Modernizing GeoNetwork 4: Join the initiative to migrate to Spring 7

The GeoNetwork metadata engine currently relies on the Spring 5 framework. However, this version is reaching its End-of-Life. Without official security patches, platforms are exposed to increased vulnerabilities at a time when automated vulnerability detection is rapidly accelerating.

Given this situation, collective action is required to maintain the security and stability of production platforms.

Why doesn't GeoNetwork 5 address the immediate need?

The GeoNetwork community is doing remarkable work on GeoNetwork 5, an ambitious overhaul of the software. However, current platform administrators face two realities:

A longer timeline: the overall development of GeoNetwork 5 still requires significant funding to reach completion.
Lack of direct backward compatibility: GeoNetwork 5 is not a seamless replacement for GeoNetwork 4 instances currently in production.

Waiting for version 5 would therefore leave existing deployments vulnerable for an unacceptably long period.

A pragmatic path: evolving GeoNetwork 4

To address the operational constraints of GeoNetwork 4 users, we have identified a shorter, secure path: migrating from Spring 5 to Spring 7 directly within the GeoNetwork 4 codebase.

This approach offers several major advantages:

Service continuity: no major architectural migration project for your teams.
Enhanced security: a direct move to an up-to-date, maintained, and high-performance framework.
Rapid deployment: availability possible within a few months of budget finalization.

The ultimate benefit: this migration—accompanied by an update to the framework's software dependencies—will once again provide access to security patches as soon as they are released.

A crowdfunding initiative already well underway!

Following the success of the participatory campaign for GeoServer 3, we have launched a crowdfunding appeal targeting the institutions, companies, and public bodies that rely on GeoNetwork.

The total funding required for this transition is €85,000. Momentum is strong: thanks to the mobilization of key ecosystem players (Camptocamp, IGN, CRAIG, GéoBretagne, Géo2France, Lille Métropole, LVGL Saarland), we have already secured €55,000 in funding pledges!

We therefore need another €30,000 to finalize the budget and begin development. By pooling this final effort, each organization can contribute according to its means while ensuring the long-term viability of its own infrastructure.

How can you contribute and help us cross the finish line?

This secure version of GeoNetwork 4 could be made available to everyone by the spring of 2027, provided the remaining funding is raised by the end of the year.

If you use GeoNetwork in a production environment and wish to secure your deployments in the short term, now is the time to join us and bring this project to fruition.