{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:dc0a65ad-c14b-518c-ab9b-53f6bdb936a6", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@4.0.post26+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@4.0.post26+tuxcare", "version": "4.0.post26+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@4.0", "type": "library", "version": "4.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2007-0404", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:831b8071-fe50-535c-9ef7-b3d03e17560f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0404 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2007-0405", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:13dc981b-6f6a-5faf-947a-c33ac0475552", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0405 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2007-5712", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:985084d3-8dbf-5b59-acf4-7335d9f91faf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-5712 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2008-2302", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:adde4bb3-88c1-53a5-bfd5-0180fc7c502c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-2302 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2008-3909", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:e5ed1cf3-341d-5ebc-bbf6-b01bb1f6f95d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-3909 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2009-2659", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:1a17aff0-9422-55c2-ad1f-fbbd02d585d2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-2659 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2009-3695", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:2fa960e4-16ab-5a78-aa8e-d14f6c42924f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-3695 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2010-3082", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:53ec24b9-6fa2-5705-8f93-e6129a6c6ce4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-3082 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2010-4534", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:4e15d31f-3f42-5045-8dfd-8716bc915f4d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4534 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2010-4535", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:16eafd06-4d4b-5f6a-8b22-bebfb8905f10", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4535 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2011-0696", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:ffc04795-d7b8-5422-8079-70138804ed8a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0696 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2011-0697", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:29e80d39-76ac-5d86-a497-715693ffb7f5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0697 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2011-0698", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:f759304e-08be-51d6-9404-119f0affb681", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0698 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2011-4136", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:14a2ad1f-384b-5540-9331-ac6c5c4a3532", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4136 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2011-4137", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:43478218-0c77-561c-bd53-bd245ea58654", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4137 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2011-4138", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:c534ee09-b8ac-5a8a-85e9-36a2ce969594", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4138 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2011-4139", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:cc85e278-1a58-578c-9acc-f09a0cb5c4e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4139 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2011-4140", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:432434e5-5597-5637-9a78-663ad9e07d1d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4140 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2012-3442", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:764478e4-0181-5a5e-8dad-0a565c059242", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3442 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2012-3443", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:5a8edc1d-6e31-5b5e-9c83-85f3776841c8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3443 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2012-3444", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:73642733-db4b-52c3-95df-e653c631bd21", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3444 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2012-4520", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:c06dbaa5-644e-593c-a78f-1513957821b6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-4520 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2013-0305", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:9df61a23-927c-5183-83e2-a4e693bc961c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0305 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2013-0306", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:3a36efdb-ccc2-5b3a-ba19-07375af99d95", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0306 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2013-1443", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:610e0e38-6428-5f57-8e56-4c07393916d6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1443 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2013-1664", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:665785fb-53fa-5a8a-af12-1cfce54a4aa3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1664 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2013-1665", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:98489950-1c2e-5a87-8713-074ec35cfe25", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1665 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2013-4249", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:1761f8b9-29ac-5ad7-b39f-a7b437b84b17", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4249 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2013-4315", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:bc44b6e0-3ec8-5b58-b5ba-832f3f210f8f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4315 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2013-6044", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:445e5a89-599c-5111-9a5c-ffa8a6931289", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6044 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2014-0472", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:14ce3655-d260-559b-bc7f-74d4442403f9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0472 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2014-0473", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:b1d1baac-d3fe-5e02-82d4-64e3322e3359", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0473 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2014-0474", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:ba693fa7-8ecd-52dc-9e6a-fccb76e89945", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0474 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2014-0480", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:11e34383-26db-58d8-9973-066fa2deb29c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0480 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2014-0481", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:be76ff6d-6d36-53ab-8e45-f13d3d84ea66", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0481 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2014-0482", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:2b05402d-eaf1-5daf-862d-ca9e0bc1e0ae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0482 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2014-0483", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:3b6dc2b0-bc30-5c55-844e-8e067ee14603", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0483 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2014-1418", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:2fdd382e-f9f5-5b2a-b5dc-ea7485b92aa5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-1418 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2014-3730", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:d7fd9c48-4762-5fc2-8f11-3bc73c1706c9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3730 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2015-0219", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:d392568d-a05f-5b74-b50b-a3873cee59b6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0219 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2015-0220", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:384ec7de-bf32-52c3-bd87-d9a19026355f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0220 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2015-0221", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:3e95ad10-5727-51c5-8081-5475876798a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0221 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2015-0222", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:46a9fe0f-0833-5522-8b69-18593f6b6046", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0222 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2015-2241", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:1fa16757-02e9-5c41-b0a5-c145595b1c24", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2241 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2015-2316", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:d7e99397-710d-5bee-b49e-223172bf1b49", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2316 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2015-2317", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:4a588d9b-3598-541b-a9c3-cb0042b54e95", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2317 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2015-3982", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:fbfc14b5-48a4-5b8b-8313-5759e06d5f38", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3982 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2015-5143", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:2896a24f-1860-595e-a3f4-ed64f7581eb6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5143 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2015-5144", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:f97d16db-97e6-5251-ab44-a3b3be12bafe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5144 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2015-5145", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:d915a1b7-109c-5a8a-b56b-3d7ecfbf9509", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5145 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2015-5963", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:f5080a00-2aa7-52d1-90e9-247eed2277a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5963 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2015-5964", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:592d4812-3e2d-53c0-a8cd-1e48d57f4f59", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5964 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2015-8213", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:e60642c0-0066-5239-825a-63d76de273d5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8213 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2016-2048", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:2e675efe-0cf9-57ef-8a3d-eca0d4f39304", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2048 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2016-2512", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:815865e1-2ea5-5e77-b1d6-a9a1be52aa2a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2512 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2016-2513", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:4f8aa202-f7ef-51b5-86c7-be1345d9b0b2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2513 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2016-6186", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:645c42fc-a6be-52c3-868e-3451c79e47d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6186 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2016-7401", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:99724665-9f56-5c44-bacf-6662f3a1da85", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-7401 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2016-9013", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:f55fd56b-23fc-547a-828f-55177dad63a0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9013 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2016-9014", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:0ff2b1fa-60b7-5fee-806a-ef1ecc9f58ba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9014 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2017-12794", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:cad5742d-9159-5937-a3fe-c82a778e6a31", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12794 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2017-7233", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:d306fbb7-154c-581a-a2f3-42df596f123a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7233 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2017-7234", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:a92a2653-e902-51ad-8bd0-531712ce1fed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7234 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2018-14574", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:c4f9fdfd-fb87-529c-993c-7ba44b9d4b6d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-14574 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2018-16984", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:e5e23ba8-f70a-51f9-a321-128f99515a80", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-16984 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2018-6188", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:6fb13715-3072-5337-ae5f-2c93fbc2695c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-6188 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2018-7536", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:cbfa0e1f-4d24-593c-8673-631a5f04cc3a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7536 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2018-7537", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:96e07c26-bca6-53fa-aaa9-9e9ff5bc9d09", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7537 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2019-11358", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:793e8be8-c506-5348-a21b-fec568184215", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-11358 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2019-12308", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:aedf8afb-56a1-5d12-b9ae-522be29cfb21", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12308 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2019-12781", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:a2050247-58a7-547a-8c31-592c17db53b6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12781 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2019-14232", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:4ed5ed4c-8d6f-5bcf-ab26-7918697852ed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14232 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2019-14233", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:87751e90-39b6-5daf-8696-4a74dc88ebfe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14233 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2019-14234", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:d2b94b9d-bda2-546f-adda-a8468c12ed43", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14234 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2019-14235", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:13e48054-5919-5185-ace5-3bd052a642d4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14235 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2019-19118", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:b88502a6-e1d4-510b-a933-27ec31f36588", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19118 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2019-19844", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:f66493c6-c1c3-5227-9648-6f287877b1dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19844 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2019-3498", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:4a0e8962-1e11-5878-81fe-a6586834834d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-3498 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2019-6975", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:de26d258-598e-58e2-a648-17da9ece9047", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-6975 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2020-13254", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:314c5b7b-b20d-5bc7-9506-e9cc157159dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13254 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2020-13596", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:c773e47e-3ff2-56c6-9c0f-662e07d35445", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13596 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2020-24583", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:e9427df8-d1f2-5986-bcc3-d9b6ab2cfdc0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24583 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2020-24584", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:454bb1d9-70e1-5346-a6a2-303945003e1f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24584 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2020-7471", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:5637752a-7cd9-58cc-86e2-c41cd0c6e65e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7471 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2020-9402", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:fb43adef-6f8d-5e0f-a571-cd13a49ecced", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-9402 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2021-28658", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:8f818cd1-7dd1-57a4-be4e-20684a705f43", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28658 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2021-31542", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:090b92a8-e8b9-503d-b1b5-12a8158f9710", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-31542 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2021-32052", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:9207a8e5-6246-5008-ac4f-d8a4f14fd4c8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-32052 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2021-3281", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:8ad56d0e-697a-5e3e-8ad7-4382d2090eca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3281 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2021-33203", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:5d28b9f1-f45d-5616-b802-d88dd0b1ce45", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33203 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2021-33571", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:be7f454b-42be-54d4-846c-634d3f612101", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33571 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2021-35042", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:2ab02161-fd8b-5ce5-a753-2ded2806e1a6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-35042 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2021-44420", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:e705f60c-cbe9-5b89-8069-792fc879ad61", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-44420 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:edddfbcc-bcf5-5a50-9c2b-0ac1ba5429a7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45115 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:ea529b03-72e9-5166-8407-c660d82698fe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45116 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:5613727e-02d5-5d15-a464-9636deeea8c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45452 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:54a04f45-6813-568f-99a4-a4a220a3e521", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22818 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:c7e6aac9-739f-5f3d-92e6-5472a3c69e65", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-23833 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:f24c7799-88fa-5fbe-a1c0-efce5baea7ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28346 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:ac6b8703-8e0c-5f40-8760-b46317346803", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28347 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:91910716-ee74-51d3-8c75-a7e3f1f6ac74", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-34265 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:50713467-bc23-5e04-9c53-89684bb89a6c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-36359 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:0d2f4250-8aac-5abb-85ca-264373413dd7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41323 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:645c3973-d1b3-58cb-934a-a885841037d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-23969 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:0b84fc88-3725-5e2a-980a-76962bf745f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-24580 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:64f8f14a-b509-55af-8eca-a6a55998c294", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-31047 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:8fe0134a-be08-5163-af9d-fc6eed9da306", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-36053 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:06c0f7bc-14b8-504d-ab76-3ce109303bff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 4.0.post26+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:9fb1701b-4ddc-59d1-a1a7-36a59fdd1bdc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-43665 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:fb95c4da-3b94-566c-ac58-797abc43fd1b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-46695 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:36593674-7714-514e-b704-bcaa1f5837e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24680 is already fixed in version 4.0.post26+tuxcare of django. Already fixed on tuxcare-current/4.0 by bot commit b68a12db02 and released in 4.0.post27+tuxcare (verified by code reading, see PYELSCVE-3147)." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:3936c61e-45fc-594c-bf21-dcfc0d3bec68", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-27351 affects version 4.0.post26+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:53ae5139-b44b-5dde-97be-d01df66c86bf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38875 affects version 4.0.post26+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:a3b281c0-1445-58b0-975a-5f5cc86a4cc2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is already fixed in version 4.0.post26+tuxcare of django. CVE-2024-39329 already fixed on tuxcare-current/4.0 by 7a1768c267 (inside the CVE-2025-13473 backport), released in 4.0.post18+tuxcare; timing difference present on post17, gone on post27." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:6a7df911-e0b6-54aa-b106-cbfe2676c786", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39330 affects version 4.0.post26+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:998d0e73-800b-51d1-a3ef-22df4491b772", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is already fixed in version 4.0.post26+tuxcare of django. Already fixed on tuxcare-current/4.0 by bot commit b68a12db02 and released in 4.0.post27+tuxcare (verified by code reading, see PYELSCVE-3147)." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:3a57b8cf-7a3b-5f65-be68-a1e35c78eaa7", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-41989 does not affect version 4.0.post26+tuxcare of django. Django 4.0 floatformat() turns string input into float(), a huge exponent becomes inf and the expensive Decimal path is not reached with attacker-supplied input. See PYELSCVE-3147 / django!67.", "justification": "code_not_reachable" } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:7e5bdc10-9066-56a4-b0a1-c0156049522e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41990 affects version 4.0.post26+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:6842ddd1-0c6d-531b-a36b-296f6c2dd4dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41991 affects version 4.0.post26+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:72fee856-ac73-58f1-a601-e0890288fe1c", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-42005 does not affect version 4.0.post26+tuxcare of django. Django 4.0: names passed to QuerySet.values()/values_list() never become SQL aliases on 4.0 (alias grouping arrived in 4.2, django 04518e310d); 8 query shapes: 3 injected on 4.2.14, 0 on 4.0.post27. See PYELSCVE-3147 / django!67.", "justification": "code_not_reachable" } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:0406a555-fbf4-5388-8571-d27bb27f7d63", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45230 affects version 4.0.post26+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:c677892f-d9dc-5de0-a00e-b7aa0e88e325", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:6a572ddc-e551-5c09-b1e6-10174c918bdd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53907 affects version 4.0.post26+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:d8a82156-3717-50cf-bc58-1cafe4d7b5ca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53908 affects version 4.0.post26+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:32a4bb89-9a23-51cc-9fd2-9302c8002920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-56374 affects version 4.0.post26+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:4fdb6634-1db5-5b81-93dc-cdc37f73fdec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:e952c983-d3d1-50c2-b6ae-970e276b4ba8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:df8daa19-f21e-54eb-9be6-f6c8f2fe764d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:426b9841-37cf-563e-8f00-e21a3f778470", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-26699 affects version 4.0.post26+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:10338141-7f09-5011-8054-90b3bf872818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27556 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:bfd8ba90-7f5b-57a4-b96e-34954bb5a53f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32873 affects version 4.0.post26+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:473981ef-386e-5bd7-aca5-006078260c76", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:788ff872-95f8-59e3-b7e6-ca8b53efb3f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:d4c9ee93-7cb4-5e98-a4db-99d8d9031ba8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59681 is already fixed in version 4.0.post26+tuxcare of django. CVE-2025-59681 already fixed on tuxcare-current/4.0 by fe5f66c68a, released in 4.0.post17+tuxcare; 4.0.post16 accepts 'injected_name#', post17/post27 reject it." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:20b361db-5c6f-51ed-bfc2-26dc6833edd3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59682 affects version 4.0.post26+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:ec56aecb-81df-5820-af15-471c79ea6811", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:eea1951c-e05a-56a1-b30c-c8bafeb69dce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:335c8acc-9dd5-59cb-942b-11bcc2ef2cce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2026-108147", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:04189ef4-70d6-5966-9d3a-b67f5e7f4893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-108147 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2026-111211", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:56cae146-b63c-5173-ab67-ef9e939255e0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111211 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2026-111362", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:e2fcbe77-d737-5fdf-899b-7bf8b9c6f0c7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111362 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2026-113593", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:46513358-0eeb-5c93-8605-43db83cb269b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113593 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2026-113733", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:ef72c5ca-a3b7-55d2-9c4d-6ca5c0f96f0b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113733 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2026-114582", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:9773f5cb-b504-5e6c-a6a2-e9ef60543ca8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-114582 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:fa3eed7e-97d9-5fca-a4dd-fcd10b094ee7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:a4be6ef9-eaf1-592e-bcdf-a000b1ba9427", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:1c9cd66c-c43a-53b2-9f4a-7c5bc11ff258", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:150c6b21-d525-5b8e-aa31-07d6af0c6de5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:4d9e01fc-27f2-58b0-a2af-9a76976c29ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15307 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:a213764c-1cdc-57b9-b3d3-3d5a8883222c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15830 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:97d14dfb-7b9c-54e1-bb0f-98622587b8c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25673 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:9cb33494-77fa-59e6-9ffd-6b009b76b680", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25674 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:40d4551b-a13b-51cd-bc60-fb0f287eb5bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33033 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:45fb4ea4-e9b8-5257-bc55-3f8be26c9aff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2026-35192", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:90a998ff-c8fa-500b-b44c-a20c338b5de1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35192 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2026-35193", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:45ca51a3-a7fe-5d19-aa19-b3cb38b9dcf4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35193 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:e5db09f9-58a2-5a6c-8a7c-03fd68605f15", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-3902 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:8468f630-6526-5176-b8f0-6636af8975a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-4277 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:c4df63b5-04c7-5d9b-b6a6-417e8c2cc18d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-4292 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:dc9a5be0-a268-531e-a4bc-e7350778f13c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:71870152-8156-5cf9-be78-01d7ede76dfa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:378f50fc-c226-5a15-ba20-304b949c660c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:ce89c2c3-0d45-553c-b7df-1b0e0076dc9f", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 4.0.post26+tuxcare of django. not_affected \u2014 Django 4.0 is not affected by CVE-2026-53878. The vulnerable component DomainNameValidator does not exist in this version (it was introduced in Django 5.1). All domain validation in Django 4.0 is performed by EmailValidator, URLValidator, and _simple_domain_name_validator, which properly reject domain names containing newline characters through various mechanisms (regex anchors, explicit unsafe...", "justification": "protected_at_runtime" } }, { "id": "CVE-2026-5766", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:1011a52f-0849-5bb4-a5b8-4bdaf1fc92dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-5766 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:0f5c7146-a136-58a3-a099-5213531d1dd8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2026-6907", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:3b669c56-010f-55af-8881-93a309769259", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6907 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2026-7666", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:7a4c7179-32fd-577a-948a-e14af89079b8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-7666 affects version 4.0.post26+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ], "bom-ref": "urn:uuid:bb14b041-adc3-5bf6-9fea-f8be65734ca0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 4.0.post26+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@4.0.post26+tuxcare" } ] }