CVE-2026-114582 | Django Software Foundation up to 5.2.18/6.0.9/6.1.2 SpatialReference __init__.py transform srs/srid server-side request forgery

A vulnerability was found in Django Software Foundation Django up to 5.2.18/6.0.9/6.1.2. It has been declared as critical. The affected element is the function transform of the file django/contrib/gis/gdal/__init__.py of the component SpatialReference. Such manipulation of the argument srs/srid leads to server-side request forgery.

This vulnerability is documented as CVE-2026-114582. The attack can be executed remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More