{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:630c0878-7ffc-5091-b1d6-effb0886a933", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@4.0.post24+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@4.0.post24+tuxcare", "version": "4.0.post24+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@4.0", "type": "library", "version": "4.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2007-0404", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:6b95c091-5bc4-5d7c-a77c-72ee8103e829", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0404 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2007-0405", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:8256ae29-478b-5c1a-885f-b0818411c66b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0405 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2007-5712", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:12f64acb-9cbb-536a-80d1-c8161d20e2c6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-5712 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2008-2302", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:a8a95478-50bf-53c5-b8c3-02e65b6764d5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-2302 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2008-3909", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:6f129630-dd5a-5560-8335-c5604fad0e1d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-3909 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2009-2659", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:79191a0e-0ea3-5236-a40e-c8a161ad1410", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-2659 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2009-3695", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:73f2f8c2-eeef-5707-8660-81ec6df8d98b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-3695 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2010-3082", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:98eff8f8-fe90-5b56-b520-4a530c8cf154", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-3082 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2010-4534", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:ba62f651-b2a2-58b0-8409-ac891025d013", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4534 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2010-4535", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:9d76aa05-9193-52e8-a0d5-c0ca6e7c2b24", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4535 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2011-0696", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:ce8ff4dc-0ef2-5e6b-8462-ea62233fab1f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0696 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2011-0697", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:f38b22bc-00b0-5e4a-8b1c-1f003f6edc23", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0697 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2011-0698", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:d6dd985d-ba8c-58bc-98a2-b1250fda9c9b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0698 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2011-4136", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:86450023-f927-5323-8cef-090e9c8a6344", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4136 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2011-4137", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:4da21687-e75c-5c50-b23a-7c57659dc824", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4137 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2011-4138", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:798b8af3-408a-58d8-ac7a-fec9903e1278", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4138 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2011-4139", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:32f4c01c-fe16-58b5-8f5f-f3a54c0fb715", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4139 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2011-4140", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:97d9d981-1fcc-5e0a-b138-c6e381bfdfe6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4140 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2012-3442", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:90501280-86f6-55b9-993a-c51cdd130ec4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3442 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2012-3443", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:d44277d7-2365-5274-a2f4-66d0e3411642", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3443 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2012-3444", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:d77a52e8-a731-5511-bd78-71443ce28fae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3444 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2012-4520", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:da7ccbec-d584-5723-8b86-159ce7d06dbe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-4520 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2013-0305", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:093e87e3-cfae-5d43-a6e0-20acf5dfe3fc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0305 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2013-0306", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:bf96ec90-9fa3-52b0-b49f-57fd369d6d94", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0306 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2013-1443", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:6842ea3c-b49f-598c-a5c8-148a2246cd16", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1443 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2013-1664", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:69e77f05-ad86-559b-999f-9773d3be5ff4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1664 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2013-1665", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:b979fb00-9c21-518b-8150-20b0e6f47531", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1665 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2013-4249", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:5baaa9fe-1776-5a5f-8c4e-d60de34d6920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4249 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2013-4315", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:75f905d1-a96c-5fb3-aaac-467490d6d188", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4315 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2013-6044", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:3bbb1f05-0862-528c-93a3-57eb0c524c33", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6044 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2014-0472", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:54e9e17a-8340-5a61-9ec4-545f5ace5a15", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0472 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2014-0473", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:f884fbe8-5c01-5d95-941c-035fef0b1487", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0473 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2014-0474", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:60f166c9-12f0-56d6-bb96-09565f17bae7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0474 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2014-0480", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:88f70704-aae9-5009-91b2-61fe41d5daa9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0480 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2014-0481", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:40ce0989-e754-58a5-973e-b565ef865f8e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0481 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2014-0482", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:7163cbce-5cda-5ce2-9a2e-92e941e7ade9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0482 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2014-0483", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:30da000e-07c2-5012-b3cd-606f19a60e39", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0483 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2014-1418", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:72311113-f730-5bc3-a84b-1d1e18e5d953", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-1418 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2014-3730", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:a792be8f-d367-53bb-b0f6-1c8ce6b8f426", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3730 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2015-0219", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:361680e7-4849-58ef-adb4-60892138caf8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0219 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2015-0220", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:afd1e637-3c0d-51b5-b7e0-81272e08f0cb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0220 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2015-0221", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:1c204fff-f7e0-5811-8dac-8e565747c3bf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0221 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2015-0222", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:02e0bd64-c279-5c7d-8c81-97ef91c683e6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0222 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2015-2241", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:492707ad-be7d-5388-999b-139e7c373079", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2241 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2015-2316", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:32400b0a-c5af-57f3-b49e-972ff3ac59c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2316 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2015-2317", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:51f0270c-b467-5a4a-bbad-a60c3707adfe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2317 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2015-3982", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:2556588a-a343-5bae-818f-f5015ce011b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3982 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2015-5143", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:6a12a27c-aab5-5a58-8e34-8007964024d7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5143 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2015-5144", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:854f0d8b-fb41-500f-8b9b-d8850de9345c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5144 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2015-5145", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:b874464a-658b-53f9-b10d-197b63cd8c99", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5145 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2015-5963", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:fcba2277-4625-5539-b416-9a226b36e72d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5963 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2015-5964", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:24ba6639-5210-5b62-8f3f-2bf022c21ea1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5964 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2015-8213", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:3a01e6bd-6ac6-5194-af47-47f96c1c9187", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8213 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2016-2048", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:992632d9-aa84-5c0f-b3d0-22fe2e1316f5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2048 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2016-2512", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:7fce90bb-c743-500f-8481-aef8b3256e76", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2512 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2016-2513", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:8c35b90b-807a-5629-b964-c1096d697ae5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2513 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2016-6186", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:cbcbebcb-75e0-541f-bc2d-ddb903d3a0f9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6186 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2016-7401", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:c7067d04-2055-5530-9417-16b27b9e9ee5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-7401 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2016-9013", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:c989d1f9-22f1-55c0-a4e1-7fa1b967c9e6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9013 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2016-9014", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:5aea662d-5c57-592e-b165-ffa77ef32f8a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9014 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2017-12794", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:18500fe3-c3a6-5cbb-8402-302ea28ae30f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12794 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2017-7233", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:df53f41f-1f00-5fd8-96be-7dd22bb781a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7233 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2017-7234", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:5f468d82-dbc9-5aca-a0e2-a7978b0c67b0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7234 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2018-14574", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:73c3bdd2-4059-5cb0-88da-9469b22ff903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-14574 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2018-16984", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:a4bd109c-3ef9-50f0-bd09-f52b819b5257", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-16984 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2018-6188", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:24c4d728-f36b-573d-9669-267c9507ed74", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-6188 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2018-7536", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:40e5b4b5-becc-5177-8b4a-fbbcdc42a33a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7536 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2018-7537", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:f9e595d5-730b-5347-8246-43e6c804b27f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7537 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2019-11358", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:6c1b6fde-142e-58ac-869b-ac0b1118cd0d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-11358 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2019-12308", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:bcbaf3c0-e950-5014-8140-81f0b7f8ff68", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12308 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2019-12781", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:06ca48e7-403f-5346-b4f3-d10b35653ef3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12781 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2019-14232", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:382a9e0d-ca8c-5bbd-81c1-8fa6dbcc846c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14232 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2019-14233", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:a4b33804-46c5-56e0-92ea-5ac7661f9cc8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14233 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2019-14234", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:1df1a15d-060f-5cc3-9512-d9ba1a66f056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14234 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2019-14235", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:90dae22f-4572-5a2e-a360-490b83b0d5e7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14235 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2019-19118", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:4170c1c0-6a72-50c0-b4ec-808115b1bcdf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19118 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2019-19844", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:f16709b9-cb12-5381-8c8e-568b4ce03cc1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19844 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2019-3498", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:4f4fcdd5-11b6-5921-bfb4-a24181ee2dde", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-3498 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2019-6975", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:fc72ca97-b1a5-5475-b4f2-a6a15ceb51b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-6975 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2020-13254", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:8e6ed345-90f9-5b08-b5d7-ee1b68f1877a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13254 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2020-13596", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:77694382-f402-5fb3-8bda-79e186501b19", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13596 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2020-24583", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:374ffe64-bf95-5757-a679-55dcc63b80d9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24583 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2020-24584", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:d8501180-e417-5cbe-a7d4-05294389f9a0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24584 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2020-7471", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:fa58ad80-7db5-5423-9700-9b3d4118b232", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7471 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2020-9402", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:97e6cd57-6ac8-51dd-8e66-41bf6e696d3c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-9402 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2021-28658", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:d5c714ee-cb90-5d5d-8890-ae9f180d92c9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28658 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2021-31542", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:fed25034-a991-5296-9c56-18a635f6456a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-31542 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2021-32052", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:230f8be2-0918-58fe-b855-29a0f7c2b142", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-32052 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2021-3281", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:a7023ce2-5bbe-567b-b71a-8f57b3f9eb06", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3281 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2021-33203", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:ea319d1b-2f13-5f8f-a75b-446937817c61", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33203 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2021-33571", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:65a11b77-1ef8-5ecf-b356-cdbe5c017446", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33571 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2021-35042", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:5137f43d-a297-5648-b991-b3bb24ce1e54", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-35042 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2021-44420", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:d7f53ad6-bb35-5714-9936-8feb1b650150", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-44420 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:301c50dc-860f-545e-a842-139525d37b55", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45115 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:f07ff56d-a964-585f-84d5-86b3955840d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45116 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:5fa7ea5a-2aef-5055-9c12-2cc445d3a9ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45452 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:ccf84c22-a509-5686-8020-7ed65c040a0e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22818 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:747f50f4-6f06-5a8e-852a-a2c850c61bd6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-23833 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:583a66b8-4af9-5fea-b8af-3e9f63839b20", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28346 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:3a2cff39-a794-5ed4-846b-2db677d68a36", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28347 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:e2340c10-7441-590b-b8db-e6f6780224f0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-34265 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:126bf89d-352d-5d92-8498-53d8023fbdac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-36359 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:8b336a6a-1eeb-5afa-bef4-5825834ed495", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41323 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:27686d5b-6bb0-5e16-a634-111a2424806a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-23969 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:97e2e059-3032-5540-987e-fdb89b6af687", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-24580 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:0a0c48e5-3f60-5baa-9993-2dd04f806580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-31047 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:aa60e544-f87d-5b20-9c3d-f3b86fc8383f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-36053 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:49c20450-0918-58b2-acb3-4392193b06f9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 4.0.post24+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:ae1681e8-a4d7-5a1c-bb40-e511f7971cfa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-43665 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:0de163f6-6480-57a7-8d57-1f3824f33757", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-46695 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:5ab16bfd-a44b-5c0b-81ff-45a18c336f8d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24680 is already fixed in version 4.0.post24+tuxcare of django. Already fixed on tuxcare-current/4.0 by bot commit b68a12db02 and released in 4.0.post27+tuxcare (verified by code reading, see PYELSCVE-3147)." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:db373aff-3831-5b4b-8f95-26b60a98bd82", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-27351 affects version 4.0.post24+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:c5c8a4c1-65b0-5892-86e6-49ae3d80c37a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38875 affects version 4.0.post24+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:e4105051-a773-5e20-9a7d-48ad7fbb648f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is already fixed in version 4.0.post24+tuxcare of django. CVE-2024-39329 already fixed on tuxcare-current/4.0 by 7a1768c267 (inside the CVE-2025-13473 backport), released in 4.0.post18+tuxcare; timing difference present on post17, gone on post27." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:13df6753-4f3d-58da-892f-ba87d2a6b5b2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39330 affects version 4.0.post24+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:26eca1a7-d9c3-5072-9655-f2c1751f2593", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is already fixed in version 4.0.post24+tuxcare of django. Already fixed on tuxcare-current/4.0 by bot commit b68a12db02 and released in 4.0.post27+tuxcare (verified by code reading, see PYELSCVE-3147)." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:04b5afeb-6976-567c-b070-69b136fa7caf", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-41989 does not affect version 4.0.post24+tuxcare of django. Django 4.0 floatformat() turns string input into float(), a huge exponent becomes inf and the expensive Decimal path is not reached with attacker-supplied input. See PYELSCVE-3147 / django!67.", "justification": "code_not_reachable" } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:b955ab58-a315-5bb0-9a81-dfd6c240eaf5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41990 affects version 4.0.post24+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:0d41de25-ae96-5933-96f7-c5bb68746519", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41991 affects version 4.0.post24+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:71cb3179-6c72-5a91-9202-5923f4ea00fb", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-42005 does not affect version 4.0.post24+tuxcare of django. Django 4.0: names passed to QuerySet.values()/values_list() never become SQL aliases on 4.0 (alias grouping arrived in 4.2, django 04518e310d); 8 query shapes: 3 injected on 4.2.14, 0 on 4.0.post27. See PYELSCVE-3147 / django!67.", "justification": "code_not_reachable" } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:8ccc0952-5e6d-5581-8053-ee7a19202501", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45230 affects version 4.0.post24+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:356a3c6a-9f85-5db6-bc8e-81c7676f4359", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:6e8db1a2-27ed-5b71-96c4-6064fac32416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53907 affects version 4.0.post24+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:1038fa25-43c3-5b1b-aefd-39395b249558", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53908 affects version 4.0.post24+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:68edf04e-73f8-5774-bf70-ae15b59b07ef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-56374 affects version 4.0.post24+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:0e5f3b2c-0679-57d7-80c9-8e30054c7e05", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:a8312e54-0005-574d-825a-00fa830ac134", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:846082e2-aea1-546e-ac92-38212c81a953", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:a67f40d3-23ff-5e11-b657-a30cc0252dd5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-26699 affects version 4.0.post24+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:c4506458-10e5-56fa-9447-8f8654a316f1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27556 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:04e30c09-aac0-5a43-866c-8e65f441282e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32873 affects version 4.0.post24+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:58e79cb6-d9ab-57fc-8653-edbd235a0098", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:c9b068e6-2c1b-5bc7-8878-acc9556748e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:e86b3ff5-db39-59fe-999e-2118ca3ccfdf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59681 is already fixed in version 4.0.post24+tuxcare of django. CVE-2025-59681 already fixed on tuxcare-current/4.0 by fe5f66c68a, released in 4.0.post17+tuxcare; 4.0.post16 accepts 'injected_name#', post17/post27 reject it." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:782129d9-4fef-5d51-a7ad-863a19c79730", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59682 affects version 4.0.post24+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:e601f331-6074-549e-b88f-f3c45c9a82f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:d6ef68e9-703b-5b13-a877-29f5887409ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:f629897d-3054-5819-a270-b3453c31e22a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-108147", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:a9c7c01e-218f-5e6d-a5b8-3a0555d3b2c7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-108147 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-111211", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:a278c1c1-d60d-54ef-a069-d9b9f542cc0c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111211 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-111362", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:28477ceb-fd6e-54f9-a77c-4db1a00c47e6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111362 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-113593", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:0395e567-28db-51f6-bf5e-4ddee647ab23", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113593 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-113733", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:926da7fd-4f98-5741-b026-9222172de9ef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113733 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-114582", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:57fa0b69-78d4-5179-8403-565bacb5cea3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-114582 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:c7e944d8-7291-5b41-b964-3785fa0c2ae0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:655ac469-6cbc-5351-b36c-0d5ec3d31ffc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:a05ae4b4-a7b4-5598-adce-996404a201ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:8d8810bb-1b86-5834-8ea0-44e991ceaa1a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:81e4e7d3-4c65-5c32-b6d0-3239e7279e11", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15307 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:ddbf47e3-ed98-5a28-97b6-b3d3d7ef7862", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15830 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:583d9c4c-9f88-5886-b611-0ae5833e37ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25673 affects version 4.0.post24+tuxcare of django, and is fixed in 4.0.post26+tuxcare." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:8241c0f1-4938-549e-9374-672f7d9700ab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25674 affects version 4.0.post24+tuxcare of django, and is fixed in 4.0.post26+tuxcare." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:6bd4807e-98a7-5ad4-a1fb-bce5c382e139", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33033 affects version 4.0.post24+tuxcare of django, and is fixed in 4.0.post26+tuxcare." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:850bbea4-f5ad-5330-a39f-783a2cfc1e80", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-35192", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:f361400e-da62-521c-a087-7634b5631393", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35192 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-35193", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:f603075f-9062-5ffd-9926-29213767866f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35193 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:654b97eb-3da1-59e0-be3b-744271b5bf0d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-3902 affects version 4.0.post24+tuxcare of django, and is fixed in 4.0.post26+tuxcare." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:544f702c-0224-5655-9cdb-ce8411dbdac0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4277 affects version 4.0.post24+tuxcare of django, and is fixed in 4.0.post26+tuxcare." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:5a26066f-5e00-545c-9522-89ca7c6a66e9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4292 affects version 4.0.post24+tuxcare of django, and is fixed in 4.0.post26+tuxcare." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:77e16cd1-ca14-5937-9b5f-4fc4f770eb6b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:ed494160-c298-5631-8cb1-85a6781dbb4a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:a3efa6e2-ed69-5b8c-ac48-b6264d726eba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:58065daf-8334-53df-85f0-5dc2cb3e61e9", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 4.0.post24+tuxcare of django. not_affected \u2014 Django 4.0 is not affected by CVE-2026-53878. The vulnerable component DomainNameValidator does not exist in this version (it was introduced in Django 5.1). All domain validation in Django 4.0 is performed by EmailValidator, URLValidator, and _simple_domain_name_validator, which properly reject domain names containing newline characters through various mechanisms (regex anchors, explicit unsafe...", "justification": "protected_at_runtime" } }, { "id": "CVE-2026-5766", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:189b66d7-e2dc-5b3e-804d-ad2eb259cc6d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-5766 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:8b06150e-aa67-5aeb-9402-5928f845b041", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-6907", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:bff6e2c3-bf12-54aa-a779-ac0c55232286", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6907 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-7666", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:eb319d1f-f36f-5744-93d9-9c4f1a80026d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-7666 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:c745d2a5-46f6-51bb-a6fd-f4af82914ddd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 4.0.post24+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ] }