[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-15830":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T11:35:27.363Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":27,"aliases":28,"duplicate_of":9,"upstream":33,"downstream":34,"duplicates":47,"related":48,"reserved_at":9,"published_at":54,"modified_at":55,"state":56,"summary":57,"references_raw":66,"kevs":118,"epss":119,"epss_history":122,"metrics":261,"affected":281},"CVE-2026-15830","An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8.\nGeoDjango's `django.contrib.gis.geos.GEOSGeometry` is subject to a potential denial-of-service when parsing deeply nested `GEOMETRYCOLLECTION` objects supplied as well-known text (WKT), well-known binary (WKB), or hex-encoded WKB, which triggers unbounded recursion and a segmentation fault in the underlying GEOS library. Spatial field lookups and the `django.contrib.gis.forms.GeometryField` form field are also affected.\nEarlier, unsupported Django series (such as 5.1.x, 5.0.x, and 4.2.x) were not evaluated and may also be affected.\nDjango would like to thank Andrew MacPherson and kimchunbok_ for reporting this issue.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-674","Uncontrolled Recursion","The product does not properly control the amount of recursion that takes place,  consuming excessive resources, such as allocated memory or the program stack.","weakness","Draft","Class",[19,23],{"id":20,"name":21,"techniques":22},"CAPEC-230","Serialized Data with Nested Payloads",[],{"id":24,"name":25,"techniques":26},"CAPEC-231","Oversized Serialized Data Payloads",[],[],[29,30,31,32],"UBUNTU-CVE-2026-15830","DEBIAN-CVE-2026-15830","PYSEC-2026-3717","BIT-django-2026-15830",[],[35,37,39,41,43,45],{"_key":36},"SUSE-SU-2026:3503-1",{"_key":38},"OPENSUSE-SU-2026:11464-1",{"_key":40},"OPENSUSE-SU-2026:11465-1",{"_key":42},"OPENSUSE-SU-2026:11491-1",{"_key":44},"OPENSUSE-SU-2026:21543-1",{"_key":46},"MGASA-2026-0339",[],[49,50,51,52,53],{"_key":36},{"_key":38},{"_key":40},{"_key":42},{"_key":44},"2026-08-04T15:48:34.075Z","2026-08-04T17:21:28.167Z","Analyzed",{"cisa_kev":58,"cisa_ransomware":58,"cisa_vendor":9,"epss_severity":59,"epss_score":60,"severity":61,"severity_score":62,"severity_version":63,"severity_source":64,"severity_vector":65,"severity_status":56},false,"low",0.01255,"medium",6.9,"v4.0","cve.org","CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",[67,78,84,88,92,96,100,105,109,113],{"url":68,"sources":69,"tags":73},"https://docs.djangoproject.com/en/dev/releases/security/",[64,70,71,72],"nvd","osv_ubuntu","osv_pypi",[74,75,76,77],"Vendor Advisory","REPORT","Patch","FIX",{"url":79,"sources":80,"tags":81},"https://groups.google.com/g/django-announce",[64,70,71,72],[82,75,83],"Mailing List","ARTICLE",{"url":85,"sources":86,"tags":87},"https://github.com/django/django/commit/d2e59b77fe18de318a8272c2a7bbc798d84d1d0d",[64,70,71,72],[76,75,77],{"url":89,"sources":90,"tags":91},"https://github.com/django/django/commit/9e4a3f186b6b07b483bfd9195ea06734663fcd06",[64,70,71,72],[76,75,77],{"url":93,"sources":94,"tags":95},"https://github.com/django/django/commit/6af5da31775417c610dbf9c3f1b5b8333d42daf6",[64,70,71,72],[76,75,77],{"url":97,"sources":98,"tags":99},"https://github.com/django/django/commit/ba80833fa656dd09660b97c4429331067db1b080",[64,70,71,72],[76,75,77],{"url":101,"sources":102,"tags":103},"https://www.djangoproject.com/weblog/2026/aug/04/security-releases/",[64,70,71,72],[74,75,104],"Advisory",{"url":106,"sources":107,"tags":108},"https://ubuntu.com/security/CVE-2026-15830",[71],[75],{"url":110,"sources":111,"tags":112},"https://www.cve.org/CVERecord?id=CVE-2026-15830",[71],[75],{"url":114,"sources":115,"tags":117},"https://security-tracker.debian.org/tracker/CVE-2026-15830",[116],"osv_debian",[104],[],{"date":120,"score":60,"percentile":121},"2026-09-19",0.68173,[123,127,130,133,136,139,142,145,148,151,154,157,160,163,166,169,172,175,178,181,185,188,191,194,197,200,203,206,209,212,215,218,221,224,227,230,233,236,239,242,245,248,251,254,257,260],{"date":124,"score":125,"percentile":126},"2026-08-05",0.00522,0.41387,{"date":128,"score":125,"percentile":129},"2026-08-06",0.41426,{"date":131,"score":125,"percentile":132},"2026-08-07",0.41472,{"date":134,"score":125,"percentile":135},"2026-08-08",0.41478,{"date":137,"score":125,"percentile":138},"2026-08-09",0.41461,{"date":140,"score":125,"percentile":141},"2026-08-10",0.41467,{"date":143,"score":125,"percentile":144},"2026-08-11",0.41549,{"date":146,"score":125,"percentile":147},"2026-08-12",0.41643,{"date":149,"score":125,"percentile":150},"2026-08-13",0.41679,{"date":152,"score":125,"percentile":153},"2026-08-14",0.41748,{"date":155,"score":125,"percentile":156},"2026-08-15",0.41867,{"date":158,"score":125,"percentile":159},"2026-08-16",0.41894,{"date":161,"score":125,"percentile":162},"2026-08-17",0.41865,{"date":164,"score":125,"percentile":165},"2026-08-18",0.41893,{"date":167,"score":125,"percentile":168},"2026-08-19",0.42096,{"date":170,"score":125,"percentile":171},"2026-08-20",0.42154,{"date":173,"score":125,"percentile":174},"2026-08-21",0.42192,{"date":176,"score":125,"percentile":177},"2026-08-22",0.42209,{"date":179,"score":125,"percentile":180},"2026-08-23",0.42079,{"date":182,"score":183,"percentile":184},"2026-08-24",0.01028,0.61017,{"date":186,"score":60,"percentile":187},"2026-08-25",0.67235,{"date":189,"score":60,"percentile":190},"2026-08-26",0.67293,{"date":192,"score":60,"percentile":193},"2026-08-27",0.67327,{"date":195,"score":60,"percentile":196},"2026-08-28",0.66875,{"date":198,"score":60,"percentile":199},"2026-08-29",0.66901,{"date":201,"score":60,"percentile":202},"2026-08-30",0.67393,{"date":204,"score":60,"percentile":205},"2026-08-31",0.67405,{"date":207,"score":60,"percentile":208},"2026-09-01",0.67425,{"date":210,"score":60,"percentile":211},"2026-09-02",0.6746,{"date":213,"score":60,"percentile":214},"2026-09-03",0.67482,{"date":216,"score":60,"percentile":217},"2026-09-04",0.67506,{"date":219,"score":60,"percentile":220},"2026-09-05",0.67058,{"date":222,"score":60,"percentile":223},"2026-09-06",0.67548,{"date":225,"score":60,"percentile":226},"2026-09-07",0.67551,{"date":228,"score":60,"percentile":229},"2026-09-08",0.67563,{"date":231,"score":60,"percentile":232},"2026-09-09",0.6772,{"date":234,"score":60,"percentile":235},"2026-09-10",0.67737,{"date":237,"score":60,"percentile":238},"2026-09-11",0.67761,{"date":240,"score":60,"percentile":241},"2026-09-12",0.67816,{"date":243,"score":60,"percentile":244},"2026-09-13",0.67813,{"date":246,"score":60,"percentile":247},"2026-09-14",0.67832,{"date":249,"score":60,"percentile":250},"2026-09-15",0.67888,{"date":252,"score":60,"percentile":253},"2026-09-16",0.67999,{"date":255,"score":60,"percentile":256},"2026-09-17",0.68054,{"date":258,"score":60,"percentile":259},"2026-09-18",0.6814,{"date":120,"score":60,"percentile":121},[262,270,274,277,279],{"source":64,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":263,"cvss_v4_0":269},{"baseScore":264,"baseSeverity":265,"vectorString":266,"impactScore":267,"exploitabilityScore":268},5.3,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",2.3,10,{"baseScore":62,"baseSeverity":265,"vectorString":65,"impactScore":9,"exploitabilityScore":9},{"source":70,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":271,"cvss_v4_0":272},{"baseScore":264,"baseSeverity":265,"vectorString":266,"impactScore":267,"exploitabilityScore":268},{"baseScore":62,"baseSeverity":265,"vectorString":273,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",{"source":71,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":275,"cvss_v4_0":276},{"baseScore":264,"baseSeverity":9,"vectorString":266,"impactScore":267,"exploitabilityScore":268},{"baseScore":62,"baseSeverity":9,"vectorString":65,"impactScore":9,"exploitabilityScore":9},{"source":116,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":278},{"baseScore":62,"baseSeverity":9,"vectorString":273,"impactScore":9,"exploitabilityScore":9},{"source":72,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":280},{"baseScore":62,"baseSeverity":9,"vectorString":273,"impactScore":9,"exploitabilityScore":9},[282,299,307,324],{"ecosystem":283,"name":284,"vendor":285,"product":284,"cpe_part":9,"purl_type":286,"purl_namespace":285,"purl_name":284,"source":9,"versions":287},"Debian","python-django","debian","deb",[288,292,293,294,295],{"version":289,"is_range":290,"range_type":291,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",true,"ecosystem",{"version":289,"is_range":290,"range_type":291,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":289,"is_range":290,"range_type":291,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":289,"is_range":290,"range_type":291,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":296,"is_range":290,"range_type":291,"version_start":9,"version_start_type":9,"version_end":297,"version_end_type":298,"fixed_in":9},"lt3:5_2_17_1","3:5.2.17-1","excluding",{"ecosystem":300,"name":284,"vendor":301,"product":284,"cpe_part":9,"purl_type":286,"purl_namespace":301,"purl_name":284,"source":9,"versions":302},"Ubuntu","ubuntu",[303,304,305,306],{"version":289,"is_range":290,"range_type":291,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":289,"is_range":290,"range_type":291,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":289,"is_range":290,"range_type":291,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":289,"is_range":290,"range_type":291,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":308,"vendor":309,"product":308,"cpe_part":310,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":311},"django","djangoproject","a",[312,317,320],{"version":313,"is_range":290,"range_type":64,"version_start":314,"version_start_type":315,"version_end":316,"version_end_type":298,"fixed_in":9},"gte5.2_lt5.2.17","5.2","including","5.2.17",{"version":318,"is_range":290,"range_type":319,"version_start":9,"version_start_type":9,"version_end":316,"version_end_type":298,"fixed_in":9},"lt5.2.17","cpe",{"version":321,"is_range":290,"range_type":319,"version_start":322,"version_start_type":315,"version_end":323,"version_end_type":298,"fixed_in":9},"gte6.0_lt6.0.8","6.0","6.0.8",{"ecosystem":325,"name":308,"vendor":325,"product":308,"cpe_part":9,"purl_type":326,"purl_namespace":9,"purl_name":308,"source":9,"versions":327},"PyPI","pypi",[328],{"version":329,"is_range":290,"range_type":291,"version_start":322,"version_start_type":315,"version_end":323,"version_end_type":298,"fixed_in":9},"gte6_0_lt6_0_8"]