{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:21fa09d2-86e1-5369-9618-f04b7fcb53d1", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@3.2.25.post9+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@3.2.25.post9+tuxcare", "version": "3.2.25.post9+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@3.2.25", "type": "library", "version": "3.2.25" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2007-0404", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:9f8b5699-940e-5681-9a2a-e6b2c5257712", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0404 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2007-0405", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:d95314b8-37a4-5f9c-8634-78bd3f3cb223", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0405 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2007-5712", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:8edb8ab2-f992-50e2-937d-0114090f79f1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-5712 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2008-2302", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:a24ff2ea-e0fb-5bef-b357-f8203c835247", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-2302 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2008-3909", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:f3f3cdac-80dc-5cb6-8da3-367ad9cf4911", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-3909 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2009-2659", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:af2e6eed-11c4-55e6-bfb1-e1fa12a06436", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-2659 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2009-3695", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:0d61c4fa-1dba-50d7-bb61-fa10168decbb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-3695 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2010-3082", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:0a51138a-2f3f-5253-9048-22c9a2d531ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-3082 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2010-4534", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:35a777f0-59b2-593b-950b-de8afbe98bc3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4534 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2010-4535", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:6d6d1695-2540-5bd0-b072-884fdb2dc6dc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4535 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2011-0696", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:987e3298-eb01-5383-9c91-eec34f1b3fa7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0696 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2011-0697", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:f2d8cdeb-dcca-559d-891d-ced772dd7552", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0697 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2011-0698", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:bcd40cc4-e63a-555c-8435-10c55da7db03", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0698 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2011-4136", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:a3447337-704c-50f9-8db5-e21263d23049", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4136 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2011-4137", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:d912cdfc-def3-5f8e-80dd-3874b84d440d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4137 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2011-4138", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:0189853b-3381-5ee0-85a7-4a2d499fc081", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4138 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2011-4139", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:d2a35aab-030b-5167-8ff8-25a1a8bb871d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4139 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2011-4140", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:2681509b-0107-5cc3-bfbf-cadd158e9c1e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4140 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2012-3442", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:70ced94e-14cc-56a2-b2c6-0af8391d2812", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3442 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2012-3443", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:1301637f-4be8-5d7b-bfa6-b17f7ece21d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3443 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2012-3444", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:346d540d-a364-5073-a262-603eff1c61f8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3444 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2012-4520", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:8907a238-364f-50f3-a63d-45fb613fca82", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-4520 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2013-0305", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:2d2f6f30-8863-5a6d-9b2b-d5e17d36ad0c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0305 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2013-0306", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:1cac3dc9-d015-58b4-a0ab-95e899d3df43", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0306 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2013-1443", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:53eb0f19-9c22-575b-bfcf-3a42907c2c75", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1443 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2013-1664", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:3441508d-6ddb-5c7a-bb71-de362367ceb1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1664 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2013-1665", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:c24f91b4-af99-5f7c-83e7-0a543e0101f7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1665 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2013-4249", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:c669b7fd-927c-5ed3-8b5f-491756f6534a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4249 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2013-4315", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:9cfff233-2a6c-510b-a912-b0f28bcf4098", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4315 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2013-6044", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:d65ae02f-9d92-54de-86e3-da36206f7e6f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6044 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2014-0472", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:9c35a80d-73bd-5fbb-88e3-ca75944b71b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0472 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2014-0473", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:456d5513-8cbd-5cf3-a4ab-1742c680e687", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0473 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2014-0474", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:ea63d416-471f-542e-b212-af5887f64914", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0474 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2014-0480", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:f1023d53-bcf9-5f6d-afbd-63caf4a5a9f9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0480 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2014-0481", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:4b4c0c4f-9375-5750-b2a0-64ba434e2af4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0481 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2014-0482", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:6da13a68-7b5c-5a2e-9c8d-76446adafbb6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0482 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2014-0483", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:cd69dc02-3076-54ed-8b88-b6614cdb5191", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0483 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2014-1418", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:abf7bd80-be48-5297-82b3-5a752d79cf1e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-1418 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2014-3730", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:f544189d-5462-543e-86c0-62490bb22bd8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3730 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2015-0219", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:814f0f55-72a2-5467-bec8-d84e099a714e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0219 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2015-0220", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:500d8952-baa7-5ab4-a84f-288672254cc5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0220 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2015-0221", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:11db1f96-a997-52db-814c-767a4def1812", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0221 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2015-0222", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:d22b7fd3-df1f-5ee8-a263-90730f87830b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0222 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2015-2241", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:b5ce1a27-7340-5772-b591-c20b7c726d84", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2241 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2015-2316", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:e8c15127-a12d-50da-9708-04816651a9a1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2316 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2015-2317", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:f7354e11-510f-5e7b-9930-6e4aa821db35", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2317 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2015-3982", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:f6d3c0a2-037f-5f67-97a1-618da33ae715", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3982 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2015-5143", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:4aee3485-04d4-53cc-a747-3436f5e3b381", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5143 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2015-5144", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:46562bb1-0d11-5f16-aba8-25033bf99998", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5144 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2015-5145", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:ba220373-ea0d-5534-82d7-8cbb82fe9b5e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5145 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2015-5963", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:eec57985-511a-5f1a-bdf0-0c9e00fee485", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5963 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2015-5964", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:284ed2b5-3995-555c-a65d-fb853aba1102", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5964 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2015-8213", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:f8b99813-09cd-506e-b879-be974cab9f16", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8213 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2016-2048", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:e885ec0e-7062-5145-8967-60fec9883c6d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2048 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2016-2512", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:249426ff-dc09-5b7b-a0eb-a87e90b599ae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2512 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2016-2513", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:b474114b-7bcd-505a-8810-252fb2f7627e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2513 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2016-6186", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:96a474c2-e99c-5a01-aa69-b14a38bdf9f0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6186 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2016-7401", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:2f072779-7470-56ea-84c9-c70886761edd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-7401 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2016-9013", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:53b3f57a-238a-593a-bd3f-3be743a62bab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9013 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2016-9014", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:01775a9a-1526-57be-a047-330171f48cbe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9014 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2017-12794", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:7b8a731c-13aa-5d73-90db-3bb0c253e862", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12794 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2017-7233", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:a097b28b-825d-57fd-8442-bcdc46c9cfd5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7233 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2017-7234", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:c0f2753b-3fb2-58c4-863f-3e57a145d708", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7234 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2018-14574", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:b9248192-437b-5992-98c7-79c87b418eea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-14574 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2018-16984", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:538d5e4b-e65a-552d-a097-a92265242078", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-16984 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2018-6188", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:f9681431-4db1-5665-96f9-e26d3a4195f3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-6188 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2018-7536", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:358b6cb0-57a0-5e10-b263-b35f096a4291", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7536 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2018-7537", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:0c259600-adb2-5d18-bec0-d6accfdfbf01", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7537 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2019-11358", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:667eabe3-11ba-583b-bf2a-8354cd20800a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-11358 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2019-12308", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:90bfb58b-bd17-5d53-8efe-f3b8d384a118", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12308 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2019-12781", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:4963a91d-7814-5519-bd30-c2e727a72e8a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12781 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2019-14232", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:f7baeb81-704a-529f-94a3-dc63ce7e2e6d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14232 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2019-14233", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:9d366f67-185b-500d-9d66-e50010ab8048", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14233 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2019-14234", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:c2af6558-b0a9-539c-a5db-e685318a9751", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14234 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2019-14235", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:3b26789b-5954-59ae-b59c-bcd71598320f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14235 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2019-19118", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:4c7438be-f663-50b7-b73d-c35a7d38b37f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19118 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2019-19844", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:3e128fef-94b0-5ff8-abed-f887cc565b6c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19844 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2019-3498", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:24c8bd8e-83c5-5603-84ee-9e6179a97b15", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-3498 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2019-6975", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:2ddf5d14-5aef-503d-ad44-9faf77746756", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-6975 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2020-13254", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:dc23f29f-440b-55e8-a322-2428ea1b5dc5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13254 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2020-13596", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:15d622af-ac18-5246-91e8-0d69bf48b8da", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13596 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2020-24583", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:896be334-0211-5108-ad90-4bd7586da805", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24583 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2020-24584", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:eb39e190-1997-5118-b6e9-d7b769a83aa5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24584 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2020-7471", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:4e38a13f-a173-57bc-82ab-c79a7d64fda5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7471 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2020-9402", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:33aeaaa6-f727-5b05-bb93-b9fac7366a3e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-9402 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2021-28658", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:075b5358-14bb-59fd-8ecf-2356be1d0a79", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28658 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2021-31542", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:1116bb14-44ee-5737-85b3-b99796b9d5bd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-31542 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2021-32052", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:60ee321a-1ac3-5567-ae93-80a5d7799922", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-32052 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2021-3281", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:d3bf8cee-c888-54b6-aa22-2a70e0d32125", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3281 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2021-33203", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:a0a939d1-5248-583b-a029-c24de020ece6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33203 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2021-33571", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:7d38e86b-901f-51e6-ab06-b4b9e06e9375", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33571 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2021-35042", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:fd62867d-0756-58a4-bcb8-8ddcd4d91792", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-35042 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2021-44420", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:dffe566a-ece6-54d1-8080-5183dbba4011", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-44420 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:aedd0d12-eaf0-5d8d-9697-656d246b4b54", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45115 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:16fd2307-cc1a-57b4-8249-0a9e0ebc348c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45116 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:933bd01b-de57-5a66-babe-a1690c6bedb8", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-45452 does not affect version 3.2.25.post9+tuxcare of django. not_affected \u2014 The target (Django 3.2.25) is not affected by CVE-2021-45452. The upstream fix from Django 3.2.11 (commit 8d2f7cff76) was already present in the release that TuxCare onboarded. All three fix components are present in django/core/files/storage.py: (1) backslash normalization before path validation in get_available_name() and generate_filename(), (2) relative path enforcement via os.path.relpath(...", "justification": "code_not_present" } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:97029297-0f93-5972-a53f-ecf5bb1359b0", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22818 does not affect version 3.2.25.post9+tuxcare of django. not_affected \u2014 The target Django 3.2.25.post12+tuxcare is NOT affected by CVE-2022-22818. The vulnerability (unescaped output in the {% debug %} template tag leading to XSS) was fixed in upstream Django 3.2.12. The target version 3.2.25 already contains the complete fix from commit 1a1e8278c4, which HTML-escapes all debug output via the escape() function. This fix was authored by upstream Django developers an...", "justification": "code_not_present" } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:0d4d5b16-dbb3-52b7-abb6-9b123d55faad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-23833 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:2742404c-076a-5e6a-9630-d90253edb7a5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28346 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:64f02827-ac58-5c45-b0e1-5db1caf836f9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28347 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:cb3f722c-9b4d-5a9d-9783-5f284d5c8f61", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-34265 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:baaee4d3-1bef-5f4b-a5a8-b77b9aa5d428", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36359 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:7ff648fd-f1e8-54ef-8217-c95bbbf2d2fc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-41323 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:a1eb3939-c24f-5689-8c05-5087f1d37f95", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-23969 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:582f00b9-92f1-5116-8e87-6d1a3fbf1c98", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-24580 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:2781fec0-f9ab-501f-a2b3-77785dafbdb7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31047 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:5d612a63-7bfa-5c91-804a-c2a48e1ea153", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36053 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:93b6410d-d971-5a07-b52b-677ba0bdef49", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:1949365b-0e2b-5565-ab13-500bc5970142", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-43665 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:6bfbb307-c52d-530c-97ea-c4f3cf5219ec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46695 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:30fe6ec3-da44-51b7-803d-9c89f81a0fcf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-24680 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:f39da1db-2344-52ea-b808-bc4a20112b38", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-27351 does not affect version 3.2.25.post9+tuxcare of django. not_affected \u2014 CVE-2024-27351 is not present in Django 3.2.25.post12+tuxcare. The vulnerable regular expression pattern that caused catastrophic backtracking has been replaced by a secure WordsRegex class implementation. This fix was authored by upstream Django maintainer Shai Berger (shai@platonix.com) in commit 072963e4c4d0b3a7a8c5412bc0c7d27d1a9c3521 and was included in the upstream Django 3.2.25 release b...", "justification": "code_not_present" } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:227658cb-e006-538e-a36b-0644fbaa11a1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38875 affects version 3.2.25.post9+tuxcare of django, and is fixed in 3.2.25.post17+tuxcare." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:04626dc6-ef1b-518f-ae82-f3505d3b7366", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is already fixed in version 3.2.25.post9+tuxcare of django. CVE-2024-39329 already fixed on tuxcare-current/3.2.25 by cf29797b67 (inside the CVE-2025-13473 backport), released in 3.2.25.post14+tuxcare; authenticate timing equal for unusable-password users on post17." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:ce850c5f-d619-5ea2-8915-147f50590774", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39330 affects version 3.2.25.post9+tuxcare of django, and is fixed in 3.2.25.post16+tuxcare." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:f98dcd66-205d-51eb-9d61-71b1698004a0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39614 affects version 3.2.25.post9+tuxcare of django, and is fixed in 3.2.25.post16+tuxcare." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:22225f44-8723-57ee-94bd-8c96ba1aa321", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-41989 does not affect version 3.2.25.post9+tuxcare of django. Django 3.2.25 floatformat() parses repr(text): str/Decimal input yields quotes, parsing fails and the value goes through float() with a bounded exponent; upstream test inputs run in 0.000s. The expensive path needs an object with a numeric __repr__, not attacker-supplied. See PYELSCVE-3148 / django!68.", "justification": "code_not_reachable" } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:dbcbd87a-3c63-58ca-a1ca-83eb9c540c0e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41990 affects version 3.2.25.post9+tuxcare of django, and is fixed in 3.2.25.post17+tuxcare." } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:fdec2dfb-72f3-5e21-89cc-fd4b4a4b9383", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41991 affects version 3.2.25.post9+tuxcare of django, and is fixed in 3.2.25.post17+tuxcare." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:49725dba-f9ea-5ec6-b423-6de4bd062f5e", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-42005 does not affect version 3.2.25.post9+tuxcare of django. Django 3.2.25: names passed to QuerySet.values()/values_list() never become SQL aliases on 3.2 (alias grouping arrived in 4.2, django 04518e310d); 11 query shapes injected 7/11 on 4.2 pre-fix and 0/11 on 3.2.25 (sqlite). See PYELSCVE-3148 / django!68.", "justification": "code_not_reachable" } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:ce603925-34a5-5301-9dca-022bfb7fdbe2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45230 affects version 3.2.25.post9+tuxcare of django, and is fixed in 3.2.25.post17+tuxcare." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:6f42a977-a98e-5a88-add8-fd562defc43e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:1c4364f2-9a47-5e95-946d-82b68b10c41d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53907 affects version 3.2.25.post9+tuxcare of django, and is fixed in 3.2.25.post17+tuxcare." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:077b8e9b-e829-543b-b8a5-58f697a708c5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53908 affects version 3.2.25.post9+tuxcare of django, and is fixed in 3.2.25.post18+tuxcare." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:4969de1e-9206-5071-8f59-193c7b4890c9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-56374 affects version 3.2.25.post9+tuxcare of django, and is fixed in 3.2.25.post16+tuxcare." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:8bccc908-45a7-511a-b3a5-39dd74acc23e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13372 affects version 3.2.25.post9+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:cb97cac9-743d-5c54-9a59-aa639ee15927", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13473 affects version 3.2.25.post9+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:50777442-76b7-58f6-9ad9-5fd22472fb3c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-14550 affects version 3.2.25.post9+tuxcare of django, and is fixed in 3.2.25.post13+tuxcare." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:0b387a09-f480-5abf-b32e-516892874acb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-26699 affects version 3.2.25.post9+tuxcare of django, and is fixed in 3.2.25.post16+tuxcare." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:fcb5050b-f2c6-5066-8438-f0955bc69f01", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27556 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:07354594-6397-5ed2-871e-1601132ef015", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32873 affects version 3.2.25.post9+tuxcare of django, and is fixed in 3.2.25.post16+tuxcare." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:786ad2be-5765-50aa-8507-5402004dc371", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:2af075c6-abd5-5d0e-89a5-0a5c313d1161", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:20ff6a1c-c420-5b60-b96d-46952d77c8b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59681 is already fixed in version 3.2.25.post9+tuxcare of django. CVE-2025-59681 already fixed on tuxcare-current/3.2.25 by ec740f90ef, released in 3.2.25.post4+tuxcare; all four of annotate/alias/aggregate/extra reject alias with '#' on 3.2.25.post17." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:2f00d4ab-f101-54ce-be86-c6a72c65b3ed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59682 affects version 3.2.25.post9+tuxcare of django, and is fixed in 3.2.25.post16+tuxcare." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:9224d162-ab64-5a91-b5fd-7118583384eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:855bc88f-0227-544d-be1a-d5d652e59491", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:9584c39a-ba5a-5fc3-81ca-8b0bc03a0233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-64460 affects version 3.2.25.post9+tuxcare of django, and is fixed in 3.2.25.post13+tuxcare." } }, { "id": "CVE-2026-108147", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:b0bab694-78ff-541a-8c8e-4e3f87a2f41f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-108147 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2026-111211", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:a0844937-dd66-5a38-88cb-f069b2d16799", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111211 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2026-111362", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:f04e27b8-29e2-53ed-82c1-ecb93615dd90", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111362 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2026-113593", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:cf5cf29b-dbb3-59b7-8876-6135ee5ec330", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113593 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2026-113733", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:1abbf86a-b24c-5ff9-ae0a-26fcfc665c86", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113733 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2026-114582", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:3294ef29-8e5a-574d-86c5-cbad0172d67d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-114582 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:da412ebc-1210-53a9-9b6f-68b646b3f300", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1207 affects version 3.2.25.post9+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:b6a5c0ff-0290-52c0-961b-3f8c48f7af59", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1285 affects version 3.2.25.post9+tuxcare of django, and is fixed in 3.2.25.post13+tuxcare." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:ce086780-6319-5eb9-b883-bf855825accf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1287 affects version 3.2.25.post9+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:32ddd8df-d06d-55b5-839c-2f7c1971e0ad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1312 affects version 3.2.25.post9+tuxcare of django, and is fixed in 3.2.25.post15+tuxcare." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:3cb0af2e-b1cb-588f-b134-5bb4058dead2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15307 is fixed in version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:b924dca1-779c-583e-aed0-003de222003f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15830 is fixed in version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:96145c69-0d53-57b3-a141-df8b27de4600", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25673 affects version 3.2.25.post9+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:2677457e-8fe6-5224-933e-2d2a455b8d6e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25674 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:4cc63456-52ef-5b6f-b6c6-93c8bb35051b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33033 affects version 3.2.25.post9+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:e935a27a-29bf-57fe-8e44-0a330955e13f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2026-35192", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:98fdc759-1e6c-5cbd-939b-1c6bbe0635f7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35192 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2026-35193", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:ba16b181-5f62-5c48-b610-53039bc7702b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35193 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:416d6d1e-fdf5-567e-9216-c0a6bb294d5b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-3902 affects version 3.2.25.post9+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:5fb6dcb7-f2e7-554c-8fc3-82c1bcbcdb83", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4277 affects version 3.2.25.post9+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:06004851-9012-5067-9dec-9a6fe67ba1df", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4292 affects version 3.2.25.post9+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:13f29c8e-7362-531d-bc82-d64bae81a801", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48587 affects version 3.2.25.post9+tuxcare of django, and is fixed in 3.2.25.post10+tuxcare." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:588397c5-0eb2-571d-9128-088f77b48235", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:13bbf5be-e71a-5afd-9e8c-015e7cdfde7a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:6f4e309d-1b18-54cf-b5be-9543d8338ea3", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 3.2.25.post9+tuxcare of django. not_affected \u2014 Django 3.2.25 is not affected by CVE-2026-53878. The CVE concerns `DomainNameValidator` (introduced in Django 5.x/6.x) which does not prohibit newlines in domain names. Django 3.2.25 lacks this class entirely. The existing domain validators (`_simple_domain_name_validator` in sites/models.py, `EmailValidator.validate_domain_part()` in core/validators.py) already prohibit newlines either explici...", "justification": "protected_at_runtime" } }, { "id": "CVE-2026-5766", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:2481cf76-f2d5-5f7c-b7df-a698fa4f9c1a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-5766 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:20e0a660-4a04-5139-9031-7ed7ef4e6590", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2026-6907", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:3afa32cf-6212-5aa6-b636-85c65335a7a2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6907 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2026-7666", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:ff55da18-0c69-5730-a981-ef1b0a061fcc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-7666 affects version 3.2.25.post9+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ], "bom-ref": "urn:uuid:37e7317c-2890-585f-b989-71ecbe612880", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 3.2.25.post9+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@3.2.25.post9+tuxcare" } ] }