CVE-2026-39379

GeoNetwork, a catalog application for spatially referenced resources, is vulnerable to reflected Cross-Site Scripting (XSS) via client-side template injection in versions 3.0.0 up to 4.2.15 and 4.4.10. The root cause is the failure to adequately neutralize request content reflected on an error pa...