CVE-2026-53877

score

<0.1

cvss

4.8

epss

0.5%

published

2026-07-07

kev added

—

first seen

2026-10-21

Django 6.0 < 6.0.7 and 5.2 < 5.2.16 contain a buffer over-read caused by improper handling in django.contrib.gis.gdal.GDALRaster when constructed from bytes, letting attackers cause memory disclosure or service degradation, exploit requires crafted bytes input.