{"action":"Upgrade django to 5.2.17 or later.","affected":[{"fixed":"5.2.17","introduced":"0"},{"fixed":"6.0.8","introduced":"6.0a1"},{"fixed":"6.1.1","introduced":"6.1a1"}],"component":"django","cve_ids":["CVE-2026-15830"],"ecosystem":"PyPI","epss":0.01113,"exploited":false,"fixed_versions":["5.2.17","6.0.8","6.1.1"],"ghsa_id":"GHSA-q238-5cxm-5c9h","id":"tcs_01M5KFV0DR5E07CT36HH8JNM52","modified_at":"2026-10-12T14:45:06.559694358Z","published_at":"2026-08-04T18:31:27Z","references":["https://osv.dev/vulnerability/GHSA-q238-5cxm-5c9h","https://nvd.nist.gov/vuln/detail/CVE-2026-15830","https://github.com/django/django/commit/1eafa1a80f1363283f89208ba4499ed54e35f085","https://github.com/django/django/commit/4353dfb56f8ba3a6fccc4bdd7f2ef2fbee3aa638","https://github.com/django/django/commit/62ef9d40cf4ea75f16518436b44b8ab2515340df","https://github.com/django/django/commit/6af5da31775417c610dbf9c3f1b5b8333d42daf6","https://github.com/django/django/commit/75d401a1491e04a907ed745c128836d51c982c0f","https://github.com/django/django/commit/9e4a3f186b6b07b483bfd9195ea06734663fcd06","https://github.com/django/django/commit/ba80833fa656dd09660b97c4429331067db1b080","https://github.com/django/django/commit/d2e59b77fe18de318a8272c2a7bbc798d84d1d0d","https://docs.djangoproject.com/en/dev/releases/security","https://github.com/advisories/GHSA-q238-5cxm-5c9h","https://github.com/django/django","https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2026-3717.yaml","https://groups.google.com/g/django-announce","https://www.djangoproject.com/weblog/2026/aug/04/security-releases"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-q238-5cxm-5c9h","url":"https://osv.dev/vulnerability/GHSA-q238-5cxm-5c9h"}],"summary":"Django GeoDjango vulnerable to denial of service through deeply nested geometry collections"}