CVE-2026-55442Published
Goobi viewer: cleanUpQuery double-brace bypass allows arbitrary Solr local-param injection
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-55442 · Microsoft / collected KEV context
cve-program · CVE-2026-55442
- https://github.com/intranda/goobi-viewer-core/security/advisories/GHSA-2r24-qxpf-cj65
- https://github.com/intranda/goobi-viewer-core/commit/330da2f8255a9ed2200ba46b98bb9b6a88748a4e
- https://github.com/intranda/goobi-viewer-core/commit/5a59ffa5d76169a4ad3cc396023ad4a4eca217da
- https://github.com/intranda/goobi-viewer-core/releases/tag/v26.05
Related operational evidence
Explicit CVE identifiers- Goobi viewer: cleanUpQuery double-brace bypass allows arbitrary Solr local-param injection · Newly collected advisory · 23 Oct 2026