{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a03f5493-121d-508a-9a90-cd95e40723b4", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@5.0.2.post15+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@5.0.2.post15+tuxcare", "version": "5.0.2.post15+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@5.0.2", "type": "library", "version": "5.0.2" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2007-0404", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:20584021-6008-5cd5-a43c-d092efb3f629", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0404 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2007-0405", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:80d480c2-2bb8-51bb-b68a-3ae37ed3ac39", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0405 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2007-5712", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:240f65f5-2f99-597a-9248-a1bf17e798cb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-5712 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2008-2302", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:f1ff95f1-a487-516b-b2aa-f59c0c3db0f7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-2302 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2008-3909", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:7cacb9a2-1772-5944-abb7-a00545d52720", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-3909 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2009-2659", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:4f3b55f8-db85-59db-a898-c45ebaacad92", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-2659 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2009-3695", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:43eb25dd-75b8-5de2-b5d0-4ba11d89b32c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-3695 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2010-3082", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:a58b1ab7-6566-5063-ad7b-a761cf815f57", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-3082 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2010-4534", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:d62a6299-6db6-5c15-a9a4-5517708a1e67", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4534 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2010-4535", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:9b017576-3df4-5aeb-adf3-aec0dae5da46", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4535 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2011-0696", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:52309435-6011-595d-9659-d6d715ffec33", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0696 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2011-0697", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:e6c781a7-b40d-50cb-a9c0-7add7aa0a3fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0697 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2011-0698", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:973739af-8f2b-5730-8e59-3bbcfbfc0646", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0698 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2011-4136", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:2cc93f17-66f1-52b2-a014-03e3534ca392", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4136 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2011-4137", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:5013c380-9516-5be3-b034-979b4ce47665", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4137 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2011-4138", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:186eeb9c-5cbf-55c6-ad33-7b5d2a33e024", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4138 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2011-4139", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:23890a86-c9be-5821-adef-420c22fbe3cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4139 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2011-4140", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:2ca2a8ff-eb0f-5244-975c-dd8755c9cd6a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4140 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2012-3442", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:8493502c-e787-531e-b25a-b012340c172f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3442 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2012-3443", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:1f269ad7-08ef-574c-b8db-8b734638244c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3443 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2012-3444", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:ce8f84da-2505-550e-a7dc-04e341399d9d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3444 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2012-4520", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:1ad6162f-13cf-5176-97d4-7d17d7d18a9a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-4520 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2013-0305", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:a20590d3-c0be-58c3-9daf-a3a840ae49ac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0305 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2013-0306", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:878f9f0b-dac7-5f21-ae51-b1378a390aef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0306 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2013-1443", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:22a97e26-05c8-5f81-93a6-8818d8771188", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1443 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2013-1664", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:28e5cc22-2f7e-5802-9b71-0b7513ac9083", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1664 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2013-1665", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:5d7429f9-330d-55a2-a1d9-4132409a7774", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1665 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2013-4249", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:cf847690-784f-5221-9a31-9272ee094c34", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4249 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2013-4315", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:5d8f9a29-8c86-5d1f-882a-7328aadc32bb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4315 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2013-6044", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:51d9a347-218a-5947-a43e-863568d4a539", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6044 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2014-0472", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:db572c44-ded9-566f-9a90-0273d0fa5898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0472 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2014-0473", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:266c1251-da9b-5750-a8e6-a852ffb2d1c6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0473 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2014-0474", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:6aaf826c-c758-55d8-8e94-f554fece0ad5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0474 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2014-0480", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:ae098532-5613-5d98-989d-51e065ddce41", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0480 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2014-0481", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:0520847b-7af9-54ef-ba4e-20f13c2e32d9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0481 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2014-0482", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:cb351ad4-bdf8-517e-8639-879928067532", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0482 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2014-0483", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:edc51062-5b0b-56fc-a4cb-55bb29d525b2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0483 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2014-1418", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:45341b3b-f9a8-50bf-9c96-084bf9095d1a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-1418 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2014-3730", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:c38f67f0-2720-57e2-9a0d-dce76962eb8f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3730 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2015-0219", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:2e2ca92c-6614-5e50-86cf-bd54c9304fd4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0219 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2015-0220", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:0fbf155a-eeeb-5401-86a2-d6aef246a714", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0220 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2015-0221", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:93e97301-0c4c-5c95-8ddf-8785a9638c5c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0221 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2015-0222", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:9ec776f7-2157-5b4a-8db0-55a4a573589f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0222 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2015-2241", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:4844128f-226f-514d-81d8-de75c70b048b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2241 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2015-2316", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:f162d89d-6926-5108-a74b-7a0c621b3f03", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2316 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2015-2317", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:a45496f7-e04a-5bd8-ad6d-ff6636d0e179", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2317 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2015-3982", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:7160ba55-d810-55d3-bde2-6f821807b7b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3982 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2015-5143", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:aeb01dab-96d8-5400-9cdb-46b681994d4a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5143 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2015-5144", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:8388e2c1-962a-5c7e-9dec-877169bdca38", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5144 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2015-5145", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:46a7c6e0-ee56-5371-a45b-5d068382156f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5145 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2015-5963", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:132320e5-300e-549a-916b-c2cd9a6950f6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5963 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2015-5964", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:57a3cdf4-3dda-50c1-a814-c139ef15bc05", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5964 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2015-8213", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:1b270e5f-9ce3-5aa2-95a8-08404f03bb70", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8213 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2016-2048", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:7f3c4852-983c-5280-8e20-e073a9737a9e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2048 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2016-2512", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:af9f9f00-5293-51c9-8e86-fd2a2455820b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2512 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2016-2513", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:17b7978a-02e1-516d-b34a-2fa0f93bed8e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2513 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2016-6186", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:d5631375-155c-52f4-89ac-db9d3b02fb6c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6186 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2016-7401", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:611da9c6-9007-59f7-97a4-423d1ff968fc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-7401 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2016-9013", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:bba5c79b-fa31-5b36-89e6-db55e1ba69bc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9013 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2016-9014", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:49dbae56-c126-597d-82af-85655a56a9b5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9014 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2017-12794", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:26320903-1eb6-5088-aadb-37b04dc2e14e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12794 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2017-7233", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:41cf879e-e4d0-5a74-a698-86444f2ddc50", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7233 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2017-7234", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:8068e776-04cb-59dd-ade7-336675460627", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7234 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2018-14574", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:7d17d64d-e800-54c3-a313-850909230fc2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-14574 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2018-16984", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:0aa5fc97-caa4-589d-849b-b5d88312d47a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-16984 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2018-6188", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:43d2d64d-e4b0-500d-a0b8-160833224db5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-6188 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2018-7536", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:07ed6c79-ad76-5319-b82b-2a97030d6a58", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7536 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2018-7537", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:38c23e61-cd64-5251-9fa0-9259daee4950", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7537 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2019-11358", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:eafbfeac-f93d-5395-97df-f871ce4d2468", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-11358 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2019-12308", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:95f960a4-60a1-5284-a78c-9498146533d7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12308 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2019-12781", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:8a7494ba-e501-5065-b0ba-33f117acd18e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12781 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2019-14232", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:19824049-1622-5346-8f8b-51a82b53e59b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14232 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2019-14233", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:428d6938-4c96-509d-8cf0-8d1a9fea34db", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14233 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2019-14234", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:7b2a59d2-2d8a-5e21-8aa0-c75fdbf11e69", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14234 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2019-14235", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:97e2ad6e-353f-5d56-8774-6aa4af5bb4b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14235 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2019-19118", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:4e0da9b1-f77c-5fa1-b104-7e9b7b9bd437", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19118 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2019-19844", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:d072a20a-32d7-5944-8a33-d1ff4310cf95", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19844 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2019-3498", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:92f240e5-cf03-56e2-aeb8-dc215e578e51", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-3498 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2019-6975", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:d562dd20-b331-5f54-b322-9fe071e389d3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-6975 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2020-13254", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:d013f6cb-3c6e-5105-ac5a-5711a5923f0c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13254 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2020-13596", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:d6627dc4-32c3-5105-8528-031e2593b70e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13596 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2020-24583", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:1dd379d0-807d-5ee2-a148-0a96aeb123f9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24583 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2020-24584", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:2793c0ec-538a-5b5c-bed2-8d55d02002c8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24584 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2020-7471", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:2be84ff4-571d-50dc-9a5b-e3c569ce28d3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7471 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2020-9402", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:2d777991-9ebd-5f8c-9efb-b88f28b32d99", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-9402 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2021-28658", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:ec792e90-6da5-5b6f-af10-ca7594dc964a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28658 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2021-31542", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:cf271e13-4d55-5412-a960-b8bdaa1a0919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-31542 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2021-32052", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:5b1156d4-673d-5758-94f3-44df08cc31ad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-32052 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2021-3281", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:c578bd21-d75b-537c-85ed-7a7c4d11a8e8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3281 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2021-33203", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:99d704b4-58eb-5b47-afbd-a049d614e7ea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33203 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2021-33571", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:a615e00e-5164-5687-a112-6accd33dafcf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33571 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2021-35042", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:3dfb1822-f6b9-507b-b1ed-ae90ac8319b0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-35042 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2021-44420", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:1777a954-7128-58c7-9f1f-7e8c1e7a41e6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-44420 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:7d353c69-c4a7-54b9-b799-9b6b8078ab11", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45115 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:b8595f0d-726e-579e-b088-01bea0fae4b2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45116 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:112a374b-1b1d-58ff-9092-2df71fbc3782", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-45452 does not affect version 5.0.2.post15+tuxcare of django. not_affected \u2014 Django 5.0.2 is NOT affected by CVE-2021-45452. The directory traversal vulnerability in Storage.save() was fixed by upstream Django in version 4.0.1 (January 2022), over 2 years before Django 5.0.2 was released (February 2024). All required defenses are present in the target: backslash normalization, path traversal detection via \"..\" checks, os.path.relpath() to ensure relative paths, and trip...", "justification": "code_not_present" } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:eafdefeb-f578-50c8-8889-d75edc65f265", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22818 does not affect version 5.0.2.post15+tuxcare of django. not_affected \u2014 Target Django 5.0.2 is not affected by CVE-2022-22818. The vulnerability (unescaped HTML output in {% debug %} template tag leading to XSS) is not present because the upstream Django fix was already included in the 5.0.2 release. The DebugNode.render() method contains both security measures: (1) early return when DEBUG=False, and (2) HTML escaping via escape() on all pformat outputs. CVE affect...", "justification": "code_not_present" } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:c3de48f7-1234-505a-969b-609646aec941", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-23833 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:081805b0-6dd3-53a1-b1bd-a4acdae14004", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28346 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:b3837771-8f29-5716-93e1-7467277628d9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28347 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:88bc737d-da5e-5bc9-993c-0f90eff2fa85", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-34265 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:70651cb1-f3c1-5e07-8220-3c8d26f32846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36359 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:32e3cff2-9dfa-563f-a612-04a8e19c70e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-41323 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:47577e8d-8916-5570-9085-cb2adbe2ad88", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-23969 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:28fb7c93-4d80-52a2-a421-7214a2e04846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-24580 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:7393145d-85b5-5800-be2f-775391c7dfa4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31047 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:0b5d129b-2eac-5348-8a36-3536c4e2638b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36053 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:2be219a6-8a1f-588f-9d2f-3088ee824588", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:d8b25123-96ae-5559-a6f5-dddb22b08250", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-43665 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:da264093-00d0-5cef-8726-1971de0166b0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46695 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:c7b167fe-2706-541c-8856-c57e4d2f5398", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-24680 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:6e61fa52-8feb-578f-bdbe-ab1bb9550ab2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:3ec69320-49d2-5281-b66d-c8f5c338f157", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:70f524ea-d1dd-53a3-8768-2f7711cb4084", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is fixed in version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:16177fa5-c61f-5e0e-a5b9-548305e7f8f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:a0db228d-1fba-5dc6-9d2b-5d0bbc83f4cf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is fixed in version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:cb07c263-8e47-5d0e-9556-9e89eafce42c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41989 is fixed in version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:520a4a7f-8e72-5346-ab55-64fdeddf602e", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-41990 does not affect version 5.0.2.post15+tuxcare of django. not_affected \u2014 Django 5.0.2 uses the original simple trim_punctuation implementation that lacks the vulnerable code pattern. CVE-2024-41990's DoS vulnerability was introduced by the CVE-2024-38875 fix (commit d666457453, June 2024) which replaced the simple implementation with a complex CountsDict-based one containing repeated rfind('&') calls. The target version predates this architectural change and therefo...", "justification": "code_not_present" } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:7c55f804-d216-50f3-b494-e68273a44577", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41991 is fixed in version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:8999366a-5472-5465-a54c-78b3dfd60b3d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-42005 is fixed in version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:12e1f5e1-c67f-5e07-b620-4d5e0c22cb2e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45230 is fixed in version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:95495499-6727-5845-b252-ab1968557dec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:8aa10f1b-9ba9-55f2-a8a6-6630250674cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53907 is fixed in version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:7e6cc494-6a73-5a46-ae62-2e01a7f9a1b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:682390bd-3dee-5fb3-9bca-9458f1d0e743", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56374 is fixed in version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:134fe796-ec39-5709-87d6-2a891295581e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:2ebce63c-2456-59c8-8f78-393c76fd0427", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:426fd803-6db2-56b0-b429-ddac5a3155e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:c3689fed-43b2-5fa1-bd8f-61cd9758f3e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-26699 is fixed in version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:7dede532-4b78-5c16-b6a1-6d231538ce9c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-27556 is fixed in version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:5a7d4e65-d638-529b-8dd8-959a0bf01e7c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32873 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:5f7c1309-4595-56ca-a6e5-4501e1a9c8b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:5aa73844-81ce-50d2-aee8-4b53ce510e5f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:f04d08f4-9d05-5a42-92f3-393501b01256", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59681 is already fixed in version 5.0.2.post15+tuxcare of django. CVE-2025-59681 already fixed on tuxcare-current/5.0.2 by 96d64ebe98, released in 5.0.2.post7+tuxcare; FORBIDDEN_ALIAS_PATTERN matches upstream stable/4.2.x; alias 'x#' rejected on 5.0.2.post16 from Nexus." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:69763d6e-83b5-5a8f-8228-423df6bce4a8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59682 is fixed in version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:e2ec41c1-ae7c-5ef0-b2fc-652e42527800", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:4d36af0e-a898-5ac3-98bf-f033763e9b63", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:3d82c4ae-b17b-5913-8a4d-4705364f2018", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2026-108147", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:d4cf5900-d51e-5b84-bc1d-670bdf8d265a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-108147 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2026-111211", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:4b29f25d-7132-50e1-ba21-eaf5cbcc1ec2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111211 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2026-111362", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:86f0c96d-33e8-58f8-9e27-0eaeef7e647a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111362 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2026-113593", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:13a43312-f1f8-5c27-af58-542e47ef8535", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113593 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2026-113733", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:b74bd08b-bde6-5929-b811-39c74aa47b3e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113733 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2026-114582", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:306015d4-c4d4-5a3b-ad03-abe8d881248e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-114582 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:91a9b3d4-b053-57ed-a989-6f463b7b3878", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:e10f5ba9-6cfd-5bc8-be05-0ae6948af90f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:49caa890-6bfb-5c80-8fa8-87bc2d0dbad2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:1552a2bd-75e2-506c-b74f-8562451d5d08", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:01b00a28-dbad-5d74-bfc0-76c771f653b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15307 is fixed in version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:e785657c-1c4c-5de4-b676-1cc6a209b780", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15830 is fixed in version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:c0051514-45fe-5127-9e4f-c33c5a737de2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25673 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:807173dc-ff20-5014-9114-a3dabd015bfa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25674 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:27105a3f-d926-5b31-8c6f-6be9e9c4a991", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33033 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:2d3d5830-12a9-5288-ab59-cec02c788ea4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2026-35192", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:79a44049-26bf-56af-ae7f-d78a72a27075", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35192 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2026-35193", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:b17e95a0-a1c4-546f-939b-5939dc7dd6f7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35193 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:db4c48c4-2487-5dc1-9f2a-f72bf25053c9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-3902 affects version 5.0.2.post15+tuxcare of django, and is fixed in 5.0.2.post16+tuxcare." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:10d97278-a88c-5070-ac5e-bd4f4a5e7c25", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4277 affects version 5.0.2.post15+tuxcare of django, and is fixed in 5.0.2.post16+tuxcare." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:19b149e5-8ea6-5bc5-8741-4426510a3f72", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4292 affects version 5.0.2.post15+tuxcare of django, and is fixed in 5.0.2.post16+tuxcare." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:6ff70561-5198-5603-a3fe-ab69caf4a119", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:575fe1dd-c853-58fc-987f-f170c5ca5cba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:ca67c177-dc6b-5d01-a844-0dcc393fc50f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:5919b1ef-44c3-5059-8e3a-681979d7549b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 5.0.2.post15+tuxcare of django. not_affected \u2014 Django 5.0.2 is not affected by CVE-2026-53878. The vulnerable code (DomainNameValidator class) does not exist in this version - it was introduced in Django 5.1. Django 5.0.2 uses _simple_domain_name_validator which already validates against newlines via string.whitespace.", "justification": "code_not_present" } }, { "id": "CVE-2026-5766", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:7ba54a12-5c67-56ec-b7ac-352073170140", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-5766 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:dbca3691-7892-53a7-90db-9ee113132510", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2026-6907", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:3b02a049-5fb9-5bb9-81d1-b351a3b2ac07", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6907 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2026-7666", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:ba2427a2-c4f1-5a04-a6bc-e9b6a27f0792", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-7666 affects version 5.0.2.post15+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ], "bom-ref": "urn:uuid:f2539f75-71ea-5bc0-9e3f-d2a92cde89d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 5.0.2.post15+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@5.0.2.post15+tuxcare" } ] }