{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:423f9ea7-fffa-5b32-b834-c3b2749819db", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@5.0.2.post14+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@5.0.2.post14+tuxcare", "version": "5.0.2.post14+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@5.0.2", "type": "library", "version": "5.0.2" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2007-0404", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:5f6d5ba4-fb2a-559e-8e25-b5ff2b39d0f9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0404 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2007-0405", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:1147fc09-b968-5920-bddd-b9ab328a1025", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0405 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2007-5712", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:268f0974-9932-5eee-9dcf-aced82653875", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-5712 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2008-2302", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:e7c9986f-4fec-5723-930a-0a06946d871f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-2302 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2008-3909", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:40e15d33-9513-55e0-b901-513be1f8c747", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-3909 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2009-2659", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:8a6a216b-8f6e-58ea-9324-260ec798e7ea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-2659 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2009-3695", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:c7ab5e9d-53d5-5044-916d-2c62e0846e0c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-3695 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2010-3082", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:4ac8af9d-3b10-5035-8fbe-374a9b5f8763", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-3082 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2010-4534", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:e5fb1f2a-da2b-5d39-90a7-9eed1bd59247", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4534 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2010-4535", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:a895eecb-55ed-5944-9d9e-1e9d859a59fc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4535 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2011-0696", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:d99594c1-ea41-56bd-9240-9b9aa45b7aac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0696 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2011-0697", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:8181e6dd-560b-514e-8cc7-85b0dae0a984", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0697 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2011-0698", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:515e6f28-d3c0-55c4-8a48-251123b38cb9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0698 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2011-4136", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:d6d5bf99-8f9a-5d15-83d6-21b28a40248f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4136 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2011-4137", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:bb11dddd-c390-5469-bad1-535cdb84552e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4137 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2011-4138", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:a66b593e-af54-53a1-94f2-16958f8f01c8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4138 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2011-4139", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:0ff627e5-5ba9-5cd3-b438-9ca44f511eef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4139 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2011-4140", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:933c134c-31ad-5c8d-96da-740667638f49", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4140 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2012-3442", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:c927358a-ef2a-5058-b4a9-d357b803d1cf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3442 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2012-3443", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:3c43bf3a-4195-50ce-92fa-3aeb335a7c95", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3443 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2012-3444", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:4d4651cb-19f0-5311-984f-16209b4e260a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3444 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2012-4520", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:378f7159-7f19-5af2-b81a-a1136506829a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-4520 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2013-0305", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:44652016-fd70-5e82-ab3e-c146ec995dfd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0305 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2013-0306", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:ba742feb-747e-5698-8df1-7c67dbb6e1ad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0306 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2013-1443", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:72b3119c-59f6-5d78-9685-f6bb27ee8f95", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1443 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2013-1664", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:1bb09a88-3606-543b-b1e4-7ab0bedabd02", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1664 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2013-1665", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:2401459b-9e2b-5e8d-a4f6-9b086d0db918", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1665 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2013-4249", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:a2c263bd-411d-5d50-b29a-37aa022b75a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4249 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2013-4315", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:68aeb83c-686c-5a4b-ad2d-a169cb4bcd36", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4315 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2013-6044", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:78a1fecd-dc57-5c08-b6ab-e7f570feb6c5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6044 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2014-0472", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:ac925025-24a2-5ae9-b3da-db3904524d74", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0472 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2014-0473", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:f59faaf9-fc40-5f6f-838f-f6a9699f9632", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0473 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2014-0474", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:0e7184c2-0bfe-528b-8f4f-7b66fd99755f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0474 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2014-0480", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:3e2e5cc6-a38e-5f08-90f3-17347a46e235", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0480 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2014-0481", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:2e7f1992-eec3-52bc-90c0-755220a7b1af", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0481 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2014-0482", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:e08627a2-08ca-513d-afc5-77ee585787e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0482 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2014-0483", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:5288facc-036a-51ac-ac9e-364b72b137f3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0483 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2014-1418", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:7903df2e-e807-5c19-bcbb-6fb64530381d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-1418 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2014-3730", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:0db54975-677d-50de-9e21-ffdb1938ca5d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3730 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2015-0219", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:a262cc86-93bb-5c73-8d11-34f3b837e1ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0219 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2015-0220", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:03a4a5d6-0111-53a2-a3e6-87f55fbe42f8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0220 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2015-0221", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:9059e76b-aa3f-5ac9-8e02-e0aeabadda87", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0221 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2015-0222", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:028cd9bc-241a-507d-b9bf-6a7094da09e5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0222 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2015-2241", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:24572920-598b-5979-affe-c0a86fd32898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2241 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2015-2316", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:36bd83c2-9e74-534a-bc2b-9956832aed29", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2316 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2015-2317", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:7d34ed45-9db3-5d91-926b-438b00b25fc9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2317 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2015-3982", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:f63549eb-b14e-5845-8f6a-bf85723eec0d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3982 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2015-5143", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:2c084616-c9f2-5776-858f-68f7eb7cdfc0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5143 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2015-5144", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:b90bdf39-84b3-509d-b3b9-9785a7d633aa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5144 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2015-5145", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:dfd6d126-27d6-5a06-917e-4b4046f2ead3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5145 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2015-5963", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:0cbe621d-e48d-5754-81eb-2146d69efba2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5963 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2015-5964", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:ab1a6089-a3a7-51c2-8d60-ed93f949d862", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5964 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2015-8213", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:846524e2-effb-5901-a64e-8cdb4e5c246e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8213 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2016-2048", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:a2cce1f0-55ae-5725-b1f9-20f62125c9b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2048 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2016-2512", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:2794e447-6ebe-5864-94b0-caf653bcadd5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2512 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2016-2513", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:69321163-95c8-5ade-bbb2-7112bebdef13", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2513 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2016-6186", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:5b246b43-e647-5dfc-aa09-ea0982756f29", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6186 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2016-7401", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:9f8404f4-7cdb-50ea-9c32-69a544e36349", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-7401 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2016-9013", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:1ffa0fa7-8d2e-571e-951f-c0b73b048443", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9013 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2016-9014", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:0b1d6bce-82b9-5093-afeb-18c96a37047f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9014 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2017-12794", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:ac62b692-0c89-5d11-b1cb-e2c03f48511f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12794 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2017-7233", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:91b0cbc3-84ff-5932-83c4-97b6971ed64c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7233 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2017-7234", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:6b1abe34-4d39-529d-8f2b-c09259ea428a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7234 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2018-14574", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:43398ba0-0716-54ae-adfa-6eb36d2ec7e3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-14574 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2018-16984", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:5144906e-0160-5943-9150-0285c0814ce1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-16984 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2018-6188", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:c65b1381-c43a-5b2b-8124-01cbe8f3f722", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-6188 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2018-7536", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:3c72b218-ce84-5508-a126-c507c2acbe0c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7536 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2018-7537", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:2e89a6e3-69c0-54ba-9165-41110307b29a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7537 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2019-11358", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:fe63352b-5e64-5875-804c-288a09eec33e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-11358 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2019-12308", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:f4669b39-365f-5ab6-9a10-4e1b56ccaded", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12308 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2019-12781", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:1fa6c95f-562d-5ea0-9aea-a3321e57da91", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12781 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2019-14232", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:d56e8a64-8f16-516a-a7fc-54e83a3abdde", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14232 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2019-14233", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:ac6fbf11-91ae-5304-a1ec-04be1ee92c63", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14233 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2019-14234", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:2a8d4a9e-1ba5-57bc-b94f-7f981ca62a41", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14234 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2019-14235", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:57c7584c-d969-53b4-a614-5f41915d7814", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14235 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2019-19118", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:a9fc7462-3b1a-5c2a-bf28-7c133f56a1d7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19118 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2019-19844", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:2931e8f2-67d0-5588-a51a-e4a0fc16e9cf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19844 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2019-3498", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:75fd1f1d-ee6b-574e-84ae-a148e1bb4a80", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-3498 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2019-6975", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:b87ceb32-f20e-5f58-960c-e5ef44db12ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-6975 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2020-13254", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:a78781c3-2334-5e8a-87df-109170e1a631", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13254 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2020-13596", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:bf81f22c-4e64-5d2f-a58c-798dc89bec8a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13596 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2020-24583", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:0bfa8085-5730-5827-a73e-3540bb0d7325", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24583 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2020-24584", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:ce09b83e-5326-5eb7-a680-f311d73d93f6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24584 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2020-7471", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:63f415c2-405b-5e4b-9c6d-8288c4aff346", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7471 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2020-9402", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:656e3466-298b-5074-9902-fe94b7c4bb7b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-9402 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2021-28658", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:758ececd-c150-537a-9ab1-fba1c2c6f0e3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28658 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2021-31542", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:b19d627b-4573-5827-b222-3cc1e3f67151", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-31542 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2021-32052", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:839336b6-3c19-503f-aed1-e36b416921a3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-32052 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2021-3281", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:28917e7a-2b6e-58dc-a6a2-6ef5ddd16eb9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3281 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2021-33203", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:49c524a3-812b-551c-bc8f-8c866ff491e5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33203 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2021-33571", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:623bf834-d735-5ec2-b969-5d0a3b898de9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33571 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2021-35042", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:4e0dc9c3-9b14-53ac-994c-ddcf0bc63c37", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-35042 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2021-44420", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:80c8b6cd-db24-505a-a62a-651464a37a04", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-44420 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:d9bfe42e-e6cf-5f28-ae16-04985202dc7f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45115 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:ad00d59f-ed03-5549-b728-756bc566ae1b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45116 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:0c049101-d0a4-5949-8954-d0f2d0f489e8", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-45452 does not affect version 5.0.2.post14+tuxcare of django. not_affected \u2014 Django 5.0.2 is NOT affected by CVE-2021-45452. The directory traversal vulnerability in Storage.save() was fixed by upstream Django in version 4.0.1 (January 2022), over 2 years before Django 5.0.2 was released (February 2024). All required defenses are present in the target: backslash normalization, path traversal detection via \"..\" checks, os.path.relpath() to ensure relative paths, and trip...", "justification": "code_not_present" } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:bdf380ce-5a30-5412-b8de-ce887ac75291", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22818 does not affect version 5.0.2.post14+tuxcare of django. not_affected \u2014 Target Django 5.0.2 is not affected by CVE-2022-22818. The vulnerability (unescaped HTML output in {% debug %} template tag leading to XSS) is not present because the upstream Django fix was already included in the 5.0.2 release. The DebugNode.render() method contains both security measures: (1) early return when DEBUG=False, and (2) HTML escaping via escape() on all pformat outputs. CVE affect...", "justification": "code_not_present" } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:21257f63-ba27-5b4f-ae82-db3b9d88bbc7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-23833 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:abee0a52-8070-5a20-95ef-29243ab72fd7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28346 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:dead5f6f-1cfd-5352-b0a5-5ed827aa3b46", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28347 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:046d2198-5c13-5c93-a5fb-dd766d987dca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-34265 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:3a61b6f5-eaf7-59b0-af9d-72bfcf269736", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36359 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:d098dcf1-f571-57fd-a719-69a7eac77f16", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-41323 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:5506dba9-e7ef-545b-a149-9c9e49d9e649", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-23969 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:3e59b601-0247-5d69-a035-6e7d6936c1bb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-24580 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:530ebafa-ed82-5035-944f-968eeaa008ef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31047 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:000a834a-49a0-539d-bf28-00523265c0eb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36053 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:d151f8d2-e95b-5eba-9341-21bbf14979cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:a7342462-4412-5f53-b287-29519da1d3e7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-43665 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:cbd5cdb1-01a5-5a8b-9c63-dc1b20b93970", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46695 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:44d3ae2a-fa9f-5e64-8fbd-b1f0fedcdec5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-24680 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:77092f6a-e56a-55f9-9d61-ed8e7aad5978", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:8e42b37c-6e5a-5820-8c4c-b0298cf39cc1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:1c94cc3a-3949-5244-b1b3-857ea419525d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is fixed in version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:9bf0b80b-445b-5983-926e-762b75e6f693", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:120a45bf-e4ee-58b3-a8da-ea0ccaf28264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is fixed in version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:d3d9bc15-fe3a-5c3f-8d4e-3bc660b64609", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41989 is fixed in version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:ba20f509-a815-53e4-80f1-05fc08b05e0b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-41990 does not affect version 5.0.2.post14+tuxcare of django. not_affected \u2014 Django 5.0.2 uses the original simple trim_punctuation implementation that lacks the vulnerable code pattern. CVE-2024-41990's DoS vulnerability was introduced by the CVE-2024-38875 fix (commit d666457453, June 2024) which replaced the simple implementation with a complex CountsDict-based one containing repeated rfind('&') calls. The target version predates this architectural change and therefo...", "justification": "code_not_present" } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:3594d579-2366-53c4-b5fc-9fd7e0cb5775", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41991 is fixed in version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:e1503fa6-692c-5a68-93fc-5c2800e7422f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-42005 is fixed in version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:d4b3a577-acc9-50e0-844e-c5d88552ea19", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45230 is fixed in version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:f5b458b8-6221-557e-91ec-a7a8d90eb407", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:3cfaa244-afc5-5c72-9a2a-4f18d0537f8c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53907 is fixed in version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:0fec00a7-4876-513d-ae22-bdac3a04aa9e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:c914968a-b30e-56b8-8db9-13e45b182d6f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56374 is fixed in version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:b4ff0293-2f7f-5c2e-9538-668c7340fc43", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:4a79569a-21f0-5436-a8d9-b1f2d68f28fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:37f09284-1847-5fae-8550-c4267eefc53a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:3cd86650-b276-5027-b382-3879e4a024a7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-26699 is fixed in version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:70c119a3-867a-5331-b242-9cec1ff4bd43", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-27556 is fixed in version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:cec05266-1534-57af-8add-4afafd68b7a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32873 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:62260d92-ea7a-5fc9-9bf8-84e9fd6d42ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:087f44d0-86d4-540b-add4-354e36dbc7bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:1c548c17-a362-5e2f-ac60-8c470d7b7242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59681 is already fixed in version 5.0.2.post14+tuxcare of django. CVE-2025-59681 already fixed on tuxcare-current/5.0.2 by 96d64ebe98, released in 5.0.2.post7+tuxcare; FORBIDDEN_ALIAS_PATTERN matches upstream stable/4.2.x; alias 'x#' rejected on 5.0.2.post16 from Nexus." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:2bac4c8b-a818-528f-aceb-9132167cd772", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59682 affects version 5.0.2.post14+tuxcare of django, and is fixed in 5.0.2.post15+tuxcare." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:047890a6-6b11-5521-abb3-a3e6c0686815", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:ce697aa0-4d19-5ef9-bdae-b172b4cb33a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:32eda8c7-540e-58d2-96b2-5f076115274e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2026-108147", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:8e624d28-870f-5e4c-b14b-880514d3996d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-108147 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2026-111211", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:fc7be005-dd4b-5ca8-968b-a890a10f54c7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111211 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2026-111362", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:5816412e-dae6-5a6a-8171-18061408dc8f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111362 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2026-113593", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:79eb6c9c-9c35-5536-b309-be1c15c7f16d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113593 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2026-113733", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:25f5c8bf-67be-524e-9c49-126d78f930cf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113733 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2026-114582", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:6cbd3b35-8592-5379-8594-8ec7cd8d5128", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-114582 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:1fe3e28e-7a8e-5a1f-be2a-088f13e9eb15", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:16bf4c33-782a-57f5-8ee0-70460338a4eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:c33be608-62f2-525e-b1aa-647008054cc4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:c94633d0-f504-5c9c-a61f-f6774070f9b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:5254ebbc-1e09-5bb2-8ad7-fe7226f45790", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15307 is fixed in version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:90ec478b-703e-58eb-8c22-551d1cf459c6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15830 is fixed in version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:2e37dc94-bb86-537b-ae8e-e03d365c1b59", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25673 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:dfed8e32-c4a5-5dda-96b2-de2130b1f8ed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25674 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:1eaa2048-f650-5f57-ac27-46ab27a36257", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33033 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:78027a8b-fbd3-5e18-8c7d-4f8c70078a37", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2026-35192", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:debff995-265f-51ca-9a4a-b672ff61916b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35192 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2026-35193", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:08ad204a-e7ae-551a-9dec-78a2d6e91e6d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35193 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:845dd97b-b578-525d-9006-512d1f0b4419", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-3902 affects version 5.0.2.post14+tuxcare of django, and is fixed in 5.0.2.post16+tuxcare." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:6ffa0325-6f4d-5fb8-b9f8-bede2a6e9cce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4277 affects version 5.0.2.post14+tuxcare of django, and is fixed in 5.0.2.post16+tuxcare." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:d6b174ab-c5aa-5249-be7f-6f3728e558cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4292 affects version 5.0.2.post14+tuxcare of django, and is fixed in 5.0.2.post16+tuxcare." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:608fc623-63a1-56db-9625-2a6f04ee14bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:4010e494-90a2-505c-924c-74fb74987415", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:c13cd727-5943-52e1-ad45-32fbc7761742", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:c46a9fa6-1333-56e6-ac01-77b1883febf8", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 5.0.2.post14+tuxcare of django. not_affected \u2014 Django 5.0.2 is not affected by CVE-2026-53878. The vulnerable code (DomainNameValidator class) does not exist in this version - it was introduced in Django 5.1. Django 5.0.2 uses _simple_domain_name_validator which already validates against newlines via string.whitespace.", "justification": "code_not_present" } }, { "id": "CVE-2026-5766", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:5518665f-dc6d-5bf4-b304-545d60998fd1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-5766 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:f9a27d30-0fdd-55dc-9c67-9fd23b5e7f1e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2026-6907", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:2c42435f-1cc1-53b3-b7ea-884424f0a04e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6907 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2026-7666", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:de4849ea-cf16-59e6-bc29-dc9f024dfd7d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-7666 affects version 5.0.2.post14+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ], "bom-ref": "urn:uuid:c58c63d7-efe4-55c2-af91-7df421e35d4f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 5.0.2.post14+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@5.0.2.post14+tuxcare" } ] }