Django RasterField - SQL Injection

Django 6.0.2, 5.2.11, and 4.2.28 contains a SQL injection caused by improper sanitization of the band index parameter in RasterField on PostGIS, letting remote attackers inject SQL, exploit requires crafted input. id: CVE-2026-1207 info: name: Django RasterField - SQL Injection author: omarkurt...

CVE-2026-3909

CVE-2026-3909 Chromium 브라우저 PoC 이 저장소는 CVE-2026-3909 에 대한 개념 증명PoC으로, Chromium 브라우저에서 안정적으로 트리거할 수 있습니다. 배경 이 취약점에 대한 공식 Skia 수정본은 단순화된 데모 테스트 케이스만 포함하고 있습니다: 공식 데모 : AtlasOobTest.cpp 이는 실제 Chromium 환경에서 실행할 수 없습니다. 공식 데모는 의도적으로 제한되었으며 핵심 트리거 조건이 누락되었습니다. 이 PoC는 공식 데모를 기반으로 구축되었으며, 실제 Chromium 브라...

Fedora 46 : libcupsfilters (2026-5cce49502a)

The remote Fedora 46 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5cce49502a advisory. Automatic update for libcupsfilters-2.2.1-3.fc46. Changelog Fri Sep 4 2026 Zdenek Dohnal - 1:2.2.1-3 - fix multiple copies not working for raster drivers...

EUVD-2026-63659

Mailpit: Thumbnail generation decodes unbounded image dimensions before scaling...

CVE-2026-78078: Unrestricted Upload of File with Dangerous Type

Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate 2.2.10 - Image uploads previously validated only file extension and basic size parameters. Non-image files disguised with raster extensions could be uploaded. Added strict MIME verification an...

PYSEC-2026-3663 GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile data

Summary Multiple GeoLens read/link endpoints authorized only the resource named in the request URL a map, a VRT, a source dataset, an AI request and failed to re-authorize a second, caller-influenced dataset that the request reached through a relationship, layer reference, mosaic source, or reque...

GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile data

SummaryMultiple GeoLens read/link endpoints authorized only the resource named in therequest URL a map, a VRT, a source dataset, an AI request and failed tore-authorize a second, caller-influenced dataset that the request reachedthrough a relationship, layer reference, mosaic source, or request...

PT-2026-80638

Summary Multiple GeoLens read/link endpoints authorized only the resource named in the request URL a map, a VRT, a source dataset, an AI request and failed to re-authorize a second, caller-influenced dataset that the request reached through a relationship, layer reference, mosaic source, or reque...

GHSA-P23G-MVHJ-JH3J GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile data

Summary Multiple GeoLens read/link endpoints authorized only the resource named in the request URL a map, a VRT, a source dataset, an AI request and failed to re-authorize a second, caller-influenced dataset that the request reached through a relationship, layer reference, mosaic source, or reque...

MGASA-2026-0324 Updated python-django packages fix security vulnerabilities

The updated package fixes security vulnerabilities: Signed cookie salt namespace collision in django.http.HttpRequest.getsignedcookie. CVE-2026-6873 Potential unencrypted email transmission via STARTTLS in the SMTP backend. CVE-2026-7666 Potential exposure of private data via case-sensitive...

SUSE CVE-2026-15307

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango spatial lookups optimistically parse the right-hand-side value as a raster by passing it to the django.contrib.gis.gdal.GDALRaster constructor. Any value used in a spatial lookup against a GeometryField or...

CVE-2026-71202

The raster Rust crate's crop function src/editor.rs clamps the crop width/height against source dimensions but only clamps the offsetx/offsety parameters against 0, never against the source width/height...

CVE-2026-71202

A flaw was found in the raster Rust crate. A remote attacker could exploit an integer underflow vulnerability in the image cropping function by sending a specially crafted request. This could lead to a denial of service DoS, causing the application to crash and become unavailable. Mitigation...

CVE-2026-71202

The CVE-2026-71202 entry concerns the raster Rust crate. The crop() implementation clamps width/height but only clamps offset_x/offset_y against 0, not against the source width/height. If an offset exceeds the source dimension, width2 - offset_x underflows to a negative i32, which is then cast to...

EUVD-2026-53199

The raster Rust crate's crop function src/editor.rs clamps the crop width/height against source dimensions but only clamps the offsetx/offsety parameters against 0, never against the source width/height. When an offset exceeds the corresponding source dimension, width2 - offsetx or the height...

CVE-2026-71202 raster - Integer Underflow in crop() Offset Handling Causes Capacity-Overflow Panic

The raster Rust crate's crop function src/editor.rs clamps the crop width/height against source dimensions but only clamps the offsetx/offsety parameters against 0, never against the source width/height...

CVE-2026-71202 raster - Integer Underflow in crop() Offset Handling Causes Capacity-Overflow Panic

The raster Rust crate's crop function src/editor.rs clamps the crop width/height against source dimensions but only clamps the offsetx/offsety parameters against 0, never against the source width/height...

PT-2026-68040

Name of the Vulnerable Software and Affected Versions raster Rust crate affected versions not specified Description The crop function src/editor.rs fails to properly clamp the offset x and offset y parameters against the source width and height, only clamping them against 0. If an offset exceeds...

CVE-2026-71202: Integer Underflow (Wrap or Wraparound)

The raster Rust crate's crop function src/editor.rs clamps the crop width/height against source dimensions but only clamps the offsetx/offsety parameters against 0, never against the source width/height...

GHSA-WVQV-FJ8W-QMHM Django GeoDjango spatial lookups allow file writes and outbound requests through GDAL raster parsing

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango spatial lookups optimistically parse the right-hand-side value as a raster by passing it to the django.contrib.gis.gdal.GDALRaster constructor. Any value used in a spatial lookup against a GeometryField or...