{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:49da51bb-8918-5989-b0e1-bab9704d9dd4", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@5.0.2.post13+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@5.0.2.post13+tuxcare", "version": "5.0.2.post13+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@5.0.2", "type": "library", "version": "5.0.2" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2007-0404", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:6cf2bda0-a45c-570b-9460-df5c80838d2d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0404 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2007-0405", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:12b8540a-0fcb-536d-a5e0-f21147fa59c9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0405 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2007-5712", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:36447c5e-cf4c-5a63-a9e4-87bb05d84d07", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-5712 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2008-2302", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:b5c5f83d-3991-517f-9463-71bc5fe93032", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-2302 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2008-3909", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:6f144ea0-623f-58d2-b033-187592ef0eb4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-3909 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2009-2659", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:931f8b02-57b6-5407-ad8b-3bfa33e33912", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-2659 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2009-3695", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:45fa36df-04c2-503c-9a4c-ad83faa95fe2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-3695 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2010-3082", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:897cbfd2-572b-5cb6-a00a-ec66c4f42852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-3082 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2010-4534", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:9d76b94a-c2d7-5432-888b-2b04bad6d110", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4534 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2010-4535", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:846e0c1e-ac25-5305-a2f9-689a3b5d6151", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4535 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2011-0696", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:7e9dcdea-d67a-54b9-a718-a9300156d1ab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0696 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2011-0697", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:8102dbaa-2775-5a5b-9268-f481d34593b8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0697 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2011-0698", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:5cb3acd1-108f-50d4-9f0f-73593e3a620b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0698 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2011-4136", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:09c5dc37-a673-5ce4-a50c-521ce7f04f13", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4136 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2011-4137", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:b51a8671-3296-5aab-990b-25eeac02e59c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4137 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2011-4138", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:5f0c092b-f454-574f-b032-a7602797ab98", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4138 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2011-4139", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:3732e285-02be-5d68-bab6-d795ab9b55f8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4139 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2011-4140", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:e8b80fd9-eec7-5838-a6f0-c151aa01b32d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4140 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2012-3442", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:1add33e0-195c-5944-9493-e5f8369c45cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3442 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2012-3443", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:f68e0e3c-2346-5f9c-9343-f0a061162f26", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3443 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2012-3444", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:3d253e7f-beda-5c78-afc0-ca386cb2e89a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3444 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2012-4520", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:6a895520-6310-5707-9340-bb54bfc0cc76", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-4520 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2013-0305", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:7e2ba6b7-22bc-5399-b0d8-f50e86a260b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0305 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2013-0306", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:4fbfd925-b8eb-5f01-9026-c408ed24fc0f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0306 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2013-1443", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:940f174a-c2f0-58b7-b540-19f17d9aa876", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1443 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2013-1664", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:d37f5357-5e34-5f01-806d-90cdc2a6a217", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1664 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2013-1665", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:e49c8b0e-69f0-577a-93f7-a62fea19e1ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1665 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2013-4249", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:3b09e2cb-fa09-5087-848e-7649b20f076f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4249 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2013-4315", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:0c5c32bb-e7c2-51bf-abc6-01e4b13890e5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4315 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2013-6044", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:ccc5c29f-dfdd-540c-a973-95db16063be8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6044 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2014-0472", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:62838e43-8788-5ae9-85a7-4cb635afdcdb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0472 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2014-0473", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:1303ca2b-f263-50af-a1c6-fdc84cedf212", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0473 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2014-0474", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:764cf1fd-3558-5931-87a1-43817ba3bfbd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0474 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2014-0480", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:5e615ac2-7396-5eb8-aac3-4cff2f327e28", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0480 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2014-0481", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:4c2b09c7-b2a3-58f5-9210-dd9f169fb2fb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0481 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2014-0482", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:c9111f47-8f1a-5447-a113-67c33ba5df63", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0482 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2014-0483", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:af3d2756-e449-54ea-b307-5ea6404e7530", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0483 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2014-1418", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:5526b75d-1126-5c8c-bf24-440dc8c86b43", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-1418 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2014-3730", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:19141276-53ac-5272-b571-2cecbf8fe827", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3730 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2015-0219", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:7dd6357f-258e-557d-8d61-08ff6d7df24e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0219 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2015-0220", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:e4844ec6-a898-5f25-bc64-864c507ce48d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0220 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2015-0221", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:f1d39922-f07e-5377-a1b9-ca118a2d28ca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0221 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2015-0222", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:049e25cd-679b-5cbd-8be4-c7b026f5e19d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0222 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2015-2241", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:0f81743c-40b6-531e-b6f7-29c76b2b82f6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2241 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2015-2316", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:de0c158c-a161-58c5-bdf0-49bcb2d1d537", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2316 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2015-2317", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:c9c00c38-0063-5e99-a740-ae58bd46bb78", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2317 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2015-3982", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:f8a91fe7-2490-5f0f-bddd-4cc58855c02e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3982 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2015-5143", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:1a15025f-17da-58f3-87e8-9fa0c26a842d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5143 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2015-5144", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:c6781d49-38c2-56a8-a993-db00dc35e75a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5144 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2015-5145", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:a030cde2-374f-5926-8f63-8b4c5bb7620c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5145 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2015-5963", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:aeaf2905-819a-557b-8769-af77f18481e1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5963 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2015-5964", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:a2e36163-6609-5912-9ff7-07bf803ab643", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5964 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2015-8213", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:19a2315d-a383-5c0d-af93-892c71d46784", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8213 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2016-2048", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:adcb238c-c4e1-5c4b-b206-12c1b98ab226", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2048 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2016-2512", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:51748a8a-0344-538f-b9a9-af9c59f72214", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2512 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2016-2513", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:12905c23-63cc-5595-948b-d70d5acbd6a1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2513 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2016-6186", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:092e28fb-c2f2-534f-ac0b-c25cb175a19a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6186 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2016-7401", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:01ae3280-585c-5a66-ba54-c099294c3686", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-7401 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2016-9013", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:729cb3de-6027-5050-abfd-73dacb81d455", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9013 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2016-9014", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:264c2c4e-7232-5fdb-a858-23cedba62c7e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9014 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2017-12794", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:3866c43f-54cf-5975-b181-786d8106d88b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12794 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2017-7233", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:db0bd8a6-8508-5c5e-ae53-f2054c0aee03", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7233 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2017-7234", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:79975c78-0fa6-5710-a7a8-7135d53d3eda", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7234 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2018-14574", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:38801c33-e384-5d4e-999d-94a11fa3d767", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-14574 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2018-16984", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:15390ef9-430e-5b7d-9af9-66e9cd847edc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-16984 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2018-6188", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:a4128385-8db9-5e0f-8d72-709e60d3aa9b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-6188 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2018-7536", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:5a8d2975-d220-5c10-828b-81f31d412e0b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7536 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2018-7537", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:4dcb2e1b-21c7-548c-aa04-a04e3d0ce56d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7537 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2019-11358", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:1b257cc2-f8a8-5df0-bab4-419e2c6243f6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-11358 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2019-12308", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:bfa93456-d12d-5ad2-bce7-2f6dff1b6614", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12308 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2019-12781", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:a162dfdc-ca80-5d96-a908-53cc2e54cda3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12781 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2019-14232", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:f60736d1-fd61-532d-a8d2-88449ad4c049", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14232 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2019-14233", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:8598b9fd-a267-54b9-97da-65dbe6fe4623", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14233 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2019-14234", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:64e35c27-e481-59bf-871b-8bb2e167bbaf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14234 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2019-14235", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:ed43d44b-871e-5cc1-87c9-5360f0ac255a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14235 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2019-19118", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:55d3ac4e-d56b-5201-b983-1a0fb78cc0b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19118 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2019-19844", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:9888ddf2-51f3-5218-9851-c012c225081e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19844 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2019-3498", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:1eebcc5e-6882-5e75-b0b3-dd69dba232c1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-3498 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2019-6975", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:86c635e6-5cfd-536a-89e7-5cc52aec7d25", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-6975 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2020-13254", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:40c1e282-7728-54e4-b325-7475bebe06e1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13254 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2020-13596", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:a70f108d-1df8-5ded-aea5-28b6fdb4902b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13596 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2020-24583", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:ece62ffe-b65c-5f79-a3eb-5a30db90ca57", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24583 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2020-24584", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:c078195d-2bdf-590d-a51e-f11b9921bbee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24584 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2020-7471", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:c6dc9c9d-48d8-5e1c-a010-fc3a5f3647b1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7471 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2020-9402", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:e8349899-cbbe-51c5-a0d3-082f3ff184d1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-9402 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2021-28658", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:f45a8564-f73e-5fff-9065-2ee511a731b6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28658 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2021-31542", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:9ec828e5-48b3-5c06-983a-a06500c717cb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-31542 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2021-32052", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:c26c2e7b-30d3-54c4-acc0-a3cf4bd539d3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-32052 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2021-3281", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:bceaff64-8047-5bb0-9910-e52fa16ca874", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3281 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2021-33203", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:e1e9d825-4dd0-5f4f-b031-b7f9d044e1ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33203 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2021-33571", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:d3229a56-0595-5edb-a300-54c979af0c22", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33571 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2021-35042", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:def84436-dfa5-52c7-881b-13b9be6d3ea5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-35042 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2021-44420", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:4dbe18e9-8c7e-53fd-9f56-a681d06cd2f5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-44420 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:ba754a75-d287-57b0-bdbe-97c534b49eb8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45115 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:b6312d8d-214b-546e-a23b-856fe36e6c1f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45116 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:e51500ef-de18-588e-bbbe-b869911be7dd", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-45452 does not affect version 5.0.2.post13+tuxcare of django. not_affected \u2014 Django 5.0.2 is NOT affected by CVE-2021-45452. The directory traversal vulnerability in Storage.save() was fixed by upstream Django in version 4.0.1 (January 2022), over 2 years before Django 5.0.2 was released (February 2024). All required defenses are present in the target: backslash normalization, path traversal detection via \"..\" checks, os.path.relpath() to ensure relative paths, and trip...", "justification": "code_not_present" } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:e1c6e6a6-63ae-5367-b0c5-d22dc87e3f23", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22818 does not affect version 5.0.2.post13+tuxcare of django. not_affected \u2014 Target Django 5.0.2 is not affected by CVE-2022-22818. The vulnerability (unescaped HTML output in {% debug %} template tag leading to XSS) is not present because the upstream Django fix was already included in the 5.0.2 release. The DebugNode.render() method contains both security measures: (1) early return when DEBUG=False, and (2) HTML escaping via escape() on all pformat outputs. CVE affect...", "justification": "code_not_present" } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:010453fe-5d05-5feb-b47c-5d77329676cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-23833 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:08222779-cc03-5d33-bbaa-af681ce35cf1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28346 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:fcf437df-5dff-590e-95e7-b15d38bdf2d8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28347 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:29a0bdde-6f38-5e90-a4c3-9091af3f3518", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-34265 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:a0c2bc4c-dc0c-56fe-87f9-307823256a30", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36359 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:2398cab9-e587-5b5e-8810-8244ce17ca47", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-41323 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:3ee57036-df39-53b4-ae80-916e4112b23e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-23969 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:7ade7a65-d27b-5bcd-bb08-c3f8d40aa70d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-24580 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:2ea0ee81-c500-59ac-a81e-83032f76eca2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31047 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:05645656-6d02-5cf1-a749-2fcdda8a806b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36053 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:76868d21-99a7-54d9-9639-e9d0ac98d536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:67361212-73ae-5b4b-9e70-fa7c091fe386", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-43665 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:291e8c2e-01de-5776-8dce-180c7416e486", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46695 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:f2c463e8-1fc2-5c19-8810-5995ca85729b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-24680 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:16204a18-106e-55bf-ac74-65a9d905b992", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:b23cd708-93b3-520c-9730-0abc8d72af16", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:362146ce-07c6-5c2d-97af-34e56c2e486b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:30699f2a-605f-564b-86ac-6e5e27352233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:feb775da-6298-56c5-a423-a8f079e91456", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:3ef9a2af-6a9f-565b-bf20-cc3245a23454", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41989 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:559e0466-2b36-5faf-a726-2cbf9786183c", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-41990 does not affect version 5.0.2.post13+tuxcare of django. not_affected \u2014 Django 5.0.2 uses the original simple trim_punctuation implementation that lacks the vulnerable code pattern. CVE-2024-41990's DoS vulnerability was introduced by the CVE-2024-38875 fix (commit d666457453, June 2024) which replaced the simple implementation with a complex CountsDict-based one containing repeated rfind('&') calls. The target version predates this architectural change and therefo...", "justification": "code_not_present" } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:2f500f52-c362-5e5c-97e7-7d4d5376f872", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41991 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:9b3ca626-ada9-5deb-8d61-7f0c085ce1f0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-42005 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:2d0ab2a6-466d-5ec9-9bea-8b74376af35d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45230 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:6d7dee83-d933-5757-af58-e66b37f9f8e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:c2ffc0fd-f1c7-51c4-8278-1b82a5588354", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53907 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:944cd51d-051d-5f6b-86fd-88eb0ec12219", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:bf5acb9f-c051-5ebc-9879-23ae1142d009", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56374 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:1aa34e04-aa29-5445-86a7-88036fd98da0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:9f83a8dc-0b6c-5991-b4ba-4920a72ed51f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:026a0887-804a-5297-87e4-7865cc649bee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:c27943ec-3ba0-5c5b-bb67-38ad356049db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-26699 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:d4e98dc8-c45d-500d-8d7b-17dbe540cf59", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-27556 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:70b62f3e-be66-5fed-8fe0-60b88798d122", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32873 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:a8b22761-4ea3-5801-8c99-3f39dffc6e4c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:f15c2af7-c63a-58bb-8a31-cf116ecb7e1e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:078e3bf5-0cdc-5cbc-8248-e9d0ee94eb66", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59681 is already fixed in version 5.0.2.post13+tuxcare of django. CVE-2025-59681 already fixed on tuxcare-current/5.0.2 by 96d64ebe98, released in 5.0.2.post7+tuxcare; FORBIDDEN_ALIAS_PATTERN matches upstream stable/4.2.x; alias 'x#' rejected on 5.0.2.post16 from Nexus." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:f1860277-2ac8-554b-a112-a6196367a2e8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59682 affects version 5.0.2.post13+tuxcare of django, and is fixed in 5.0.2.post15+tuxcare." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:bd7556e7-d3b9-58c5-b7a4-d2c2dccfd87c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:0ac6545e-68f3-5390-ae45-ac88891b2924", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:1889e801-abc4-5113-b457-9d3107c92b03", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-108147", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:6ff33377-8fe4-555e-aaf9-e39a82d467c2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-108147 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-111211", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:44397d4c-d03f-5c0c-aadb-1adf5c0e9f28", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111211 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-111362", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:c4fa3696-fd19-54da-b557-43b96773cb0c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111362 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-113593", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:8466417f-6d69-50d0-8c1b-b2069ad5fc42", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113593 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-113733", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:8f98e109-d7b0-5861-8192-b80ee3e7f3ef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113733 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-114582", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:946ddea6-a77e-58f2-bd92-589f7de63b69", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-114582 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:991b5c5a-796a-55fc-8d7d-b9bd78941a0a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:ff98144e-9b48-5785-bfaa-1574d77e5485", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:bacab09c-b8ee-534c-a219-2641fdaf0990", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:bd26dab3-664c-59dc-a004-f1dd5afee6f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:02fde07f-093e-561e-964a-1e9345c8b707", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15307 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:5618bfcc-0a3a-5943-a9c8-c6b5a870401b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15830 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:467a70f6-3fa3-567b-b380-2269af41c356", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25673 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:657fb21a-1753-5c20-a0a6-c76be7907f67", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25674 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:c869fa50-d3e9-5c40-a580-e9226734d20b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33033 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:54eacb0f-8959-507b-bc67-046505f0c8e9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-35192", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:5c0ed38c-00e3-580f-8310-7765e4fa4893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35192 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-35193", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:2375bbad-eb3a-5661-bc13-f5b36328b4b2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35193 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:44b367cc-795b-5674-89d9-487258412d77", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-3902 affects version 5.0.2.post13+tuxcare of django, and is fixed in 5.0.2.post16+tuxcare." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:685462e6-9479-5b5c-99ba-d9a98ca5e5e7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4277 affects version 5.0.2.post13+tuxcare of django, and is fixed in 5.0.2.post16+tuxcare." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:82988a83-09fd-5f58-b6cf-2f03580644bd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4292 affects version 5.0.2.post13+tuxcare of django, and is fixed in 5.0.2.post16+tuxcare." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:dea0ad92-f14c-577a-9b6e-1d421d7d9200", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:4ece6440-f4a2-5511-a819-ebb867788b83", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:48f4b996-e2d2-55ac-8f95-98c6036d9ca6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:b9029b4b-9582-50c3-83c3-f4ed7af09231", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 5.0.2.post13+tuxcare of django. not_affected \u2014 Django 5.0.2 is not affected by CVE-2026-53878. The vulnerable code (DomainNameValidator class) does not exist in this version - it was introduced in Django 5.1. Django 5.0.2 uses _simple_domain_name_validator which already validates against newlines via string.whitespace.", "justification": "code_not_present" } }, { "id": "CVE-2026-5766", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:fb44af1c-92ed-5166-9708-45d22eee1783", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-5766 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:7e462549-a8a6-5d6c-9a7b-73a1586f0d46", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-6907", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:7ffe283e-f68c-58c9-bbe5-770ab64fb11c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6907 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-7666", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:16d80cba-7104-5619-bd2d-d0b851c31e56", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-7666 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:4d3614c9-acd0-5120-8083-0bc69b051539", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 5.0.2.post13+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ] }