MGASA-2026-0339
Advisory lineage Upstream: 4 Downstream: 0
Published: 27 Aug 2026, 19:15
Last modified:27 Aug 2026, 19:30
Vulnerability Summary
Overall Risk (default)
minimal
0/100 CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
27 Aug 2026, 19:15
Published
Vulnerability first disclosed
27 Aug 2026, 19:30
Last Modified
Vulnerability information updated
Description
Updated python-django packages fix security vulnerabilities CVE-2026-15307: Server-side file-write and request forgery via spatial lookups CVE-2026-15337: Potential denial-of-service vulnerability in `check_for_language()` CVE-2026-15830: Potential denial-of-service vulnerability via nested geometry collections CVE-2026-15920: Potential cross-site scripting via `URLField` values in the admin
Affected Systems
- mageia•python-django
< 5.2.17-1.mga10