{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:13ccfe1c-54fa-5ead-9889-ed771a296e6c", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@5.0.2.post12+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@5.0.2.post12+tuxcare", "version": "5.0.2.post12+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@5.0.2", "type": "library", "version": "5.0.2" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2007-0404", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:edd41ec2-52d0-5adf-8035-f948054df247", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0404 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2007-0405", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:f7c1f4c9-4816-5a74-820c-c5d2ad2165c2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0405 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2007-5712", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:65a95791-761b-5a29-9276-87087b2d1622", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-5712 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2008-2302", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:cfebd470-d3d9-5134-a350-b284a08da54d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-2302 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2008-3909", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:4fd77cf6-d0dc-5bf0-adca-ad83b4eaf692", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-3909 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2009-2659", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:f4127f3f-25b6-5905-961c-c313e18e34ae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-2659 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2009-3695", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:8f219fa5-0e03-5d98-8413-ed07cbdfac7c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-3695 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2010-3082", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:1c724389-cca3-5c22-a0bd-17aa6a556c00", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-3082 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2010-4534", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:ea6590be-85c1-5529-b8d0-aa7c8739f558", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4534 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2010-4535", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:3d85a211-8556-5951-8598-fe531dfe0054", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4535 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2011-0696", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:7a95189a-2a6d-53c1-afae-614edfaa725f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0696 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2011-0697", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:ed17ba62-faac-541b-9f8d-0907e5c6e4de", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0697 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2011-0698", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:927586f5-a1c2-56a0-9aab-859fc0fffbf8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0698 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2011-4136", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:83dde23c-e30e-5147-bf82-9bfc01680bcd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4136 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2011-4137", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:9b5cf650-d8e7-5e21-b26c-a59c9af665c1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4137 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2011-4138", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:2a30057d-275a-5140-85d0-b50b9afa3b21", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4138 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2011-4139", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:9a39a431-8ab9-5132-8f55-75c7d844b6c8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4139 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2011-4140", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:89aebbe1-5dcc-5917-a7ea-4f85d0cfec5e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4140 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2012-3442", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:c379a978-61fe-5188-836f-269d9cbef659", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3442 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2012-3443", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:71ace878-2d8e-50b0-9908-d88c5d993362", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3443 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2012-3444", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:ff868924-c080-5d77-b730-6b7293fa1c40", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3444 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2012-4520", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:d897dd2a-a793-5380-a6e3-86eb0fe58004", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-4520 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2013-0305", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:2ff2acb6-8cdf-5b25-a63f-0579eea7f6e1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0305 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2013-0306", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:c9e6168d-48f0-5dac-9efe-1ee45582a1b2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0306 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2013-1443", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:693279fc-79a3-516a-a3eb-4aaf1dd4b587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1443 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2013-1664", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:a613137d-4b7e-5034-8ae0-55a9f0d72dcc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1664 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2013-1665", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:12910882-a760-5ac0-90f0-9921cda77fc6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1665 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2013-4249", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:73ff5cc9-5802-5941-9c2a-1e09d00fc110", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4249 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2013-4315", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:44027f79-4273-5be8-a4d8-bd9272457740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4315 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2013-6044", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:b330ed42-e8e9-56b0-85be-b21b8249da42", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6044 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2014-0472", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:9eae49ea-4494-527f-9eb0-72d02eabeed1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0472 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2014-0473", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:6bb5e6a4-801a-5083-b941-9c42d9ec2d07", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0473 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2014-0474", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:17ab055f-0ddc-5daa-ab6d-8cd64be37e40", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0474 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2014-0480", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:ec1adecb-e97f-522b-a8d4-053c876fc1fc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0480 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2014-0481", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:bd4ccf1a-97c2-56bc-82c1-422424ac1a4d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0481 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2014-0482", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:8f47e06b-bc2e-588e-bff5-6725963eca99", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0482 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2014-0483", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:1d33aa2d-d8cc-543e-8b36-631447b6402b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0483 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2014-1418", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:e86fb7ed-68af-51c0-a48f-8893661ad5ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-1418 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2014-3730", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:0675b973-f22c-53cc-8233-74b8c1faf80c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3730 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2015-0219", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:9f4a7589-1de8-5a38-a10b-0de34fb0f0c6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0219 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2015-0220", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:79630d7c-b152-5b5b-a36f-1644edc92910", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0220 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2015-0221", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:9031fff2-b415-52dc-a1e6-f23c7c714090", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0221 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2015-0222", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:2fefe5d1-fded-5b23-ad4c-ea60b157c783", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0222 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2015-2241", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:d6dca93c-7d3a-5274-8990-b99fc2274639", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2241 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2015-2316", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:c2ce0a2a-9dec-5c38-8514-05f4b053914b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2316 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2015-2317", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:ca1ed655-bef4-5a71-86a4-833ab8040a9b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2317 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2015-3982", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:4e925625-7c6d-5e43-bf52-d504626b821e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3982 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2015-5143", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:19d117dc-a8c3-5d4f-9abf-986bb348768f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5143 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2015-5144", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:2ae2d2c4-e2b5-5f90-a570-f7d407551507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5144 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2015-5145", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:ad57a53d-2cb2-5f25-a2d1-c43983bba892", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5145 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2015-5963", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:23f16b90-89d4-5352-b115-bb7d54f7f627", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5963 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2015-5964", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:a817c0e9-4c19-5ae9-a661-099e036abfab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5964 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2015-8213", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:e3dd36e0-ceea-55dc-82f4-fc3dd8fd5aea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8213 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2016-2048", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:69d1f530-d964-5db9-8248-0dbae0b199e1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2048 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2016-2512", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:8f6ca69f-8804-59cf-87f4-2f4c018b7f5b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2512 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2016-2513", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:0fafb2b6-03bb-5a7d-a1c6-084d9d3efba5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2513 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2016-6186", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:3c930447-d85b-5d5f-96a2-955b444d5c91", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6186 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2016-7401", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:a1171891-8630-5a33-aa18-3794795e4482", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-7401 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2016-9013", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:d9f5f7b4-caff-5fbb-837e-c84ab89db2dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9013 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2016-9014", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:4ade555f-2617-5fb8-90e1-64d1bcb526c7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9014 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2017-12794", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:b22aa22c-06b7-5ca7-bb32-6fff92c5ed91", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12794 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2017-7233", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:bde5ccfe-1a45-546e-af55-cb4f56fb1f5f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7233 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2017-7234", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:2b5ec39a-b0b4-5c17-a3f4-a89862a7e475", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7234 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2018-14574", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:55055a2e-ea69-5576-817f-e07da38713eb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-14574 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2018-16984", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:b7f9fc94-1bbb-5176-ba20-e9e4cf9b7d41", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-16984 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2018-6188", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:771025cc-c4ba-5595-a199-9860817b8185", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-6188 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2018-7536", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:02eb0f9a-a763-5c58-af0f-68c9d40fca33", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7536 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2018-7537", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:31221b9d-7fbe-5eef-9dea-e51cb2fc972c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7537 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2019-11358", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:f91a3596-8bb0-5a0b-8ecd-16994cb836b6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-11358 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2019-12308", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:8b4b6c47-a17f-54ff-9fc6-540c2eed4b4e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12308 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2019-12781", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:15f75d68-3063-5611-98d8-d31f8bab4433", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12781 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2019-14232", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:539df1f6-f7f7-5758-b5f6-5c3b36b556c8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14232 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2019-14233", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:09ef3ca4-171f-528e-a816-cb018ee1a811", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14233 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2019-14234", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:40420fb4-3dbb-51a0-aba1-7783c45dc454", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14234 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2019-14235", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:b1637bee-babd-534c-a540-5b09511f1331", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14235 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2019-19118", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:34852fcc-94cd-5a27-b679-be15791cc200", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19118 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2019-19844", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:65a86650-3a88-5e3d-af95-d1b0b1080074", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19844 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2019-3498", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:bd5c65c8-4d4d-5cc6-8602-3a58c94ffbfe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-3498 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2019-6975", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:c606471d-270a-5d45-96a9-0c28b0edb700", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-6975 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2020-13254", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:988f1548-f748-5af3-84ae-32d6dd6be537", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13254 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2020-13596", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:8dfaffc8-713f-568d-a24e-3e3273e7452e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13596 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2020-24583", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:b55f679c-87e3-55c7-a9eb-ac331e5e9132", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24583 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2020-24584", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:a760e70d-7066-50fc-9042-d58f8341241f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24584 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2020-7471", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:723c48de-4cfe-5ec9-9448-4d866402cc41", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7471 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2020-9402", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:0b21aad3-665b-51e9-973a-219c4299e51f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-9402 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2021-28658", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:5317b2a1-a3b0-5610-93f2-c52ae8db1033", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28658 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2021-31542", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:44a9e45a-5746-51e5-9015-6d63add60a32", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-31542 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2021-32052", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:24388eae-41d1-5893-96cb-2f3c89bc43e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-32052 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2021-3281", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:c5ab4b4e-bfd8-575b-9bff-eccc50f919cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3281 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2021-33203", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:b94365ed-5363-5e16-b72b-5b7a47f6927f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33203 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2021-33571", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:3a67d47b-4ac4-587f-a414-3d62183d4055", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33571 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2021-35042", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:d3f4870a-6c4a-5be5-a58e-972a9ccfe0fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-35042 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2021-44420", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:1bebb886-2e36-5c36-9a24-c895e9a3aa62", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-44420 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:339d9477-8829-5faa-8ff1-1c785b645144", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45115 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:f33bb9ba-37e3-5477-8ad6-d016b63ded2c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45116 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:7dee643f-8cee-5cec-83fc-cbd3b612852d", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-45452 does not affect version 5.0.2.post12+tuxcare of django. not_affected \u2014 Django 5.0.2 is NOT affected by CVE-2021-45452. The directory traversal vulnerability in Storage.save() was fixed by upstream Django in version 4.0.1 (January 2022), over 2 years before Django 5.0.2 was released (February 2024). All required defenses are present in the target: backslash normalization, path traversal detection via \"..\" checks, os.path.relpath() to ensure relative paths, and trip...", "justification": "code_not_present" } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:627b3af7-f15e-5df1-be43-a68ed19f522a", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22818 does not affect version 5.0.2.post12+tuxcare of django. not_affected \u2014 Target Django 5.0.2 is not affected by CVE-2022-22818. The vulnerability (unescaped HTML output in {% debug %} template tag leading to XSS) is not present because the upstream Django fix was already included in the 5.0.2 release. The DebugNode.render() method contains both security measures: (1) early return when DEBUG=False, and (2) HTML escaping via escape() on all pformat outputs. CVE affect...", "justification": "code_not_present" } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:a8fdb980-e616-504b-a6bd-4e6eeb4b7c59", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-23833 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:5af83352-43ca-5839-b9db-4d5669471f10", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28346 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:16885a3f-7fbc-5f43-94a0-f65ae5b315d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28347 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:b74026ba-589c-53af-b7ed-03549a5a470a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-34265 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:1165d337-09b0-5b5d-ac95-dad714eed656", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36359 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:d748bd27-9421-585d-bfee-8edfc6448f17", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-41323 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:7e17b99d-2a13-58ed-bd2d-29870e3e7e7e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-23969 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:174ed8a0-abda-5e59-8fa0-d281bdfcfa34", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-24580 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:91fec9c4-6066-5d3e-b085-22f2aca2161f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31047 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:21fbbb88-cb08-52da-a297-83e442209b21", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36053 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:d9dd52ce-73c0-5ac9-ac56-327ac80ebfb5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:dcb12262-5fdf-5ee9-804b-b41be63cf6a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-43665 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:3b1a66de-eade-5295-a7a2-47a3ca8e20a1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46695 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:bfc15a68-c454-5497-935d-9c8e18d30ddf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-24680 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:3f867ed6-6c67-5e54-b13e-94b97407feeb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:3e5a610f-0969-5b78-90bd-293de3075078", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:fc11063d-23af-5e11-9d65-4031c9f343aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:26551e5b-f6a2-5e9f-bc22-dd572dfd469f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:73994277-80a1-5e84-9855-41e96f389f8e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:4f41bea8-96db-5437-a1cd-2398e784319e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41989 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:cab5bf44-08ff-53e6-a453-fae5dc410a03", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-41990 does not affect version 5.0.2.post12+tuxcare of django. not_affected \u2014 Django 5.0.2 uses the original simple trim_punctuation implementation that lacks the vulnerable code pattern. CVE-2024-41990's DoS vulnerability was introduced by the CVE-2024-38875 fix (commit d666457453, June 2024) which replaced the simple implementation with a complex CountsDict-based one containing repeated rfind('&') calls. The target version predates this architectural change and therefo...", "justification": "code_not_present" } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:4ee30150-e531-56ba-af01-f9a7ffae7096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41991 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:957ea8a3-4200-5d13-8b61-b944201386f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-42005 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:c515ce77-cd77-5a79-8683-a39550256c72", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45230 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:42b12965-7e28-59b5-9803-6ff93391c950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:74790c6f-8732-5e74-919e-f8efd8714b54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53907 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:8c0d0c8d-9181-5f1c-bf12-bcae6ff98707", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:a53668d0-4e15-53e6-bd47-740424baf034", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56374 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:e633cc53-4e66-5e61-8856-6c8c6c01050e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:e0002787-4c4b-5432-a9ac-8ed4486147bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:0582e7de-ad27-5fed-b749-0943333d23b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:b63cfc4a-4f8f-5112-b528-0cce848c4260", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-26699 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:32625c6e-337f-5602-883a-fbd75b8c829a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-27556 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:1223bd95-f9f5-5b0a-8afd-aa07a961220b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32873 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:2ed70af7-cffb-5af5-8d4e-d61b91e7d2bd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:6ae5f368-e14f-5df3-a30e-108eb1bee1f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:f3ad7d63-1200-50fe-8ea9-555b1915b40b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59681 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:75aeed4d-e51c-53f7-a26e-038d397d6206", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59682 affects version 5.0.2.post12+tuxcare of django, and is fixed in 5.0.2.post15+tuxcare." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:179557c9-008a-5040-9923-8a54e57b4ab8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:1d51ad76-9826-5a60-b9d4-b5ac5e835c50", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:ddb4a3fd-9869-5bca-95ef-1e439acb2542", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-108147", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:8db90002-86a3-52f2-9783-044083632073", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-108147 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-111211", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:00082219-5296-5db7-8597-af6e387131a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111211 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-111362", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:0efba58b-3959-5de1-9a37-3072d99d0046", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111362 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-113593", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:262d15ca-73cb-557e-97d9-548d8ea408d2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113593 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-113733", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:ada1bd36-8ab2-5e17-9def-e2c3ed024c1f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113733 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-114582", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:2917448a-383b-568d-9a20-412a7a1a2cd0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-114582 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:5ac783e4-bc5e-5442-a834-9ff3db285a2c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:a89c4e2a-ef8e-5a10-8e72-ba832246aa27", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:c38c76db-cedf-5d69-9d30-a30d8440839e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:b5c9ef0a-99ab-5222-a193-31743c577a51", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:699159bb-80f0-5223-b490-e6d64cd112c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15307 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:3251dee8-c412-5a60-9ec2-4c1cec7a26a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15830 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:063c0997-28e0-5780-87db-7a2f6ef06939", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25673 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:69c4b53f-6f62-5522-8981-44f7f3fc86b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25674 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:71f9a3e9-4538-5685-a8a7-9f41bbbf9d80", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33033 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:130281f4-bada-5960-a053-09922457326e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-35192", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:906e45bd-0545-581e-9bcd-09432a5f8e5a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35192 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-35193", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:11024dcc-993d-5907-b518-2790c4ff54b3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35193 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:2e6ada7b-fd8e-5297-8a08-2bd400087044", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-3902 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:8ab2d4a4-5cc3-58b7-bfca-5d6f010188d8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4277 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:c75da16e-da94-5906-a848-11d97f8dae53", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4292 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:45494d7a-cfdd-532d-8339-fba4fa0949b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:8ab3138a-e451-59e3-ac51-cd85c46730a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:011cace1-c94a-5600-9d23-d914c6d417a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:9c1a2e64-c2d2-50cd-808f-aaf037192330", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 5.0.2.post12+tuxcare of django. not_affected \u2014 Django 5.0.2 is not affected by CVE-2026-53878. The vulnerable code (DomainNameValidator class) does not exist in this version - it was introduced in Django 5.1. Django 5.0.2 uses _simple_domain_name_validator which already validates against newlines via string.whitespace.", "justification": "code_not_present" } }, { "id": "CVE-2026-5766", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:9ac77264-b7cf-5449-8b4e-39ffbf1fd688", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-5766 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:df79154e-743f-58ff-9f98-8308b42fbe40", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-6907", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:7e9844dc-8003-5e54-b106-0ef8f66762e9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6907 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-7666", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:3cc06d56-db52-579f-8528-542d9339b0b1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-7666 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:6f00b622-f896-5681-a398-8476c6e461a2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 5.0.2.post12+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ] }