{"uuid": "264995dc-aac5-4d10-81e3-4f2bd4eb8d2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15307", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3mtk5p7prtq2i", "content": "\ud83d\udea8 CVE-2026-15307 (High) affects Django 5.2.x before 5.2.17 and 6.0.x before 6.0.8. \n\nGeoDjango passes spatial lookup values to GDALRaster without validation. A crafted value can enable arbitrary file writes, SSRF, and potentially RCE. Upgrade to 5.2.17 or 6.0.8. \n\nMore details:  buff.ly/XYmO5Uh", "creation_timestamp": "2026-08-20T21:08:03.800882Z"}