{"id":"CVE-2026-55864","summary":"GeoNetwork: Unauthenticaded Server-Side Request Forgery  in SLD Tool","details":"GeoNetwork is a catalog application to manage spatially referenced resources. Prior to 4.2.17 and 4.4.12, POST /api/tools/ogc/sld accepted a caller-supplied WMS server URL and performed a server-side HTTP GET without destination validation. An anonymous attacker could make the GeoNetwork server send requests to internal hosts that are not publicly reachable. When the outbound response was XML, the endpoint could store and return the fetched body, making the request forgery non-blind and enabling internal data disclosure, authorization bypass, and network reconnaissance. This issue is fixed in versions 4.2.17 and 4.4.12.","aliases":["GHSA-5hx7-j24v-rffj"],"modified":"2026-10-02T08:13:38.096325Z","published":"2026-09-15T15:37:01.267Z","database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-918"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55864.json"},"references":[{"type":"WEB","url":"https://github.com/geonetwork/core-geonetwork/releases/tag/4.2.17"},{"type":"WEB","url":"https://github.com/geonetwork/core-geonetwork/releases/tag/4.4.12"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55864.json"},{"type":"ADVISORY","url":"https://github.com/geonetwork/core-geonetwork/security/advisories/GHSA-5hx7-j24v-rffj"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55864"},{"type":"FIX","url":"https://github.com/geonetwork/core-geonetwork/commit/17fdae28a5a51996bf5ff7f7e8236332c74eab77"},{"type":"FIX","url":"https://github.com/geonetwork/core-geonetwork/commit/a80d535c842e6af589d0bac37e7fe4ba01193757"},{"type":"FIX","url":"https://github.com/geonetwork/core-geonetwork/pull/9343"},{"type":"FIX","url":"https://github.com/geonetwork/core-geonetwork/pull/9344"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/geonetwork/core-geonetwork","events":[{"introduced":"e1c155ae64342f43775bd8c637d88e8594a3efcc"},{"introduced":"19b9edba4f9a5718047d3b17eb874c3ca769c26e"},{"fixed":"f91487a48ed51b6abc944e5a35ee3b147ccecdb6"},{"fixed":"45f1bcb4ec72f17d5990ffa55469b66a79dcbfc4"},{"fixed":"17fdae28a5a51996bf5ff7f7e8236332c74eab77"},{"fixed":"a80d535c842e6af589d0bac37e7fe4ba01193757"}],"database_specific":{"source":["AFFECTED_FIELD","REFERENCES"],"extracted_events":[{"introduced":"4.0.0"},{"fixed":"4.2.17"},{"introduced":"4.4.0"},{"fixed":"4.4.12"}]}}],"versions":["4.2.16","4.2.15","4.4.10","4.2.14","4.4.9","4.4.8","4.2.13","4.4.7","4.2.11","4.4.6","4.2.10","4.4.5","4.4.4","4.2.9","4.4.3","4.2.8","4.4.2","4.4.1","4.2.7","4.4.0","4.2.6","4.2.5","4.2.4","4.2.3","4.2.2","4.2.1","4.2.0","4.0.6","4.0.5","4.0.4","4.0.3","4.0.2","4.0.1","4.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-55864.json","vanir_signatures_modified":"2026-10-02T08:13:38Z","vanir_signatures":[{"signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/a80d535c842e6af589d0bac37e7fe4ba01193757","target":{"file":"services/src/main/java/org/fao/geonet/api/sld/SldApi.java","function":"deteleSLD"},"deprecated":false,"digest":{"function_hash":"205280140040039714246733980504896308228","length":54},"id":"CVE-2026-55864-019deaae","signature_type":"Function"},{"signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/a80d535c842e6af589d0bac37e7fe4ba01193757","target":{"file":"core/src/main/java/org/geonetwork/map/wms/SLDUtil.java","function":"generateFilter2"},"deprecated":false,"digest":{"function_hash":"334377049780721969950628799579329661914","length":2865},"id":"CVE-2026-55864-05bd8ed8","signature_type":"Function"},{"id":"CVE-2026-55864-05c589ed","signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/17fdae28a5a51996bf5ff7f7e8236332c74eab77","target":{"file":"core/src/test/java/org/geonetwork/map/wms/SLDUtilTest.java","function":"testGenerateFullSLD"},"deprecated":false,"digest":{"function_hash":"296703199399794868421151778306957596760","length":78}},{"signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/a80d535c842e6af589d0bac37e7fe4ba01193757","target":{"file":"core/src/main/java/org/geonetwork/map/wms/SLDUtil.java","function":"generateCustomFilter"},"deprecated":false,"digest":{"function_hash":"96118682959664989890107015393229168392","length":414},"id":"CVE-2026-55864-0aa0090d","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"222099537695788875087332916584207222424","length":69},"id":"CVE-2026-55864-0bca8a04","signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/a80d535c842e6af589d0bac37e7fe4ba01193757","target":{"file":"domain/src/main/java/org/fao/geonet/domain/TextFile.java","function":"setId"}},{"digest":{"function_hash":"72928553926648783726289995052947744957","length":42},"id":"CVE-2026-55864-0c986951","signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/a80d535c842e6af589d0bac37e7fe4ba01193757","target":{"file":"domain/src/main/java/org/fao/geonet/domain/TextFile.java","function":"getId"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"177603664070126449897660713223245060330","length":75},"id":"CVE-2026-55864-0f1d131e","signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/a80d535c842e6af589d0bac37e7fe4ba01193757","target":{"file":"domain/src/main/java/org/fao/geonet/domain/TextFile.java","function":"setMimeType"}},{"deprecated":false,"digest":{"function_hash":"315211220078391183783840218616564072829","length":791},"id":"CVE-2026-55864-10d811be","signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/17fdae28a5a51996bf5ff7f7e8236332c74eab77","target":{"file":"core/src/test/java/org/geonetwork/map/wms/SLDUtilTest.java","function":"testInsertFilter"}},{"target":{"file":"domain/src/main/java/org/fao/geonet/domain/TextFile.java","function":"getContent"},"deprecated":false,"digest":{"function_hash":"334918673423831439076721161637136027833","length":47},"id":"CVE-2026-55864-19320e2a","signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/a80d535c842e6af589d0bac37e7fe4ba01193757"},{"digest":{"function_hash":"271900456334427932971486878579619657740","length":87},"id":"CVE-2026-55864-1a4225c2","signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/a80d535c842e6af589d0bac37e7fe4ba01193757","target":{"file":"core/src/test/java/org/geonetwork/map/wms/SLDUtilTest.java","function":"testInsertFilterNoFilter"},"deprecated":false},{"digest":{"line_hashes":["114117534410504301851715122509263597376","195551350438826100931698805486561282089","106085472016661762234006235963813283151","82976826070969771570240699643284715669","99309060699193879935187023865280499915","279534743055101546747518507242847326679","183137834913616211203681638712851847810","190924703127406925771102362394557928653","332651504201352228441332697594806529174","34571661431712552071108954035901256704","321806927767022756922037650800725683694","25499878783826141752390822926967088654","26523175603414947118762072520680699269","266387293933747752353984224673782981395","286123368357626367760450806854470039473","55741034603154321435872557494368803019","154950949010644264994421081700331225461","325869990349213467101686018946111339204","190968275217108333502307195903079097334","114651804611043745392574884536079645074","128897012381562519569158665074183730622","67926242294007002552966844653804253975","190048341248991470445669279633906648661","79211901082191200274069464658829035083","251178334077994625895221003398636408385","215574044071229072066425013630950784186","113077834215232978531505057466295758125","247141280890706993151112091147357926432","7540960361150873232730254690594003679","2425560530103402046958954611682453135","255418700387646931265839391552863270388","20325414725039373197403048885668228086","336300890334827861921334464942339491881","253076738583680824877308282997950389996","283738943968731296497709599992283045725","20176358348566429337349455136432247838","232051411032160324984408566276816234193","320511281759871077325098805968729148169","310709307892951126145689709469586405816","311893499725206950489295312882370639648","237239586753803678334930508769373292919","198120794560711417540846227404135753240","311435502196584269283538208646293528450","17684618108937797004042389538276961933","299174773295378581975543703678238879803","17229188153065092737281291675838254983","141612298785903095790268724806284486752","171827112711485361736898885048738028579","87268005499804037138005612531391828796","133907246444033657666799434037450871622","309768774033475377791116578883040240148","260282355746893773565465844300334155031","128731060346185179688374130406933107820","73782367081866147016276348244811603991","23220360315909178012097525526732627040","196660393480565553166335787518276778141","23897139077148426062946116126679366238","81773894090010962639320957994523908637","216050653690495003126956469651286536808","55211131559377187891697742399384447948"],"threshold":0.9},"id":"CVE-2026-55864-21a10bcc","signature_type":"Line","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/17fdae28a5a51996bf5ff7f7e8236332c74eab77","target":{"file":"core/src/test/java/org/geonetwork/map/wms/SLDUtilTest.java"},"deprecated":false},{"id":"CVE-2026-55864-297dfc25","signature_type":"Line","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/17fdae28a5a51996bf5ff7f7e8236332c74eab77","target":{"file":"services/src/main/java/org/fao/geonet/api/sld/SldApi.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["246775722694863304543052439994646792738","86187691467476160986910673994088773521","76408824260719012114215505825674063796","57350570019515259133048354260467195957","79773272891542298477370513566662928468","323133801853316362572671640557723023705","101342451507875448329613316300017290269","329542882430070224975296136999023406977","2030818696725395616191281231012615710","271441820274914616251599040940963554580","22519501349159993791111482982273077371","60482539788120651803411223628445585670","183671592004946579572570061303675715679","13534244810965933767005688427925504169","313167041752539926523789610194926274734","261635772364520436177585929225577431591","290673825524165055735122830649494236481","239999843592789559255149019764382151834","266753989713310563171742190622405876960","9451835625961385428111663619495061759","41211492156163469123171669802838696040","104871451063045781547061271372366530992","236687762159888346004067368960744789021","331450143745080986648590756816090247995","218305029893109990743514997334425772648","28924236110454414607161752255346388785","283474987086849236416823743071662477050","99890244376166474069683032156713192690","322150737032569976000192317191825465888","291856974975042786919063594456020227635","96490594018993559124342293395558632643","47267703854674778058295915140994226120","54276926154155860498743270700209682171","215412776031443449229289732514211263427","272750254626755944370875663621106064780","34627900365590935375250809147607892929","156514125821467785335538303251595229523","182063368679304476387381285160952157788","126134465371145346110877349949811208040","218953602817674219476495615301101553087","160359056130602290083717296518440338596","60389230589402414134157625810250887222","327729218308257464288689353676543720922","291467666352053730247359818870729108513","317363695465690144681406214364319726023","106056555805365614489430457768658922790","129932999060893572635844558694796638047","230753282103313190367513821812841707507","67862139342966692977100898534180474496","181558525727339859286574569847542258394","185837520317601601976710795635373877703","108878760442132376095306369542763343738","316294373194254514231807382672571110518","78526547530838581216963320083193283626","234087417021309242779621956223585216116","36789804589346694849707885380499258783","202308985032793095339337067375327289812","125429309019114537521203222506202764980","338042514971020083709936559248059197610","323263527526487803812305064817365351365","63009180210776809773602713214213693831","80783244148743915311191682435887202099","74214099684028979342459343603667794567","196505309385240160977526952944607665854","119779965377490186848511148183477218719","301992502063303716047436522542279357889","202125541466508616210066361206111372540","63247948836585321800754495433767098635","188890504346384241375379157611552879123","264095942406961063349102533235868710554","238820373152781826332077590378327125420","32239239012538705552018224954384768227","185357865923810276986127764035515538702","168521515746730548102232984248543207984","321155237825436473716367425731402504055","247968407731407226418065694610135681596","161279528591787124886780124465028665365","681698956957301921889315875472892731","69896685420139164583009609060354859904","239453478563380266342275670981039528945","79885548258115876063154245864817531807","24276534265689735371827511547319812905","200408536884284629234322928357932689273","67089698957749101186447443953320022850","25066793974691116667958926469464651489","333039045734392455984060983371636169583","177412406130046029744140460536954507541","129153112880656084758193700532615102754","8724865761906104244614269985756454304","263964526614078435726121742445629568316","124724314656842587171371047628370137769","218973093961254754024306296498253871645","698423295739822238508416820978713005","249347298517289650268988516574539016891","146221000018936580501756751351172723887","303632683445031575802035046564166095804","227440780039180156416903652283604348298","99506300592453175996909893526185717781","59984619606148944089838557444004382624","78361676162089997609376702013399077704","233766714171415753030361162664386066296","200761387956690283885132927114487030256","288320598332890101095156536406723045683","281827328127598301692267874403724941189","120145574778120553216275578719133988516","146500862740372477597422178380010969082","3614060552493318490041446158375971400","39760657841706557899924839954978441838","144248426805145027597907691992027126113","103022291154375784095709647496495884257","181374449057742861791651284459419739384","234437017828450587343486812260293269088","3554063898822293034441390827667599297","250802654404594030478814630575914678611","39106245542590915597006047912107279639","70826297641421738170426167816661909725","37054533746045029593619404444911447434","56499356175773250234852328679452754778","162452937370286206406571680122414130039","243973031890753916276109233881730126844","128681818647914873054557745937310227177","181049581693802410786336317213492605385","154029571693828973476660060795832006435","192379890264007112905644263218774231358","134488368419423018885530949962895009984","122885116904353122450795237080643104800","43458785606497295549456586224640249986","279757922984028151106148295561322138340","48949142992539409749314417038758786054","48230426951142668027285161006632021464","258833600958404048340923479355097531933","116283030320959991328361562528602838815","259075947320526953171517025659209435882","252317554873481501791077675874431233049","201329945261720682458116644257295232822","296188419234398697796825809789336621101","314232291796511598266787205740755704094","125294281947241972217845388864717952473","286827329003039622907634797416272680717","311931624779344516168549540081814428823","40505835607032282603516653554699918010","202390166362459623482640871794665925294","177782159862666756095263427578196280139","89862992901280994263150471342322420940","166026198501900897377329645948016025689","316532261856419761804448624178693403130","280420254655804542772291705744393750529","299010713626572158538742227802494533330","48173868689151455319775342237910577302","329084874355159457377049037699738782392","261694222685514002916154229884490288346","89134209018999424252307112540960186146","66533248738079393195125855612109541867","276002298618773972629503132766400518726","238291038570615758100635873422262131962","235046765250104962513819254381870160943","222040489326831165301727289128137771712","260018061683411854455733212974123176870","256380747060876842752861915615807526919","239311877454632293337954074171437491804","94827984687209719874880604250543187452","323025483643467796091283715196766400407","76768525319444805196808917116121432785","182036990354503934355846901213773617036","285461600679357803308516322274903908573","94653428675054980309118909748189182114","331264845804017515058794653286402668614","305944054955922761730273826001513030919","340596335274712040299211548091209685","104390616519261100111478355617917932018","159440448658022382958384406394366968331","118362409767795600394109382651534186668","206612502997605228849209213003695222005","90564376299194568031045251544930690204","308182147097101216632822336267053538872","296386330031353784127803293961746794529","199256364597105768414860441048643416769","238771299876389779375466758500878460883","261598953288081592017030510247261480147","172784348223900055062203984987847668004","1208042567944636025037442417017487628","79282967098280672145523509252741148431","145813386014918501382218246562876641401","223696213588782894597265505662063141184","263779967950968516110946828748737450880","56644464984221736666456358141522778220","304139668196542403060866155197142800993","53759656764237077174305212676646708140","140010026633987853558351979857105660750","19627675076032545384385670000169679080","98255250650320527798247613154106180147","111385941357156883573701393038589544332","119399293235553263844591948353947105213","312326307953756912811818503194210697468","74462997463045535672058317684669211625","312945155659685667272002362342213620900","15662500077849870666396951438208219630","337677474540035751387869417041567770667","158735169938715844490368757584986075754","229803271085293081748896685838533028808","50496827214114855633604492581389482191","65187611628796185153919080541783255356","314312461724438530438006170481784507582","92653077913075066447981987712859518470","229803271085293081748896685838533028808","212125256548935657776556361817755415367","93694531191931334237097825033990461200"]}},{"deprecated":false,"digest":{"function_hash":"269195830215065735511500931226718055630","length":1132},"id":"CVE-2026-55864-29b402ec","signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/17fdae28a5a51996bf5ff7f7e8236332c74eab77","target":{"file":"services/src/main/java/org/fao/geonet/api/sld/SldApi.java","function":"getSLDTestingForm"}},{"target":{"function":"testStoreLoadFile","file":"services/src/test/java/org/fao/geonet/api/sld/TextFileTest.java"},"deprecated":false,"digest":{"function_hash":"280452235340325397626327566985509016274","length":433},"id":"CVE-2026-55864-29bd036c","signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/17fdae28a5a51996bf5ff7f7e8236332c74eab77"},{"id":"CVE-2026-55864-2e00cbc7","signature_type":"Line","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/a80d535c842e6af589d0bac37e7fe4ba01193757","target":{"file":"core/src/main/java/org/geonetwork/map/wms/SLDUtil.java"},"deprecated":false,"digest":{"line_hashes":["511229553214146432300918078279830491","86470200139359506660556325280144033053","241923747975047783673484497653642970542","217204622357997031885667501703438201001","316068454826558801810548593026457899952","287896815865259082686627826530483705245","274947105558978672489558557579551544133","214135987875102771179279413821316210640","152764789081962258141264091854402260404","151836543894995879109857042917059614052","243257615454331332838621655653924172654","58399908232921106133344930470867970390","238318487131707141939872063094477375494","127243931856516334043941314057223944099","184254605510310036898020802743153447134","142961723121010667396200336262301775911","271033673634616125044189956974481956000","47015947117539191608469999977721713998","308460697848690756071035342715526516875","35176416069796651093627833147967819043","324214610559347676128352009103368632236","28852907826174160433036211196125002499","236398810499291938860104836261504373329","300948825853718974049083158834130199506","186735797899689810028497814470386515175","171241170374256651556330952830808963701","183446594802564165206860775187011456553","204078466085632391002450336466968828810","286293495082058076566647046653658447305","133079685019540242607892882436974052588","3052894606725755282286605809101280050","159087161258749525524278164838938887471","294758789540364057112600841426451544030","233327658556176586355743028908150195026","103622155655242745686838473202930877653","145194269362918552898679022000256020788","56765737798267699360965416915358963693","129701229246642334986829555464669024667","267437282122960865159777601405602215357","216965882970027579633614857165874090968","312344920634395355694636344856329667378","158553601539057496298551763255805787546","75621913606616727661450416822465762843","47456747759418700137448523086505388041","151839758253658056524375690727221147779","293115428643316153307937677474020126448","44346227759101951982892418701041704138","296495844814070371563052969550728744733","214381388030168246976943870433269500482","204638798406346384892846369281328323820","316985228487937045826095829180444593225","252832981531687790658910381698529584212","123511122463961890269690576855642546573","312361133828582635169485571953057980812","173149338262766379057357502605620829746","276581805518417680239536189777030013228","186218598706022058081730063496876269953","198352433005609788674191130466809543587","90482942856010028725887144726908552013","164958685952931045567645477355968326797","152955266187240236905107255039107117012","216120272784456589363400102365378175847","90468028853964083144486713443333209156","261355733975015752941832987158249278747","318778361901381407399566274317026885753","42442122235048186465294623388500555872","69786039314900708338901883127792693901","71665605468983036073064961941761205009","81432710485199014909120360231892479467","21742980303229483539702723903682045629","176618097086019918939405363120080754280","113594195426440869744898151521353746007","204058495341647236287007473939104878431","37374770382078008760845897291832443943","101568956218821199572251795043771601065","110402192925292474109106040086881679981","63104948434002235803656495892051740019","321730169488560219311677354522444693659","326898891085725700573124457321624414426","108587633537507210242609878158511307392","90682840682677985387813428516679084645","108180417795703642869675675535911908123","199699285408006981271611413440740476660","80975716319909352811012151106043677946","150732906920182955575624804247006626085","238886501064747486335445804309164122760","243665329870171902729278824418763565324","55028537692374948885629691758686192666","130386635618604438604669017104233894126","163902924130168291219812464728858924788","316317559606070688622855277289261347089","323301225839322486746809346784342858768","321423712545321396233570754754130738332","219181745405252598960747770906278369821","195107079502276062181311768922324632333"],"threshold":0.9}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/17fdae28a5a51996bf5ff7f7e8236332c74eab77","target":{"file":"services/src/main/java/org/fao/geonet/api/sld/SldApi.java","function":"deteleSLD"},"deprecated":false,"digest":{"function_hash":"205280140040039714246733980504896308228","length":54},"id":"CVE-2026-55864-2ef5a2f0"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/17fdae28a5a51996bf5ff7f7e8236332c74eab77","target":{"file":"services/src/main/java/org/fao/geonet/api/sld/SldApi.java","function":"downloadSLD"},"deprecated":false,"digest":{"function_hash":"260636542497050615902136860874208162344","length":981},"id":"CVE-2026-55864-317b96b7"},{"id":"CVE-2026-55864-34e12501","signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/17fdae28a5a51996bf5ff7f7e8236332c74eab77","target":{"file":"domain/src/main/java/org/fao/geonet/domain/TextFile.java","function":"equals"},"deprecated":false,"digest":{"function_hash":"102648237047940318070360501678830814764","length":227}},{"target":{"file":"core/src/test/java/org/geonetwork/map/wms/SLDUtilTest.java","function":"testGenerateFullSLD"},"deprecated":false,"digest":{"function_hash":"296703199399794868421151778306957596760","length":78},"id":"CVE-2026-55864-3af6cf89","signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/a80d535c842e6af589d0bac37e7fe4ba01193757"},{"digest":{"line_hashes":["194740637011336965727718709968854492793","303859777833874310267214979426097814406","283807380745538816695065479805759812950","184533254809952113479298032624168378399","155860173578133800467812539921580651354","109464609856993549010063911593775764396","154469837094855996101336491801446908218","182078691846660480950379347725253268814","216963711989439521112464542040066127453","250385700968994339131922918877206610157","303354390709949702585544398619587262623","269857746546602879753344805122957729573","223451701720744063347143894126925141412","120449617037190001689071931577597901894","211556261702526128550921918311783508479","30254432889269814389489598399385837943","56858558720058203935730217287616218706","122407176370877715577886580215386090344","232557015623104500559178300712358566095","52199287832790974517324771359845876304","228706872138523071719111359471028958822","265494826366737138737065213479725181075","307758466936935238827589671019357311237","19157693749643335697343545359381911135","125905990175162489451146257486984586847","8888876875206702262045991526752393294","312476675612007451419467259172092683279","74491895525277437260119178855921913994","178390785272206436082193163085597120254","195764946485915007563963189643879392846","291676225196232915141047999233702675323","186014781422951863622494938123314896319","163881289564120480120808345124991159604","192627790185323706784131195480199633737","31352773886132592690790728576975176522","302810007059846679564081230637310234025","95555211369485955823747271637152861429","231242589017948284244818877403793353232","86107178883482477796183255644807424038","108967536142899337231221299784849615086","127370091314331599565222401401325990118","6551398324335507226871050947159029892","252476436305721638948021204498446523555","81918827944196557548266919009313384551","19325045425118134016359841627541806515","267135572790984736750693392512132247272","262574254091446936911148087084071274188","170041345516489074723633938377075580899","105818225280384840872150534342114939602","177371159785373595280989959858211065773","158412636905502221177557691818069619816","57689546501275704430573840570480868343","269870415626577228709154575997689934804"],"threshold":0.9},"id":"CVE-2026-55864-428a1dac","signature_type":"Line","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/17fdae28a5a51996bf5ff7f7e8236332c74eab77","target":{"file":"domain/src/main/java/org/fao/geonet/domain/TextFile.java"},"deprecated":false},{"id":"CVE-2026-55864-469e83df","signature_type":"Line","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/17fdae28a5a51996bf5ff7f7e8236332c74eab77","target":{"file":"core/src/main/java/org/geonetwork/map/wms/SLDUtil.java"},"deprecated":false,"digest":{"line_hashes":["511229553214146432300918078279830491","86470200139359506660556325280144033053","241923747975047783673484497653642970542","217204622357997031885667501703438201001","316068454826558801810548593026457899952","287896815865259082686627826530483705245","274947105558978672489558557579551544133","214135987875102771179279413821316210640","152764789081962258141264091854402260404","151836543894995879109857042917059614052","243257615454331332838621655653924172654","58399908232921106133344930470867970390","238318487131707141939872063094477375494","127243931856516334043941314057223944099","184254605510310036898020802743153447134","142961723121010667396200336262301775911","271033673634616125044189956974481956000","255417936843830581364909924795553749299","270631202605033723513079810313232559631","189816638667202697123704595469685028100","253459284818349425943834401371877535674","73493185112852811858277856424826330420","236398810499291938860104836261504373329","300948825853718974049083158834130199506","186735797899689810028497814470386515175","171241170374256651556330952830808963701","183446594802564165206860775187011456553","204078466085632391002450336466968828810","286293495082058076566647046653658447305","133079685019540242607892882436974052588","3052894606725755282286605809101280050","159087161258749525524278164838938887471","294758789540364057112600841426451544030","233327658556176586355743028908150195026","103622155655242745686838473202930877653","145194269362918552898679022000256020788","56765737798267699360965416915358963693","129701229246642334986829555464669024667","267437282122960865159777601405602215357","216965882970027579633614857165874090968","312344920634395355694636344856329667378","158553601539057496298551763255805787546","75621913606616727661450416822465762843","47456747759418700137448523086505388041","151839758253658056524375690727221147779","293115428643316153307937677474020126448","44346227759101951982892418701041704138","296495844814070371563052969550728744733","214381388030168246976943870433269500482","204638798406346384892846369281328323820","316985228487937045826095829180444593225","252832981531687790658910381698529584212","123511122463961890269690576855642546573","312361133828582635169485571953057980812","173149338262766379057357502605620829746","276581805518417680239536189777030013228","186218598706022058081730063496876269953","198352433005609788674191130466809543587","90482942856010028725887144726908552013","164958685952931045567645477355968326797","152955266187240236905107255039107117012","216120272784456589363400102365378175847","90468028853964083144486713443333209156","261355733975015752941832987158249278747","318778361901381407399566274317026885753","42442122235048186465294623388500555872","69786039314900708338901883127792693901","71665605468983036073064961941761205009","81432710485199014909120360231892479467","21742980303229483539702723903682045629","176618097086019918939405363120080754280","113594195426440869744898151521353746007","204058495341647236287007473939104878431","37374770382078008760845897291832443943","101568956218821199572251795043771601065","110402192925292474109106040086881679981","63104948434002235803656495892051740019","321730169488560219311677354522444693659","326898891085725700573124457321624414426","108587633537507210242609878158511307392","90682840682677985387813428516679084645","108180417795703642869675675535911908123","199699285408006981271611413440740476660","148937185499578925583120798016426602782","94107861436934199028827559493552940735","238886501064747486335445804309164122760","243665329870171902729278824418763565324","119670111697282584256778992327943520454","90523721575171680584632937890166616189","163902924130168291219812464728858924788","316317559606070688622855277289261347089","323301225839322486746809346784342858768","321423712545321396233570754754130738332","219181745405252598960747770906278369821","195107079502276062181311768922324632333"],"threshold":0.9}},{"signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/a80d535c842e6af589d0bac37e7fe4ba01193757","target":{"file":"services/src/main/java/org/fao/geonet/api/sld/SldApi.java","function":"doInTransaction"},"deprecated":false,"digest":{"function_hash":"211603273016664862970570431511369730824","length":101},"id":"CVE-2026-55864-46b3a687","signature_type":"Function"},{"target":{"file":"core/src/test/java/org/geonetwork/map/wms/SLDUtilTest.java","function":"getRessourceAsString"},"deprecated":false,"digest":{"function_hash":"115751545013251805102840970748556899350","length":319},"id":"CVE-2026-55864-4b7c4433","signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/a80d535c842e6af589d0bac37e7fe4ba01193757"},{"digest":{"length":319,"function_hash":"115751545013251805102840970748556899350"},"id":"CVE-2026-55864-50d80e6a","signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/17fdae28a5a51996bf5ff7f7e8236332c74eab77","target":{"file":"services/src/test/java/org/fao/geonet/api/sld/TextFileTest.java","function":"getRessourceAsString"},"deprecated":false},{"source":"https://github.com/geonetwork/core-geonetwork/commit/a80d535c842e6af589d0bac37e7fe4ba01193757","target":{"file":"domain/src/main/java/org/fao/geonet/domain/TextFile.java","function":"getMimeType"},"deprecated":false,"digest":{"function_hash":"114259964942061022230023706057174594751","length":48},"id":"CVE-2026-55864-53fa137e","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/a80d535c842e6af589d0bac37e7fe4ba01193757","target":{"file":"services/src/main/java/org/fao/geonet/api/sld/SldApi.java","function":"buildSLD"},"deprecated":false,"digest":{"function_hash":"71411136085320834542851708440201084787","length":1634},"id":"CVE-2026-55864-54705b59","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"127286846643796324057445032029593119332","length":467},"id":"CVE-2026-55864-56c13119","signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/a80d535c842e6af589d0bac37e7fe4ba01193757","target":{"file":"core/src/main/java/org/geonetwork/map/wms/SLDUtil.java","function":"generateFilter"}},{"deprecated":false,"digest":{"function_hash":"72928553926648783726289995052947744957","length":42},"id":"CVE-2026-55864-586394de","signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/17fdae28a5a51996bf5ff7f7e8236332c74eab77","target":{"file":"domain/src/main/java/org/fao/geonet/domain/TextFile.java","function":"getId"}},{"deprecated":false,"digest":{"function_hash":"331997787945061188212684933400727386584","length":591},"id":"CVE-2026-55864-5c3963a5","signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/a80d535c842e6af589d0bac37e7fe4ba01193757","target":{"function":"parseSLD","file":"core/src/main/java/org/geonetwork/map/wms/SLDUtil.java"}},{"target":{"file":"services/src/test/java/org/fao/geonet/api/sld/TextFileTest.java"},"deprecated":false,"digest":{"line_hashes":["293887679175503564912410229611355759269","132011427621510177957720920298564572788","73644819551824222549114437280795481631","189421667444223652755392335721000782740","313751950325581398225933286178455638960","165163034206322381510858732859067466477","69015682951699870389535251574710194748","45643547238413157192134095558028747030","49446125260669190997328072664129917431","94051016660490551528915923682470185790","72181268991292739082336224743451039957","78695375997332266951327385519272487233","12782406927874363333307913929319387024","319077961217554050820570525147175350604","144203900354893474803455479626037976878","235369793585066362972912335897820013689","37084083071821006382052723732406155040","190293894487891760734677925433493494579","222161447399712157735138786527119496014","105235123219039302005388801895215932909","132900189552747126603173037630575372708","309721454862768085795100871600537792259","100493525329382056017336713933642922924","14508846473141953640410754672690096847","287878205431751919338185061271474651589","38363727926910933070616475492398375071","128731060346185179688374130406933107820","73782367081866147016276348244811603991","23220360315909178012097525526732627040","196660393480565553166335787518276778141","23897139077148426062946116126679366238","81773894090010962639320957994523908637","216050653690495003126956469651286536808","55211131559377187891697742399384447948"],"threshold":0.9},"id":"CVE-2026-55864-643c466a","signature_type":"Line","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/17fdae28a5a51996bf5ff7f7e8236332c74eab77"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/a80d535c842e6af589d0bac37e7fe4ba01193757","target":{"file":"core/src/test/java/org/geonetwork/map/wms/SLDUtilTest.java","function":"testInsertFilterOneFilter"},"deprecated":false,"digest":{"length":83,"function_hash":"93601327875023676585566149919481911032"},"id":"CVE-2026-55864-69f7d6cb"},{"source":"https://github.com/geonetwork/core-geonetwork/commit/a80d535c842e6af589d0bac37e7fe4ba01193757","target":{"file":"domain/src/main/java/org/fao/geonet/domain/TextFile.java","function":"hashCode"},"deprecated":false,"digest":{"function_hash":"92456243850783841383479099731239804456","length":105},"id":"CVE-2026-55864-6b0c5d6e","signature_type":"Function","signature_version":"v1"},{"digest":{"line_hashes":["239563605235787450015697234460130120577"],"threshold":0.9},"id":"CVE-2026-55864-6eb78092","signature_type":"Line","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/a80d535c842e6af589d0bac37e7fe4ba01193757","target":{"file":"domain/src/main/java/org/fao/geonet/repository/TextFileRepository.java"},"deprecated":false},{"target":{"file":"services/src/main/java/org/fao/geonet/api/sld/SldApi.java"},"deprecated":false,"digest":{"line_hashes":["246775722694863304543052439994646792738","86187691467476160986910673994088773521","76408824260719012114215505825674063796","57350570019515259133048354260467195957","79773272891542298477370513566662928468","323133801853316362572671640557723023705","101342451507875448329613316300017290269","329542882430070224975296136999023406977","2030818696725395616191281231012615710","271441820274914616251599040940963554580","22519501349159993791111482982273077371","60482539788120651803411223628445585670","183671592004946579572570061303675715679","13534244810965933767005688427925504169","313167041752539926523789610194926274734","261635772364520436177585929225577431591","290673825524165055735122830649494236481","239999843592789559255149019764382151834","266753989713310563171742190622405876960","9451835625961385428111663619495061759","331678001854924032376929057369649687322","59882481835338409998445040029243403309","71475416988714983776392542159855255966","44061609305875894040874570971347550967","218305029893109990743514997334425772648","28924236110454414607161752255346388785","283474987086849236416823743071662477050","99890244376166474069683032156713192690","322150737032569976000192317191825465888","291856974975042786919063594456020227635","96490594018993559124342293395558632643","47267703854674778058295915140994226120","54276926154155860498743270700209682171","215412776031443449229289732514211263427","272750254626755944370875663621106064780","34627900365590935375250809147607892929","156514125821467785335538303251595229523","182063368679304476387381285160952157788","126134465371145346110877349949811208040","218953602817674219476495615301101553087","160359056130602290083717296518440338596","60389230589402414134157625810250887222","327729218308257464288689353676543720922","291467666352053730247359818870729108513","317363695465690144681406214364319726023","106056555805365614489430457768658922790","129932999060893572635844558694796638047","230753282103313190367513821812841707507","67862139342966692977100898534180474496","181558525727339859286574569847542258394","185837520317601601976710795635373877703","108878760442132376095306369542763343738","316294373194254514231807382672571110518","78526547530838581216963320083193283626","234087417021309242779621956223585216116","36789804589346694849707885380499258783","202308985032793095339337067375327289812","125429309019114537521203222506202764980","338042514971020083709936559248059197610","323263527526487803812305064817365351365","63009180210776809773602713214213693831","80783244148743915311191682435887202099","74214099684028979342459343603667794567","196505309385240160977526952944607665854","119779965377490186848511148183477218719","301992502063303716047436522542279357889","202125541466508616210066361206111372540","63247948836585321800754495433767098635","188890504346384241375379157611552879123","264095942406961063349102533235868710554","238820373152781826332077590378327125420","32239239012538705552018224954384768227","185357865923810276986127764035515538702","168521515746730548102232984248543207984","321155237825436473716367425731402504055","247968407731407226418065694610135681596","161279528591787124886780124465028665365","681698956957301921889315875472892731","69896685420139164583009609060354859904","239453478563380266342275670981039528945","79885548258115876063154245864817531807","24276534265689735371827511547319812905","200408536884284629234322928357932689273","67089698957749101186447443953320022850","25066793974691116667958926469464651489","333039045734392455984060983371636169583","177412406130046029744140460536954507541","129153112880656084758193700532615102754","8724865761906104244614269985756454304","263964526614078435726121742445629568316","124724314656842587171371047628370137769","218973093961254754024306296498253871645","698423295739822238508416820978713005","249347298517289650268988516574539016891","146221000018936580501756751351172723887","303632683445031575802035046564166095804","227440780039180156416903652283604348298","99506300592453175996909893526185717781","59984619606148944089838557444004382624","78361676162089997609376702013399077704","233766714171415753030361162664386066296","200761387956690283885132927114487030256","288320598332890101095156536406723045683","281827328127598301692267874403724941189","120145574778120553216275578719133988516","146500862740372477597422178380010969082","3614060552493318490041446158375971400","39760657841706557899924839954978441838","144248426805145027597907691992027126113","103022291154375784095709647496495884257","181374449057742861791651284459419739384","234437017828450587343486812260293269088","3554063898822293034441390827667599297","250802654404594030478814630575914678611","39106245542590915597006047912107279639","70826297641421738170426167816661909725","37054533746045029593619404444911447434","56499356175773250234852328679452754778","162452937370286206406571680122414130039","243973031890753916276109233881730126844","128681818647914873054557745937310227177","181049581693802410786336317213492605385","154029571693828973476660060795832006435","192379890264007112905644263218774231358","134488368419423018885530949962895009984","122885116904353122450795237080643104800","43458785606497295549456586224640249986","279757922984028151106148295561322138340","48949142992539409749314417038758786054","48230426951142668027285161006632021464","258833600958404048340923479355097531933","116283030320959991328361562528602838815","259075947320526953171517025659209435882","252317554873481501791077675874431233049","201329945261720682458116644257295232822","296188419234398697796825809789336621101","314232291796511598266787205740755704094","125294281947241972217845388864717952473","286827329003039622907634797416272680717","311931624779344516168549540081814428823","40505835607032282603516653554699918010","202390166362459623482640871794665925294","177782159862666756095263427578196280139","89862992901280994263150471342322420940","166026198501900897377329645948016025689","316532261856419761804448624178693403130","280420254655804542772291705744393750529","299010713626572158538742227802494533330","48173868689151455319775342237910577302","329084874355159457377049037699738782392","261694222685514002916154229884490288346","89134209018999424252307112540960186146","66533248738079393195125855612109541867","276002298618773972629503132766400518726","238291038570615758100635873422262131962","235046765250104962513819254381870160943","222040489326831165301727289128137771712","260018061683411854455733212974123176870","256380747060876842752861915615807526919","239311877454632293337954074171437491804","94827984687209719874880604250543187452","323025483643467796091283715196766400407","76768525319444805196808917116121432785","182036990354503934355846901213773617036","285461600679357803308516322274903908573","94653428675054980309118909748189182114","331264845804017515058794653286402668614","305944054955922761730273826001513030919","340596335274712040299211548091209685","104390616519261100111478355617917932018","159440448658022382958384406394366968331","118362409767795600394109382651534186668","206612502997605228849209213003695222005","90564376299194568031045251544930690204","308182147097101216632822336267053538872","296386330031353784127803293961746794529","199256364597105768414860441048643416769","238771299876389779375466758500878460883","261598953288081592017030510247261480147","172784348223900055062203984987847668004","1208042567944636025037442417017487628","79282967098280672145523509252741148431","145813386014918501382218246562876641401","223696213588782894597265505662063141184","263779967950968516110946828748737450880","56644464984221736666456358141522778220","304139668196542403060866155197142800993","53759656764237077174305212676646708140","140010026633987853558351979857105660750","19627675076032545384385670000169679080","98255250650320527798247613154106180147","111385941357156883573701393038589544332","119399293235553263844591948353947105213","312326307953756912811818503194210697468","74462997463045535672058317684669211625","312945155659685667272002362342213620900","15662500077849870666396951438208219630","337677474540035751387869417041567770667","158735169938715844490368757584986075754","229803271085293081748896685838533028808","50496827214114855633604492581389482191","65187611628796185153919080541783255356","314312461724438530438006170481784507582","92653077913075066447981987712859518470","229803271085293081748896685838533028808","212125256548935657776556361817755415367","93694531191931334237097825033990461200"],"threshold":0.9},"id":"CVE-2026-55864-6fe8d575","signature_type":"Line","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/a80d535c842e6af589d0bac37e7fe4ba01193757"},{"digest":{"function_hash":"9745250568904006840261568663858394145","length":74},"id":"CVE-2026-55864-72ba735c","signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/17fdae28a5a51996bf5ff7f7e8236332c74eab77","target":{"file":"domain/src/main/java/org/fao/geonet/domain/TextFile.java","function":"setContent"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["239563605235787450015697234460130120577"],"threshold":0.9},"id":"CVE-2026-55864-73163762","signature_type":"Line","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/17fdae28a5a51996bf5ff7f7e8236332c74eab77","target":{"file":"domain/src/main/java/org/fao/geonet/repository/TextFileRepository.java"}},{"signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/a80d535c842e6af589d0bac37e7fe4ba01193757","target":{"file":"services/src/test/java/org/fao/geonet/api/sld/TextFileTest.java","function":"getRessourceAsString"},"deprecated":false,"digest":{"length":319,"function_hash":"115751545013251805102840970748556899350"},"id":"CVE-2026-55864-73863797","signature_type":"Function"},{"id":"CVE-2026-55864-7eb5a8a8","signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/17fdae28a5a51996bf5ff7f7e8236332c74eab77","target":{"file":"core/src/main/java/org/geonetwork/map/wms/SLDUtil.java","function":"parseSLD"},"deprecated":false,"digest":{"length":591,"function_hash":"331997787945061188212684933400727386584"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/a80d535c842e6af589d0bac37e7fe4ba01193757","target":{"file":"services/src/main/java/org/fao/geonet/api/sld/SldApi.java","function":"downloadSLD"},"deprecated":false,"digest":{"function_hash":"260636542497050615902136860874208162344","length":981},"id":"CVE-2026-55864-8095fe5b"},{"deprecated":false,"digest":{"function_hash":"92456243850783841383479099731239804456","length":105},"id":"CVE-2026-55864-80b6ad99","signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/17fdae28a5a51996bf5ff7f7e8236332c74eab77","target":{"file":"domain/src/main/java/org/fao/geonet/domain/TextFile.java","function":"hashCode"}},{"signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/17fdae28a5a51996bf5ff7f7e8236332c74eab77","target":{"file":"core/src/test/java/org/geonetwork/map/wms/SLDUtilTest.java","function":"getRessourceAsString"},"deprecated":false,"digest":{"function_hash":"115751545013251805102840970748556899350","length":319},"id":"CVE-2026-55864-82b13746","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"93601327875023676585566149919481911032","length":83},"id":"CVE-2026-55864-851ab218","signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/17fdae28a5a51996bf5ff7f7e8236332c74eab77","target":{"file":"core/src/test/java/org/geonetwork/map/wms/SLDUtilTest.java","function":"testInsertFilterOneFilter"}},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["293887679175503564912410229611355759269","132011427621510177957720920298564572788","73644819551824222549114437280795481631","189421667444223652755392335721000782740","313751950325581398225933286178455638960","165163034206322381510858732859067466477","69015682951699870389535251574710194748","45643547238413157192134095558028747030","49446125260669190997328072664129917431","94051016660490551528915923682470185790","72181268991292739082336224743451039957","78695375997332266951327385519272487233","12782406927874363333307913929319387024","319077961217554050820570525147175350604","144203900354893474803455479626037976878","235369793585066362972912335897820013689","37084083071821006382052723732406155040","190293894487891760734677925433493494579","222161447399712157735138786527119496014","105235123219039302005388801895215932909","132900189552747126603173037630575372708","309721454862768085795100871600537792259","100493525329382056017336713933642922924","14508846473141953640410754672690096847","287878205431751919338185061271474651589","38363727926910933070616475492398375071","128731060346185179688374130406933107820","73782367081866147016276348244811603991","23220360315909178012097525526732627040","196660393480565553166335787518276778141","23897139077148426062946116126679366238","81773894090010962639320957994523908637","216050653690495003126956469651286536808","55211131559377187891697742399384447948"]},"id":"CVE-2026-55864-855d420d","signature_type":"Line","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/a80d535c842e6af589d0bac37e7fe4ba01193757","target":{"file":"services/src/test/java/org/fao/geonet/api/sld/TextFileTest.java"}},{"signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/17fdae28a5a51996bf5ff7f7e8236332c74eab77","target":{"file":"core/src/main/java/org/geonetwork/map/wms/SLDUtil.java","function":"generateFilter2"},"deprecated":false,"digest":{"function_hash":"334377049780721969950628799579329661914","length":2865},"id":"CVE-2026-55864-8f38cebb","signature_type":"Function"},{"id":"CVE-2026-55864-8f6ac5cb","signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/17fdae28a5a51996bf5ff7f7e8236332c74eab77","target":{"file":"domain/src/main/java/org/fao/geonet/domain/TextFile.java","function":"getMimeType"},"deprecated":false,"digest":{"function_hash":"114259964942061022230023706057174594751","length":48}},{"id":"CVE-2026-55864-96ba7db7","signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/a80d535c842e6af589d0bac37e7fe4ba01193757","target":{"file":"services/src/main/java/org/fao/geonet/api/sld/SldApi.java","function":"getSLDTestingForm"},"deprecated":false,"digest":{"function_hash":"269195830215065735511500931226718055630","length":1132}},{"target":{"file":"core/src/main/java/org/geonetwork/map/wms/SLDUtil.java","function":"generateCustomFilter"},"deprecated":false,"digest":{"function_hash":"96118682959664989890107015393229168392","length":414},"id":"CVE-2026-55864-9857f815","signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/17fdae28a5a51996bf5ff7f7e8236332c74eab77"},{"deprecated":false,"digest":{"function_hash":"102648237047940318070360501678830814764","length":227},"id":"CVE-2026-55864-9fb6cd5a","signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/a80d535c842e6af589d0bac37e7fe4ba01193757","target":{"file":"domain/src/main/java/org/fao/geonet/domain/TextFile.java","function":"equals"}},{"signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/a80d535c842e6af589d0bac37e7fe4ba01193757","target":{"file":"services/src/test/java/org/fao/geonet/api/sld/TextFileTest.java","function":"testStoreLoadFile"},"deprecated":false,"digest":{"function_hash":"280452235340325397626327566985509016274","length":433},"id":"CVE-2026-55864-a361bbd2","signature_type":"Function"},{"id":"CVE-2026-55864-a531176d","signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/17fdae28a5a51996bf5ff7f7e8236332c74eab77","target":{"file":"domain/src/main/java/org/fao/geonet/domain/TextFile.java","function":"setId"},"deprecated":false,"digest":{"function_hash":"222099537695788875087332916584207222424","length":69}},{"source":"https://github.com/geonetwork/core-geonetwork/commit/a80d535c842e6af589d0bac37e7fe4ba01193757","target":{"function":"insertFilter","file":"core/src/main/java/org/geonetwork/map/wms/SLDUtil.java"},"deprecated":false,"digest":{"length":1230,"function_hash":"130860898251829025597628800911774067605"},"id":"CVE-2026-55864-ab269789","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/a80d535c842e6af589d0bac37e7fe4ba01193757","target":{"file":"domain/src/main/java/org/fao/geonet/domain/TextFile.java","function":"setContent"},"deprecated":false,"digest":{"length":74,"function_hash":"9745250568904006840261568663858394145"},"id":"CVE-2026-55864-b3dd8367","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/17fdae28a5a51996bf5ff7f7e8236332c74eab77","target":{"file":"services/src/main/java/org/fao/geonet/api/sld/SldApi.java","function":"buildSLD"},"deprecated":false,"digest":{"function_hash":"71411136085320834542851708440201084787","length":1634},"id":"CVE-2026-55864-b4972c1a"},{"signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/a80d535c842e6af589d0bac37e7fe4ba01193757","target":{"file":"services/src/main/java/org/fao/geonet/api/sld/SldApi.java","function":"getSLD"},"deprecated":false,"digest":{"function_hash":"17659231436610994127479418384910974668","length":268},"id":"CVE-2026-55864-b5c4bf83","signature_type":"Function"},{"source":"https://github.com/geonetwork/core-geonetwork/commit/17fdae28a5a51996bf5ff7f7e8236332c74eab77","target":{"function":"getContent","file":"domain/src/main/java/org/fao/geonet/domain/TextFile.java"},"deprecated":false,"digest":{"function_hash":"334918673423831439076721161637136027833","length":47},"id":"CVE-2026-55864-b9df0723","signature_type":"Function","signature_version":"v1"},{"id":"CVE-2026-55864-bb5d71f4","signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/17fdae28a5a51996bf5ff7f7e8236332c74eab77","target":{"file":"core/src/main/java/org/geonetwork/map/wms/SLDUtil.java","function":"insertFilter"},"deprecated":false,"digest":{"function_hash":"130860898251829025597628800911774067605","length":1230}},{"source":"https://github.com/geonetwork/core-geonetwork/commit/a80d535c842e6af589d0bac37e7fe4ba01193757","target":{"file":"core/src/test/java/org/geonetwork/map/wms/SLDUtilTest.java"},"deprecated":false,"digest":{"line_hashes":["114117534410504301851715122509263597376","195551350438826100931698805486561282089","106085472016661762234006235963813283151","82976826070969771570240699643284715669","209102055888134120489118768437669425925","251474849956871430222956339842532512049","192342195924009364938725875485499025532","311193267539525239444874301154398958682","332651504201352228441332697594806529174","34571661431712552071108954035901256704","321806927767022756922037650800725683694","25499878783826141752390822926967088654","26523175603414947118762072520680699269","266387293933747752353984224673782981395","286123368357626367760450806854470039473","55741034603154321435872557494368803019","154950949010644264994421081700331225461","325869990349213467101686018946111339204","190968275217108333502307195903079097334","114651804611043745392574884536079645074","128897012381562519569158665074183730622","67926242294007002552966844653804253975","190048341248991470445669279633906648661","79211901082191200274069464658829035083","251178334077994625895221003398636408385","215574044071229072066425013630950784186","113077834215232978531505057466295758125","247141280890706993151112091147357926432","7540960361150873232730254690594003679","2425560530103402046958954611682453135","255418700387646931265839391552863270388","20325414725039373197403048885668228086","336300890334827861921334464942339491881","253076738583680824877308282997950389996","283738943968731296497709599992283045725","20176358348566429337349455136432247838","232051411032160324984408566276816234193","320511281759871077325098805968729148169","310709307892951126145689709469586405816","311893499725206950489295312882370639648","237239586753803678334930508769373292919","198120794560711417540846227404135753240","311435502196584269283538208646293528450","17684618108937797004042389538276961933","299174773295378581975543703678238879803","17229188153065092737281291675838254983","141612298785903095790268724806284486752","171827112711485361736898885048738028579","87268005499804037138005612531391828796","133907246444033657666799434037450871622","309768774033475377791116578883040240148","260282355746893773565465844300334155031","128731060346185179688374130406933107820","73782367081866147016276348244811603991","23220360315909178012097525526732627040","196660393480565553166335787518276778141","23897139077148426062946116126679366238","81773894090010962639320957994523908637","216050653690495003126956469651286536808","55211131559377187891697742399384447948"],"threshold":0.9},"id":"CVE-2026-55864-bfd62a63","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"177603664070126449897660713223245060330","length":75},"id":"CVE-2026-55864-d0b34758","signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/17fdae28a5a51996bf5ff7f7e8236332c74eab77","target":{"file":"domain/src/main/java/org/fao/geonet/domain/TextFile.java","function":"setMimeType"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/17fdae28a5a51996bf5ff7f7e8236332c74eab77","target":{"file":"services/src/main/java/org/fao/geonet/api/sld/SldApi.java","function":"doInTransaction"},"deprecated":false,"digest":{"function_hash":"211603273016664862970570431511369730824","length":101},"id":"CVE-2026-55864-d4bf0525"},{"source":"https://github.com/geonetwork/core-geonetwork/commit/17fdae28a5a51996bf5ff7f7e8236332c74eab77","target":{"file":"core/src/test/java/org/geonetwork/map/wms/SLDUtilTest.java","function":"testInsertFilterNoFilter"},"deprecated":false,"digest":{"function_hash":"271900456334427932971486878579619657740","length":87},"id":"CVE-2026-55864-f1e287ce","signature_type":"Function","signature_version":"v1"},{"digest":{"function_hash":"246513333920524978336150851698239873461","length":314},"id":"CVE-2026-55864-f29519fc","signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/17fdae28a5a51996bf5ff7f7e8236332c74eab77","target":{"file":"core/src/main/java/org/geonetwork/map/wms/SLDUtil.java","function":"getGetStyleRequest"},"deprecated":false},{"target":{"file":"core/src/main/java/org/geonetwork/map/wms/SLDUtil.java","function":"getGetStyleRequest"},"deprecated":false,"digest":{"function_hash":"246513333920524978336150851698239873461","length":314},"id":"CVE-2026-55864-f5401ab0","signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/a80d535c842e6af589d0bac37e7fe4ba01193757"},{"target":{"file":"domain/src/main/java/org/fao/geonet/domain/TextFile.java"},"deprecated":false,"digest":{"line_hashes":["194740637011336965727718709968854492793","303859777833874310267214979426097814406","283807380745538816695065479805759812950","184533254809952113479298032624168378399","155860173578133800467812539921580651354","109464609856993549010063911593775764396","154469837094855996101336491801446908218","182078691846660480950379347725253268814","216963711989439521112464542040066127453","250385700968994339131922918877206610157","303354390709949702585544398619587262623","269857746546602879753344805122957729573","223451701720744063347143894126925141412","120449617037190001689071931577597901894","211556261702526128550921918311783508479","30254432889269814389489598399385837943","56858558720058203935730217287616218706","122407176370877715577886580215386090344","232557015623104500559178300712358566095","52199287832790974517324771359845876304","228706872138523071719111359471028958822","265494826366737138737065213479725181075","307758466936935238827589671019357311237","19157693749643335697343545359381911135","125905990175162489451146257486984586847","8888876875206702262045991526752393294","312476675612007451419467259172092683279","74491895525277437260119178855921913994","178390785272206436082193163085597120254","195764946485915007563963189643879392846","291676225196232915141047999233702675323","186014781422951863622494938123314896319","163881289564120480120808345124991159604","192627790185323706784131195480199633737","31352773886132592690790728576975176522","302810007059846679564081230637310234025","95555211369485955823747271637152861429","231242589017948284244818877403793353232","86107178883482477796183255644807424038","108967536142899337231221299784849615086","127370091314331599565222401401325990118","6551398324335507226871050947159029892","252476436305721638948021204498446523555","81918827944196557548266919009313384551","19325045425118134016359841627541806515","267135572790984736750693392512132247272","262574254091446936911148087084071274188","170041345516489074723633938377075580899","105818225280384840872150534342114939602","177371159785373595280989959858211065773","158412636905502221177557691818069619816","57689546501275704430573840570480868343","269870415626577228709154575997689934804"],"threshold":0.9},"id":"CVE-2026-55864-f815cae5","signature_type":"Line","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/a80d535c842e6af589d0bac37e7fe4ba01193757"},{"signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/17fdae28a5a51996bf5ff7f7e8236332c74eab77","target":{"file":"core/src/main/java/org/geonetwork/map/wms/SLDUtil.java","function":"generateFilter"},"deprecated":false,"digest":{"function_hash":"127286846643796324057445032029593119332","length":467},"id":"CVE-2026-55864-f8cafb91","signature_type":"Function"},{"target":{"file":"core/src/test/java/org/geonetwork/map/wms/SLDUtilTest.java","function":"testInsertFilter"},"deprecated":false,"digest":{"function_hash":"315211220078391183783840218616564072829","length":791},"id":"CVE-2026-55864-fd619e2d","signature_type":"Function","signature_version":"v1","source":"https://github.com/geonetwork/core-geonetwork/commit/a80d535c842e6af589d0bac37e7fe4ba01193757"},{"source":"https://github.com/geonetwork/core-geonetwork/commit/17fdae28a5a51996bf5ff7f7e8236332c74eab77","target":{"file":"services/src/main/java/org/fao/geonet/api/sld/SldApi.java","function":"getSLD"},"deprecated":false,"digest":{"function_hash":"17659231436610994127479418384910974668","length":268},"id":"CVE-2026-55864-ffae47c6","signature_type":"Function","signature_version":"v1"}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N"}]}