[GHSA] GHSA-pjp7-q6wp-97qx (medium) — core-geonetwork has an Open Redirect Bypass

GHSA-pjp7-q6wp-97qx Severity: medium CVE: CVE-2026-53573

core-geonetwork has an Open Redirect Bypass

### Summary GeoNetwork's post-login redirect handling can be bypassed to redirect users to an attacker-controlled external site, even though the code attempts to restrict redirect targets to relative, in-application URLs. This affects both supported SSO login methods: OAuth2/OIDC and Keycloak.

#