VDB
GCVE-110-MAGEIA-2026-591
GCVE-110-MAGEIA-2026-591
Advisory Published
CVE-2026-108147: Potential memory exhaustion in `MultiPartParser` via
base64-encoded file upload
CVE-2026-111211: Potential log injection via unescaped geometry form
values
CVE-2026-111362: Server-side request forgery via crs member of GeoJSON
geometries
CVE-2026-113593: Potential exposure of private data via empty and
missing `Vary` headers
CVE-2026-113733: Password hash disclosure to "view only" admin users
with custom user models
CVE-2026-114582: Server-side request forgery via `SpatialReference`
string input
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | python-django | 0 (affected), 5.2.19-1.mga10 (unaffected) | — |
Browse GCVE Records
851 records in the GCVE database · Updated November 12, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.