Products: 1
Vulnerabilities: 16
Known Exploited: 0
5
Critical Level Threats
2
High Level Threats
9
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-55486
Goobi viewer: IIIF Auth 2.0 origin parameter unsanitized — CSP malformation and reflected XSS
Last Modified: Oct 30, 2026
Published: Oct 23, 2026
CVE-2026-55465
Goobi viewer: Solr injection via unvalidated region parameter in spatial search
Last Modified: Oct 29, 2026
Published: Oct 23, 2026
CVE-2026-55463
Goobi viewer: WebSocket endpoints lack server-side authentication and origin validation
Last Modified: Oct 29, 2026
Published: Oct 23, 2026
CVE-2026-55459
Goobi viewer: OpenID JWT audience not enforced by the verifier
Last Modified: Oct 23, 2026
Published: Oct 23, 2026
CVE-2026-55457
Goobi viewer: Empty webapi.authorization.token default permits unauthenticated authorization bypass
Last Modified: Oct 30, 2026
Published: Oct 23, 2026
Items Per Page
