https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:39:24 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-214869 EUVD-2026-214869 https://cve.radiocsirt.org/vuln/euvd-2026-214869 https://cve.radiocsirt.org/vuln/fkie_cve-2024-32037 <p>GeoNetwork is a catalog application to manage spatially referenced resources. In versions prior to 4.2.10 and 4.4.5, the search end-point response headers contain information about Elasticsearch software in use. This information is valuable from a security point of view because it allows software used by the server to be easily identified. GeoNetwork 4.4.5 and 4.2.10 fix this issue. No known workarounds are available.</p> <p>GeoNetwork is a catalog application to manage spatially referenced resources. In versions prior to 4.2.10 and 4.4.5, the search end-point response headers contain information about Elasticsearch software in use. This information is valuable from a security point of view because it allows software used by the server to be easily identified. GeoNetwork 4.4.5 and 4.2.10 fix this issue. No known workarounds are available.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-32037 https://cve.radiocsirt.org/vuln/ghsa-52rf-25hq-5m33 <p><strong>Affected:</strong> Maven: org.geonetwork-opensource:gn-services</p> <p>### Impact</p> <p>The search end-point response headers contain information about Elasticsearch software in use. This information is sensitive from a security point of view because it allows software used by the server to be easily identified.</p> <p>### Patches</p> <p>GeoNetwork 4.4.5 / 4.2.10</p> <p>### Workarounds</p> <p>None</p> <p>### References - [CVE-2024-32037](https://www.cve.org/CVERecord?id=CVE-2024-32037) - [Search service](https://docs.geonetwork-opensource.org/4.4/api/search/)</p> <p>### Credits</p> <p>- [Ministry of Economic Affairs and Climate Policy](https://www.rijksoverheid.nl/ministeries/ministerie-van-economische-zaken-en-klimaat), The Netherlands.</p> <p><strong>Affected:</strong> Maven: org.geonetwork-opensource:gn-services</p> <p>### Impact</p> <p>The search end-point response headers contain information about Elasticsearch software in use. This information is sensitive from a security point of view because it allows software used by the server to be easily identified.</p> <p>### Patches</p> <p>GeoNetwork 4.4.5 / 4.2.10</p> <p>### Workarounds</p> <p>None</p> <p>### References - [CVE-2024-32037](https://www.cve.org/CVERecord?id=CVE-2024-32037) - [Search service](https://docs.geonetwork-opensource.org/4.4/api/search/)</p> <p>### Credits</p> <p>- [Ministry of Economic Affairs and Climate Policy](https://www.rijksoverheid.nl/ministeries/ministerie-van-economische-zaken-en-klimaat), The Netherlands.</p> https://cve.radiocsirt.org/vuln/ghsa-52rf-25hq-5m33 https://cve.radiocsirt.org/vuln/gsd-2024-32037 gsd-2024-32037 https://cve.radiocsirt.org/vuln/gsd-2024-32037