{"affected":[{"defaultStatus":"unaffected","ecosystem":"https://pypi.org/project/Django/","packageName":"django","product":"Django","source":"CNA: DSF","vendor":"djangoproject","versions":[{"lessThan":"6.1.3","status":"affected","version":"6.1","versionType":"python"},{"status":"unaffected","version":"6.1.3","versionType":"python"},{"lessThan":"6.0.10","status":"affected","version":"6.0","versionType":"python"},{"status":"unaffected","version":"6.0.10","versionType":"python"},{"lessThan":"5.2.19","status":"affected","version":"5.2","versionType":"python"},{"status":"unaffected","version":"5.2.19","versionType":"python"}]}],"cveId":"CVE-2026-111211","cwes":["CWE-117"],"description":"An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2.19.\n`django.contrib.gis.forms.widgets.BaseGeometryWidget.deserialize()`, used by `django.contrib.gis.forms.GeometryField`, does not escape invalid submitted values before logging them, which allows remote attackers to inject or forge log entries via a crafted geometry value.\nEarlier, unsupported Django series (such as 5.1.x, 5.0.x, and 4.2.x) were not evaluated and may also be affected.\nDjango would like to thank Aaron chen for reporting this issue.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":5.3,"severity":"medium","source":"CNA: DSF","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","version":"3.1"},{"score":6.9,"severity":"medium","source":"CNA: DSF","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","version":"4.0"}],"modifiedAt":1793728248947,"publishedAt":1793720518889,"references":[{"source":"CNA: DSF","tags":["vendor-advisory"],"url":"https://docs.djangoproject.com/en/dev/releases/security/"},{"source":"CNA: DSF","tags":["mailing-list"],"url":"https://groups.google.com/g/django-announce"},{"source":"CNA: DSF","tags":["patch"],"url":"https://github.com/django/django/commit/af4319f7217e33ad5db747226765f09b49ec07ba"},{"source":"CNA: DSF","tags":["patch"],"url":"https://github.com/django/django/commit/b336d9a4e8a919d2e5f979b663de2b27e245b793"},{"source":"CNA: DSF","tags":["patch"],"url":"https://github.com/django/django/commit/1b747694d6a68a6b5d48cbe81c71053092a5d374"},{"source":"CNA: DSF","tags":["patch"],"url":"https://github.com/django/django/commit/b83bf870ee0006ab0dd84a01d1f3b0391320a51a"},{"source":"CNA: DSF","tags":["vendor-advisory"],"url":"https://www.djangoproject.com/weblog/2026/nov/03/security-releases/"}],"remediation":[{"kind":"fix","source":"CNA: DSF","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/django/django/commit/af4319f7217e33ad5db747226765f09b49ec07ba"},{"kind":"fix","source":"CNA: DSF","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/django/django/commit/b336d9a4e8a919d2e5f979b663de2b27e245b793"},{"kind":"fix","source":"CNA: DSF","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/django/django/commit/1b747694d6a68a6b5d48cbe81c71053092a5d374"},{"kind":"fix","source":"CNA: DSF","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/django/django/commit/b83bf870ee0006ab0dd84a01d1f3b0391320a51a"}],"revision":"bb9dce3afd3800245147c082e14e0827fe90ed6f0b9d2d417e93414857e905ad","sources":[{"modifiedAt":1793728248947,"name":"CNA: DSF","retrievedAt":1793729322139,"url":"https://www.cve.org/CVERecord?id=CVE-2026-111211"}],"ssvc":{"assessedAt":1793728224327,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Potential log injection via unescaped geometry form values","updatedAt":1793729322139}