2026.1 Update

Update 26 Jun 2026

Catalogue services

Catalog services have been updated to the latest GeoCat Find technology.

Highlights for this release include:

Metadata delete confirmation now uses a custom dialog with support for resource-type-specific messages, replacing the browser dialog.
Search results can now be sorted by title in descending order.
Harvesters support API Key authentication and reindexing of all metadata for a harvester.
New group types support for managing user access.
DCAT formatter now supports turtle and JSON-LD output formats.
Static pages now support group-restricted access levels.
Improved metadata batch validation with verbose issue reporting.
MEF (ZIP) export now limits resource size and supports excluding attachments.
ISO 19115-3:2018 DataCite formatter updated to version 4.6.
Security hardening: login redirect URL validation now only allows server-local relative paths.
Library updates: Elasticsearch 8.19.13, GeoTools 33.5, OpenLayers 10.8.0, Tika 3.2.2, Log4j2 2.24.3.

Mapping Services

Mapping services have been updated to the latest GeoCat Map 2025.4 technology, based on GeoServer 2.27.6+, GeoWebCache 1.27.5, and GeoTools 33.6. This is a minor update addressing a security vulnerability and several fixes.

CVE-2026-76904 PostGIS SQL Injection in the jsonArrayContains Function

GeoCat Live Premium customers also receive two Enterprise Premium fixes:

LDAP: conversion from group-member-username to user-search username.
JWT-Headers: fix for jwt-headers and basic auth when both use the Authorization HTTP header.