https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:39:43.256943+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-214869 EUVD-2026-214869 2026-10-02T19:39:43.259685+00:00 EUVD-2026-214869 https://cve.radiocsirt.org/vuln/fkie_cve-2024-32037 fkie_cve-2024-32037 2026-10-02T19:39:43.259725+00:00

GeoNetwork is a catalog application to manage spatially referenced resources. In versions prior to 4.2.10 and 4.4.5, the search end-point response headers contain information about Elasticsearch software in use. This information is valuable from a security point of view because it allows software used by the server to be easily identified. GeoNetwork 4.4.5 and 4.2.10 fix this issue. No known workarounds are available.

 https://cve.radiocsirt.org/vuln/ghsa-52rf-25hq-5m33 GHSA-52rf-25hq-5m33 — GeoNetwork search end-point information disclosure in response headers 2026-10-02T19:39:43.259760+00:00

Affected: Maven: org.geonetwork-opensource:gn-services

### Impact

The search end-point response headers contain information about Elasticsearch software in use. This information is sensitive from a security point of view because it allows software used by the server to be easily identified.

### Patches

GeoNetwork 4.4.5 / 4.2.10

### Workarounds

None

### References - [CVE-2024-32037](https://www.cve.org/CVERecord?id=CVE-2024-32037) - [Search service](https://docs.geonetwork-opensource.org/4.4/api/search/)

### Credits

- [Ministry of Economic Affairs and Climate Policy](https://www.rijksoverheid.nl/ministeries/ministerie-van-economische-zaken-en-klimaat), The Netherlands.

 https://cve.radiocsirt.org/vuln/gsd-2024-32037 gsd-2024-32037 2026-10-02T19:39:43.259795+00:00 gsd-2024-32037