CVE-2026-87890 | Djangoproject Django up to 5.2.17/6.0.8/6.1.1 Spatial Lookups server-side request forgery

October 6, 2026 Yanac

A vulnerability has been found in Djangoproject Django up to 5.2.17/6.0.8/6.1.1 and classified as problematic. The affected element is an unknown function of the component Spatial Lookups. This manipulation causes server-side request forgery.

This vulnerability is tracked as CVE-2026-87890. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More