{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:2168acb9-3a1b-5cb3-af88-d5c1c07689f3", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@3.2.25.post13+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@3.2.25.post13+tuxcare", "version": "3.2.25.post13+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@3.2.25", "type": "library", "version": "3.2.25" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2007-0404", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:9bc0b154-ca9e-5211-a8d6-5d0991475f4b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0404 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2007-0405", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:4280ad45-b2ef-55a6-99b3-79f4f8b4dd84", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0405 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2007-5712", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:4b1b589f-95a5-5ce1-a098-9a53c883c2db", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-5712 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2008-2302", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:6bd1d589-5864-5170-ac17-3852571498c7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-2302 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2008-3909", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:1923ca12-3f8f-5b06-8fbd-7b34b3b83d43", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-3909 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2009-2659", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:5cca5f2b-da7d-5074-b5b1-af92e5af369a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-2659 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2009-3695", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:117e2b49-e4e1-58a1-8850-8b9f20625343", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-3695 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2010-3082", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:90150374-0a56-52b4-b50f-ce43754942ef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-3082 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2010-4534", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:c131293f-e9d4-538d-8a3b-0409dc4f2431", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4534 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2010-4535", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:b7c37365-8a93-5a5c-932a-7ed0c22422c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4535 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2011-0696", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:696b0d53-65cb-5f73-bf2c-33ea935418b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0696 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2011-0697", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:656b5d22-276a-5f08-8444-0bad279e42dc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0697 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2011-0698", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:b01ba9d8-9d42-54da-9a18-1b3058daa1ac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0698 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2011-4136", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:cb2722a3-db98-58c6-b1d0-6621269a8777", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4136 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2011-4137", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:80d55c0d-bf1e-5104-984d-06e3e3ad05b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4137 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2011-4138", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:d8e2b52d-5476-5b30-aa33-f9b94eca721d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4138 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2011-4139", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:c546786c-fc80-5230-88b5-8ea190bc2ecb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4139 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2011-4140", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:bbbdf434-e303-5ca3-9eeb-36a6db96b63a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4140 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2012-3442", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:4eb40695-1535-5022-839f-ccca8f7db883", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3442 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2012-3443", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:c8040f5e-62a8-5dd5-8e92-165106d62d8e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3443 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2012-3444", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:6e6dd158-8435-5bfd-99fc-58321558348b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3444 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2012-4520", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:df2d5b9f-0630-54a0-afc4-081d17c4080e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-4520 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2013-0305", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:949446ec-f5a5-59f3-a1b6-b515aeaacf8a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0305 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2013-0306", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:c84bec1d-e850-5090-a2ea-8f05731dc27d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0306 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2013-1443", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:1a92f57f-16d6-53ae-b6bd-4952a976f946", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1443 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2013-1664", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:53fb1123-ce1b-56ed-99c8-5b96d3f49493", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1664 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2013-1665", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:d9a4c0d4-76f3-53cb-8688-de93c01b431c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1665 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2013-4249", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:987a3322-de52-57bb-bebf-71dc111339f0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4249 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2013-4315", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:a6b2ecef-7fc1-5c09-b0ef-4978a70d2be2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4315 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2013-6044", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:a64556cf-ec8f-58d8-a9eb-596356791700", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6044 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2014-0472", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:38fd9bd9-18e1-5e4b-8176-ed9fa4b0d24a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0472 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2014-0473", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:503e6274-7d82-579e-bb60-334935d0e54f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0473 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2014-0474", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:702f8564-3b27-5283-8e0c-20bb75c8ec05", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0474 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2014-0480", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:377f0a55-d00f-5d71-9632-a075125bf394", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0480 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2014-0481", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:805961d1-d5ec-5092-a23b-497d85728303", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0481 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2014-0482", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:aa2a1bb4-bde9-5ea7-ad3e-486645ed65a2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0482 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2014-0483", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:8ff7be1a-2e14-55f3-8593-920444e7ac1e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0483 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2014-1418", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:437c2872-5550-5d36-9aaf-74c044d5ae2e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-1418 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2014-3730", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:001307f8-ff63-5039-8881-433a703fa215", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3730 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2015-0219", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:80c78c09-3f65-54f7-a6d5-6edab3181f3d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0219 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2015-0220", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:852960be-2609-5ce4-b6d8-8fda85adb508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0220 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2015-0221", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:914fe732-e532-5b9c-901b-95cbb6b994d1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0221 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2015-0222", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:91ddf280-3521-5be8-b7f7-5bc1c164bb16", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0222 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2015-2241", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:897ef78c-04ae-57bf-9a0b-8cc2a9b81196", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2241 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2015-2316", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:6269b226-7e2b-57c4-97ab-544d9570c53a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2316 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2015-2317", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:2cddbc12-03c0-53f1-8274-98f816ceacaa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2317 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2015-3982", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:b3a030ac-a250-56e1-bffd-f0de8431f27a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3982 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2015-5143", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:41d2dc63-7203-5e96-8c64-986090e2f779", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5143 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2015-5144", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:23d99e7f-e35b-512b-976c-40abfd282308", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5144 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2015-5145", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:f364fbd9-32df-5e97-af48-fbebc75da91c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5145 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2015-5963", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:2c2d6f80-c374-50ca-b10f-45af922b35fd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5963 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2015-5964", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:5d9ad99f-d316-54ed-a24d-47decca710f1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5964 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2015-8213", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:1dd28453-4ac9-53f6-98cd-5b0dfa5277a3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8213 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2016-2048", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:8bf44668-6489-5d12-b93d-df2d4d0411d5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2048 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2016-2512", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:d06de4d2-7740-5e4b-b9f1-bda59b9967ea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2512 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2016-2513", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:7085809a-b509-51ee-ae84-e4d69d08299a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2513 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2016-6186", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:ba62eb79-89ef-5aae-9e4f-f4ab912ec486", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6186 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2016-7401", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:90fb3b3b-b122-53bf-868d-91d1f128e1f9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-7401 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2016-9013", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:f222d680-eeca-5157-80fe-a323e8c00635", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9013 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2016-9014", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:092a04d4-2135-5ca3-9d75-5b7fa9cfc466", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9014 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2017-12794", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:75f044ff-1b58-5810-82a1-8ac0557680eb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12794 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2017-7233", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:456eff34-f916-5e11-85c9-3826596d0114", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7233 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2017-7234", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:5db2ca39-c89a-5bae-8eee-368cda58f467", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7234 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2018-14574", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:56418f7f-826a-5caf-a969-f5abc6eaad55", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-14574 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2018-16984", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:3df641d8-b7ec-5695-8c84-c92acbe169f2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-16984 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2018-6188", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:4530e11f-897f-5c33-b678-9e902519d7a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-6188 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2018-7536", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:f3b056eb-327e-57f1-abf6-6483acca6693", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7536 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2018-7537", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:383625c6-618b-583c-b4fe-214c41f13b8a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7537 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2019-11358", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:7ec36ff4-204e-5b7f-93fb-d276bd97a9af", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-11358 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2019-12308", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:74239e8d-707b-5726-b834-2dc82b00c26e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12308 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2019-12781", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:6d7aa854-7f16-52a1-916d-4adbd6d2180b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12781 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2019-14232", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:7dda3d7a-fa8b-539b-ae03-7161c8c91140", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14232 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2019-14233", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:f1aa7334-e254-5f5b-9339-e9ecd43b5214", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14233 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2019-14234", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:a7b8ac3d-31ea-58f8-ba0b-5d9358635ae2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14234 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2019-14235", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:1725934c-c9cd-5bef-8d49-394f1ad13fc0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14235 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2019-19118", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:9b8cbceb-c671-5e0b-8778-3185f5a2f367", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19118 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2019-19844", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:5b38c1c8-3c12-5663-8ba7-59d954fc9797", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19844 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2019-3498", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:10504c21-11a9-53b7-b2e7-eb20244fb3e6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-3498 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2019-6975", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:1ef2f2c6-a97e-5145-a74e-b11892e2597b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-6975 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2020-13254", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:8c5d8f84-4caf-55f4-9a45-4ad7c7a351d6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13254 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2020-13596", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:16a10445-281b-5e9d-82f7-96869e42454c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13596 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2020-24583", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:0925e6d4-156e-5f25-a046-d5edbad09fc2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24583 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2020-24584", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:087f4339-e807-5b3a-8350-ad0ee28d3e76", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24584 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2020-7471", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:5a7fdbc1-934a-5fc5-88a6-80a27065d9b8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7471 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2020-9402", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:1c2b2c76-97c0-5955-b25e-133d4160f21b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-9402 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2021-28658", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:57b54d71-a662-505e-bc69-0b3d29f55fd4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28658 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2021-31542", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:d6c85dcc-e9b8-5a5a-b756-73ce77cce6f4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-31542 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2021-32052", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:3089cf79-1ee9-5091-a40e-864b0cdb48fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-32052 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2021-3281", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:ec706963-5a82-5dd5-ad55-a608d22f62aa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3281 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2021-33203", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:7868af3c-d5f6-598d-a091-8720b1ddaa88", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33203 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2021-33571", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:699fb829-82ba-5154-9208-7e4559c75ab8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33571 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2021-35042", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:4197b608-4e32-5474-a795-fc2c29a1ffda", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-35042 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2021-44420", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:aa693703-cb05-5a07-a026-c42d3485ddad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-44420 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:e39bf951-c5eb-5809-a419-16d6c305b4ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45115 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:f4b7bbeb-03c7-52c6-82b8-e04bc85c1e5f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45116 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:33572968-b7ac-5907-a5df-d2d8271d96aa", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-45452 does not affect version 3.2.25.post13+tuxcare of django. not_affected \u2014 The target (Django 3.2.25) is not affected by CVE-2021-45452. The upstream fix from Django 3.2.11 (commit 8d2f7cff76) was already present in the release that TuxCare onboarded. All three fix components are present in django/core/files/storage.py: (1) backslash normalization before path validation in get_available_name() and generate_filename(), (2) relative path enforcement via os.path.relpath(...", "justification": "code_not_present" } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:419cf1aa-3752-5487-9abe-7c35fad977b2", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22818 does not affect version 3.2.25.post13+tuxcare of django. not_affected \u2014 The target Django 3.2.25.post12+tuxcare is NOT affected by CVE-2022-22818. The vulnerability (unescaped output in the {% debug %} template tag leading to XSS) was fixed in upstream Django 3.2.12. The target version 3.2.25 already contains the complete fix from commit 1a1e8278c4, which HTML-escapes all debug output via the escape() function. This fix was authored by upstream Django developers an...", "justification": "code_not_present" } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:be7dd102-4b19-54c6-ac9b-4c64ba69cc32", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-23833 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:7e734aa1-f334-53c9-ac3f-f8ff06e349f2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28346 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:b54ee9c0-2e1b-55ba-bee5-8d54327b28ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28347 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:f025edb9-fea7-5b3e-9224-5e55d882662c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-34265 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:215663d5-c55a-50e0-b5ad-be35763101b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36359 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:cbecf1b3-fdce-5bcb-bcba-fb49c0e32838", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-41323 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:2295827d-35d0-5137-9764-e2913b2a3bd8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-23969 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:94d668d8-2c40-5920-b988-2f24752bc7cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-24580 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:6cea80a0-2687-5722-ad23-20e95dbbc22d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31047 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:02f85f84-11f3-5a76-951a-f0161b5820c5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36053 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:30a1b45a-7801-5b8d-8628-132baf1fa775", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:e3d7ddcd-d282-583b-bdd4-ea33e36e526a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-43665 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:49143cb6-b3e2-5edf-bb9f-0a87ecb1b738", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46695 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:0685b9ed-2b1e-5797-9e15-c0c68f60ac74", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-24680 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:d16155bb-cd15-5f93-8c78-cb1634b6f342", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-27351 does not affect version 3.2.25.post13+tuxcare of django. not_affected \u2014 CVE-2024-27351 is not present in Django 3.2.25.post12+tuxcare. The vulnerable regular expression pattern that caused catastrophic backtracking has been replaced by a secure WordsRegex class implementation. This fix was authored by upstream Django maintainer Shai Berger (shai@platonix.com) in commit 072963e4c4d0b3a7a8c5412bc0c7d27d1a9c3521 and was included in the upstream Django 3.2.25 release b...", "justification": "code_not_present" } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:d35756fc-8eb1-5f4e-adcf-901028264523", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38875 affects version 3.2.25.post13+tuxcare of django, and is fixed in 3.2.25.post17+tuxcare." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:c3f49595-be5c-5e93-8d41-dadbcfe8748c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is already fixed in version 3.2.25.post13+tuxcare of django. CVE-2024-39329 already fixed on tuxcare-current/3.2.25 by cf29797b67 (inside the CVE-2025-13473 backport), released in 3.2.25.post14+tuxcare; authenticate timing equal for unusable-password users on post17." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:28b70cd0-08b2-563d-9d7d-52f891c1b2b5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39330 affects version 3.2.25.post13+tuxcare of django, and is fixed in 3.2.25.post16+tuxcare." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:0a389048-ee75-51f6-8008-5fce344813b2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39614 affects version 3.2.25.post13+tuxcare of django, and is fixed in 3.2.25.post16+tuxcare." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:a57398ad-d039-5525-a0f0-583222b87c93", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-41989 does not affect version 3.2.25.post13+tuxcare of django. Django 3.2.25 floatformat() parses repr(text): str/Decimal input yields quotes, parsing fails and the value goes through float() with a bounded exponent; upstream test inputs run in 0.000s. The expensive path needs an object with a numeric __repr__, not attacker-supplied. See PYELSCVE-3148 / django!68.", "justification": "code_not_reachable" } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:284cf5b4-6c3f-5cd1-a351-ff5739201503", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41990 affects version 3.2.25.post13+tuxcare of django, and is fixed in 3.2.25.post17+tuxcare." } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:38186af6-aa47-5daa-8f58-f8402c1c3d33", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41991 affects version 3.2.25.post13+tuxcare of django, and is fixed in 3.2.25.post17+tuxcare." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:88449be2-c34a-5986-8caf-778458f727f7", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-42005 does not affect version 3.2.25.post13+tuxcare of django. Django 3.2.25: names passed to QuerySet.values()/values_list() never become SQL aliases on 3.2 (alias grouping arrived in 4.2, django 04518e310d); 11 query shapes injected 7/11 on 4.2 pre-fix and 0/11 on 3.2.25 (sqlite). See PYELSCVE-3148 / django!68.", "justification": "code_not_reachable" } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:d8161d2c-4e19-5296-a7ba-97df0515beb4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45230 affects version 3.2.25.post13+tuxcare of django, and is fixed in 3.2.25.post17+tuxcare." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:8b5ae5bd-1d00-55f5-a495-1884d5f656e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:e751d7a2-c817-58e5-b634-c7164568b950", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53907 affects version 3.2.25.post13+tuxcare of django, and is fixed in 3.2.25.post17+tuxcare." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:d3d8c61b-6c0b-53b1-bd20-70ce6b87843e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53908 affects version 3.2.25.post13+tuxcare of django, and is fixed in 3.2.25.post18+tuxcare." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:3a60a2b2-8be9-5676-b94b-10de83b967a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-56374 affects version 3.2.25.post13+tuxcare of django, and is fixed in 3.2.25.post16+tuxcare." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:84a461d6-885a-53bd-b695-79425db71809", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13372 affects version 3.2.25.post13+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:cd324595-59fc-514c-aa8b-af786b00187c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13473 affects version 3.2.25.post13+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:6e3a52bf-596a-585c-8abb-baeb32dc5f5d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:c58fb59b-2e45-5d38-8778-dea0edc9a731", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-26699 affects version 3.2.25.post13+tuxcare of django, and is fixed in 3.2.25.post16+tuxcare." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:8fd716fb-4896-564c-9cf0-0eb8c1ac9b96", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27556 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:42fce01b-03df-584d-ab59-aaa04ed7bf37", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32873 affects version 3.2.25.post13+tuxcare of django, and is fixed in 3.2.25.post16+tuxcare." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:d888098e-8b53-5914-969c-c5d8bb9c7d10", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:0ee4e194-c44a-5b7c-90d8-49247524b618", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:9b0dc8db-b80a-5f29-8903-5e5e31541f33", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59681 is already fixed in version 3.2.25.post13+tuxcare of django. CVE-2025-59681 already fixed on tuxcare-current/3.2.25 by ec740f90ef, released in 3.2.25.post4+tuxcare; all four of annotate/alias/aggregate/extra reject alias with '#' on 3.2.25.post17." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:3fed912a-b853-5f1d-8d2e-63ef4ef9c494", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59682 affects version 3.2.25.post13+tuxcare of django, and is fixed in 3.2.25.post16+tuxcare." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:e0177ee7-c572-56d9-a275-d0b2cef5347c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:c496c4fd-16f6-50ce-a66a-c62cfc7c08c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:065671d8-97ab-590c-aa40-255256658d15", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2026-108147", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:99b899bb-4cc8-5224-bcc1-f23020d78dc1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-108147 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2026-111211", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:d0c55ee3-0928-53fa-833a-004bfa25a33e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111211 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2026-111362", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:d9f250fc-f709-5304-a2fb-0cd2aaafcaef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111362 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2026-113593", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:ff989997-636b-5a9b-9faf-64dea2330f90", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113593 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2026-113733", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:e145be05-6f93-53e7-b9cf-b94e9c2ac092", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113733 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2026-114582", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:d20dfbb8-d624-5709-8f08-f86c01d6d9b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-114582 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:7c768068-96f1-595a-809d-31a50e26b95c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1207 affects version 3.2.25.post13+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:3f12aad4-59ba-5216-8d5a-8db73279dc33", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:aff32f92-72f8-53ca-806c-85a30db5d04c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1287 affects version 3.2.25.post13+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:475c63b5-f8f2-5cb1-9b6e-b74ecb35daa7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1312 affects version 3.2.25.post13+tuxcare of django, and is fixed in 3.2.25.post15+tuxcare." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:79dd1222-32d2-5e34-ad19-7083b25f0678", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15307 is fixed in version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:f3b51b08-65e8-5575-ad74-761d2049fc79", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15830 is fixed in version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:10569d6b-c960-52b9-879b-6ad179dd90cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25673 affects version 3.2.25.post13+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:69d2ffe4-274a-5b77-89ed-4d9eee48ce46", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25674 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:19ecb4c7-1e40-5473-a9c7-e84a9c9ed23a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33033 affects version 3.2.25.post13+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:3ac18a46-f061-5b69-a129-aadfeb7b75c9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2026-35192", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:47cbef4c-c0de-5f9c-b5fd-b368720825bc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35192 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2026-35193", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:8c7ad7d4-28e1-513f-b6de-6aec0ad4eb17", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35193 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:af1d07b7-80bf-5e75-89f7-c163d3bc568c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-3902 affects version 3.2.25.post13+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:e75cfbe3-1678-5c39-b05e-35d46b2f64fb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4277 affects version 3.2.25.post13+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:39b44029-1d08-5653-a8a5-d624e63e215b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4292 affects version 3.2.25.post13+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:6d88b6d7-6eb4-58a7-b04c-20cd3b630075", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:a2696ca8-f35a-5334-b10d-cbb79677aedd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:5636662d-30b1-5e26-a100-6335ea579093", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:e7ba2778-424d-54b4-b7cb-f35070540305", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 3.2.25.post13+tuxcare of django. not_affected \u2014 Django 3.2.25 is not affected by CVE-2026-53878. The CVE concerns `DomainNameValidator` (introduced in Django 5.x/6.x) which does not prohibit newlines in domain names. Django 3.2.25 lacks this class entirely. The existing domain validators (`_simple_domain_name_validator` in sites/models.py, `EmailValidator.validate_domain_part()` in core/validators.py) already prohibit newlines either explici...", "justification": "protected_at_runtime" } }, { "id": "CVE-2026-5766", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:0623bcca-0991-5cb9-8fcb-d491888675b5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-5766 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:6c5d64c3-d640-5e7d-b54e-e6ca5bf25605", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2026-6907", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:5dfe8552-967b-5901-9c60-fe849e8c4a9b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6907 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2026-7666", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:83b7a806-7efa-5a8c-a463-3b2619d49b2c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-7666 affects version 3.2.25.post13+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ], "bom-ref": "urn:uuid:581006ba-ba24-52ed-b4d0-873ae9c221b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 3.2.25.post13+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@3.2.25.post13+tuxcare" } ] }