Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Django Software Foundation security patch release for CVE-2026-15307

Security Patch Release
First reported
Last updated
Happening score
H score 39
1 unique sources, 1 articles

Summary

Hide ▲

Django Software Foundation shipped Django 6.0.8 and 5.2.17 on August 4 to fix four CVEs, including CVE-2026-15307 in GeoDjango. The release closes a path where a staff user with view permission on a registered spatial model could write a file to disk and, on some setups, run code. Operators should upgrade to 6.0.8 or 5.2.17 now; the same fixes also landed on the main branch and the Django 6.1 release-candidate branch.

Related Happenings

OpenWrt security patch release for CVE-2026-53921

Security Patch Release
H score37 First: 28.07.2026 15:56 Last: 28.07.2026 15:56 Sources 1

About this happening: OpenWrt released 24.10.8 and 25.12.5 to close a critical DHCPv6 stack overflow in odhcpd, reducing the risk of root code execution on exposed routers. The...

Open Happening

Zoom security patch release for CVE-2026-53412

Security Patch Release
H score43 First: 15.07.2026 23:16 Last: 15.07.2026 23:16 Sources 1

About this happening: Zoom released Windows security patches covering CVE-2026-53412 and three additional flaws across Zoom Workplace, Windows VDI, Zoom Rooms, Contact Center, a...

Open Happening

LiteLLM endpoint-hardening patch release (CVE-2026-42271)

Security Patch Release
H score59 First: 09.06.2026 09:26 Last: 09.06.2026 09:26 Sources 1

About this happening: BerriAI released LiteLLM 1.83.7, hardening access to the vulnerable MCP test endpoints that accepted full server configurations. The update now requires the PROXY_ADMIN*...

Open Happening

WP Maps Pro 6.1.1 security patch for CVE-2026-8732

Security Patch Release
H score49 First: 31.05.2026 17:06 Last: 31.05.2026 17:06 Sources 1

About this happening: WP Maps Pro 6.1.1 was released to fix CVE-2026-8732, giving WordPress administrators a patch for a flaw that enabled unauthenticated administrator-account creation. Th...

Open Happening

PackageKit 1.3.5 security update (CVE-2026-41651)

Security Patch Release
H score31 First: 24.04.2026 20:28 Last: 24.04.2026 20:28 Sources 1

About this happening: PackageKit version 1.3.5 was released to fix CVE-2026-41651, closing a local privilege-escalation path that could let Linux users gain root permissions. The update...

Open Happening

Timeline

  1. 05.08.2026 17:27 2 articles · 2h ago

    Django releases 6.0.8 and 5.2.17 to fix GeoDjango CVE-2026-15307

    Mitigation Patch Update

    Django shipped 6.0.8 and 5.2.17 on August 4 to address CVE-2026-15307 in GeoDjango, where spatial lookups accepted str and dict values and passed them to GDALRaster when they appeared to represent rasters. The fix disallows dict values and strings that are not valid GEOSGeometry values in spatial lookups, while direct model-field assignments still accept those types.

    Show sources
    Open in new tab