GO
Product
goobi-viewer-core
16
CVEs
0
On KEV
9.8
Max CVSS
11
New 30D
Severity mix
Critical 4High 2Medium 10Low 0
Watch
Add goobi-viewer-core to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-55459 New | 7.4 | Oct 23 | Goobi viewer: OpenID JWT audience not enforced by the verifier Affected: >= 25.01, < 26.05 |
| CVE-2026-55457 New | 7.4 | Oct 23 | Goobi viewer: Empty webapi.authorization.token default permits unauthenticated authorization bypass Affected: < 26.05 |
Showing 2