CVE-2026-111211: Potential log injection via unescaped geometry form values

`django.contrib.gis.forms.GeometryField` and its widgets logged invalid

submitted values directly, allowing control characters (e.g. newlines or ANSI
escape sequences) to be written unescaped into logs. This could enable log
injection or forgery, letting attackers manipulate log appearance or
structure, especially in logs processed by external systems or viewed in
terminals.

This issue has severity "low" according to the [Django Security Policy](https://docs.djangoproject.com/en/dev/internals/security/#security-issue-severity-levels).

Thanks to Aaron chen for the report.