5N97NK980MM2Y3FRTTZRNSH","modified_at":"2026-07-31T22:41:46.217522Z","published_at":"2026-07-31T22:16:34Z","references":["https://osv.dev/vulnerability/GHSA-pjp7-q6wp-97qx","https://github.com/geonetwork/core-geonetwork/security/advisories/GHSA-pjp7-q6wp-97qx","https://github.com/geonetwork/core-geonetwork/pull/9307","https://github.com/geonetwork/core-geonetwork/pull/9309","https://github.com/geonetwork/core-geonetwork/commit/0d74f673dfc926bde935819ed34636d789b2fecd","https://github.com/geonetwork/core-geonetwork/commit/cde9b6481a29e2473b7b74479b4e3fd6843bac4e","https://github.com/geonetwork/core-geonetwork","https://github.com/geonetwork/core-geonetwork/releases/tag/4.2.16","https://github.com/geonetwork/core-geonetwork/releases/tag/4.4.11"],"severity":{"label":"unknown","score":0},"sources":[{"source":"osv","source_id":"GHSA-pjp7-q6wp-97qx","url":"https://osv.dev/vulnerability/GHSA-pjp7-q6wp-97qx"}],"summary":"core-geonetwork has an Open Redirect Bypass"}