CVE-2026-114582

The Django web framework (versions 6.1 before 6.1.3 , 6.0 before 6.0.10 , and 5.2 before 5.2.19 ) contains a vulnerability where the django.contrib.gis.gdal.SpatialReference component fails to restrict GDAL’s file and network access when parsing string input. This oversight allows an attacker to ...