{"action":"Upgrade gdal to 3.13.0 or later.","affected":[{"fixed":"3.13.0","introduced":"0"}],"component":"gdal","cve_ids":["CVE-2026-8213"],"ecosystem":"PyPI","epss":0.00231,"exploited":false,"fixed_versions":["3.13.0"],"id":"tcs_01M5KGXSP406CV2YDPT7FDD6W3","modified_at":"2026-07-13T07:26:16.785810685Z","published_at":"2026-05-09T23:16:33.290Z","references":["https://osv.dev/vulnerability/PYSEC-2026-2157","https://github.com/OSGeo/gdal/","https://vuldb.com/vuln/362430","https://vuldb.com/vuln/362430/cti","https://github.com/OSGeo/gdal/commit/3e04c0385630e4d42517046d9a4967dfccfeb7fd","https://github.com/OSGeo/gdal/issues/14399","https://github.com/OSGeo/gdal/releases/tag/v3.13.0RC1","https://github.com/biniamf/pocs/tree/main/gdal-gdsdfldsrch_oob-read","https://vuldb.com/submit/808128"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"PYSEC-2026-2157","url":"https://osv.dev/vulnerability/PYSEC-2026-2157"}],"summary":"A vulnerability has been found in OSGeo gdal up to 3.13.0dev-4. Affected by this issue is the function GDSDfldsrch of the file frmts/hdf4/hdf-eos/GDapi.c of the component Grid File Handler. The manipu"}