{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:6c1858b3-6379-574f-ba6f-58f66d4df972", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@5.0.post14+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@5.0.post14+tuxcare", "version": "5.0.post14+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@5.0", "type": "library", "version": "5.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2007-0404", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:f280083f-635d-5091-a82c-bb04e14267e7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0404 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2007-0405", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:f6a4c65a-c141-5513-becf-cb981e5bbabe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0405 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2007-5712", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:9aafe989-ff95-534a-a24d-ff1031b85024", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-5712 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2008-2302", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:d0bad3b9-9504-5c7e-b2a3-4756586838d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-2302 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2008-3909", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:7b012e7d-c358-50a0-9f25-8fcac6859f4b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-3909 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2009-2659", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:58ad1609-0926-5fa4-b450-bc97852fca34", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-2659 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2009-3695", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:61154b6f-f1d8-54cc-a3bb-37b9d39b1e15", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-3695 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2010-3082", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:92d272ff-1154-50be-831f-8384b03c5ab4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-3082 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2010-4534", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:14ffa718-d4c6-54fd-b579-6a5277ad965b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4534 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2010-4535", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:d15a2954-fc2d-5741-b4ee-d022c8bc0a4d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4535 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2011-0696", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:85768127-50bf-5c92-af50-587b2a0adf37", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0696 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2011-0697", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:38a8d59c-df3e-5c16-a699-ada416c84bb7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0697 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2011-0698", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:68cea04e-d554-585c-8d8b-e3ce4c4ad5f2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0698 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2011-4136", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:3a29bafb-43a7-5f51-8542-a872dddb4a41", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4136 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2011-4137", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:fb36996e-d2b4-5432-a91c-9f75826793be", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4137 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2011-4138", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:682a99fc-c6df-51f7-81d7-f84bdfdcb0d5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4138 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2011-4139", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:f790119a-8746-5edc-a7fa-d141db002f3f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4139 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2011-4140", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:55d181f6-eaa6-53e0-89b5-bd868b71d2e5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4140 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2012-3442", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:fe8eda83-9ca1-5dd7-bee5-f8a3156c61b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3442 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2012-3443", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:e4156113-0ff9-51c3-ac6a-655dc3c883e6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3443 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2012-3444", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:a8e7a7d3-0eba-5405-870d-a901d17af2cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3444 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2012-4520", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:2632fb2e-1698-5ce3-b667-819cd0a65eac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-4520 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2013-0305", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:4e7065ce-2ac3-5257-8d32-c55221a77b83", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0305 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2013-0306", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:9f9a0259-b635-5bcb-9552-4e376dc75c14", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0306 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2013-1443", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:91572181-eb73-5ac0-9b08-9df30e15a97b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1443 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2013-1664", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:19bbad54-e9ef-564c-aa1d-2564bb5f56ae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1664 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2013-1665", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:af0a329d-9126-5e4e-9bfa-cb07623d3302", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1665 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2013-4249", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:c80dd65b-77fd-572d-8661-f7c30d1deca2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4249 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2013-4315", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:aba13c63-b4e2-5e6e-8a73-f5f7f93a5920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4315 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2013-6044", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:10ad3544-ec56-5bfa-a7d9-9047dc2e2973", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6044 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2014-0472", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:99209935-cd40-5298-b138-3acd122539ca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0472 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2014-0473", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:f720a1be-fdac-5242-8d71-1a89f807e10c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0473 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2014-0474", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:c47c6020-6933-5d2d-a5f1-dc252503087e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0474 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2014-0480", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:294823bc-2082-5ba8-a102-dd57e372f08d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0480 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2014-0481", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:18b84554-9565-56e0-b96a-246d04ec7348", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0481 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2014-0482", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:08e5a3e4-b188-5bde-964e-d58fe0bff2ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0482 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2014-0483", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:33b51f51-73c7-55e8-b8a9-15b83607958c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0483 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2014-1418", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:83485d8f-ac4e-5706-8430-04108349a2ba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-1418 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2014-3730", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:0811d37c-c225-5b98-a4ed-acfe2168fcc0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3730 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2015-0219", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:cb8d35f3-b2b8-5c21-9edc-01079c91496a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0219 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2015-0220", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:8a791460-2139-59cf-b4f3-9c5a05a3baf6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0220 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2015-0221", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:0d58863a-4d75-5013-a97c-3ad51514e8c9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0221 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2015-0222", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:c41ff061-14c9-5086-8d6e-1f3f6924d171", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0222 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2015-2241", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:c46f0f23-6a8e-5da9-9157-07e7806cc887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2241 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2015-2316", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:eaf9809f-d403-5a7f-b121-4d324db994f9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2316 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2015-2317", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:4de5b046-6712-5d84-abf2-7414d677f640", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2317 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2015-3982", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:c892350d-1022-5370-8592-9b61c36feb56", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3982 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2015-5143", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:3f3af6d5-0283-5a75-acc6-c4b868e74e34", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5143 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2015-5144", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:64660ff6-52d4-5ff0-a681-da01fe47825c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5144 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2015-5145", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:58c63f3c-5517-5079-9d5e-39b9ad4981a6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5145 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2015-5963", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:ee2db937-ee65-525f-82f2-2ccadbc95a60", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5963 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2015-5964", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:22069487-156b-51d7-b7a5-889144d40f35", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5964 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2015-8213", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:afa53702-6421-561c-9609-06b4af0611ab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8213 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2016-2048", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:b432cc25-d2ec-5eb7-9d78-230770685c6c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2048 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2016-2512", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:0777247e-077c-5cd9-968e-af2b6313f2d4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2512 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2016-2513", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:11b6ef76-92d4-5fd0-adb4-4c67be2a8271", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2513 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2016-6186", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:00717d23-db1e-55bd-83a2-dfbd7adf70af", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6186 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2016-7401", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:7cd1042f-c97e-5b0c-95fb-fc881d3375c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-7401 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2016-9013", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:c7b7690c-ac90-5f08-8f2b-00aa7c31c960", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9013 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2016-9014", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:055890b9-b164-5add-b06c-0ba1255b7f63", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9014 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2017-12794", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:bfcacefd-d0c6-5261-a3a0-df3e98364a29", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12794 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2017-7233", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:ccfac6cf-889e-5503-b76d-62044c6cc53a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7233 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2017-7234", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:09ac3a25-4210-51ad-9e43-7da6ed14a6d4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7234 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2018-14574", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:df793205-4cea-5b6f-921c-4164f155c07c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-14574 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2018-16984", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:b50be675-4aa5-5ab8-a39d-8c9c6c6c5823", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-16984 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2018-6188", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:82b6e5cc-5fa8-585e-9712-0f050f9c1bb0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-6188 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2018-7536", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:350aa736-7cbe-59e1-a03d-3c09be10e98c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7536 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2018-7537", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:fdd912c6-3605-5412-8255-8d155b10a263", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7537 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2019-11358", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:b959eb09-9502-5170-8139-e2544bcfd6e9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-11358 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2019-12308", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:f64131a1-a65d-51eb-ab19-f012fa6bd39c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12308 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2019-12781", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:0c81f3de-1337-568c-a0f5-a7c2f32812b8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12781 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2019-14232", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:d54af1e1-87a7-5f3e-b90c-87db98af9b8b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14232 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2019-14233", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:a5598fb8-9084-5036-a03d-2237c0d7a40a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14233 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2019-14234", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:6594952d-62d1-59d7-8df5-504802e9eda6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14234 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2019-14235", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:a398fc40-3578-5b10-b237-e5410b36785d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14235 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2019-19118", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:1d163fd2-8aae-518b-8525-2501e8720e87", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19118 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2019-19844", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:ff9b6a1c-d687-5a90-a32d-bc4160bd9f45", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19844 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2019-3498", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:fe43b913-b538-51fc-ab7e-33eea1fc2d89", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-3498 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2019-6975", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:2c29bfd9-259d-50f4-bc90-ad2f812febe2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-6975 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2020-13254", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:d3a7406d-64d8-5d5e-a350-0e48fe8e6371", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13254 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2020-13596", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:bd6c6efc-8944-5188-a43c-00387fa79885", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13596 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2020-24583", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:4745ccd4-952e-55dc-b989-0cce6960f746", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24583 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2020-24584", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:faed1ad1-30dd-5622-b403-9eaf7964544a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24584 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2020-7471", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:ebb56e07-83ba-52d4-875c-a1b9390d2110", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7471 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2020-9402", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:7cc50e49-dc25-5399-b7b8-24e04884258f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-9402 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2021-28658", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:41811a33-8ba9-5ef4-9edf-7374d7caa9a7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28658 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2021-31542", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:68c2023f-6f1d-5bc3-a5c0-168498513bb4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-31542 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2021-32052", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:279855cf-5d90-5ffb-ad5d-3f06162916f7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-32052 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2021-3281", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:c4d46fb0-b37f-5588-89f1-d08807eff991", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3281 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2021-33203", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:7e246e62-82a6-5f04-858f-5eb224115de7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33203 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2021-33571", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:52de2f20-1ae9-5962-b992-dd649ad270cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33571 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2021-35042", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:aa1a2b18-bde8-5b4b-9696-cba6fe4516ae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-35042 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2021-44420", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:bf1337bd-5d00-50c8-9060-c3917dc394f3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-44420 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:e70fe6c3-9522-5f59-b3e1-6cd5aae46dd0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45115 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:2f24cb4a-b8a8-5cda-bacb-cdaee40a4e5c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45116 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:fd4cab6c-a347-503d-b446-4e0821539e00", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-45452 does not affect version 5.0.post14+tuxcare of django. not_affected \u2014 CVE-2021-45452 (directory traversal in Storage.save()) is NOT present in Django 5.0.0.post20+tuxcare. The upstream fix (commit 6d343d01c5 by Florian Apolloner) shipped in Django 5.0.0 and predates all TuxCare commits in this branch. All defense mechanisms are present: backslash normalization (base.py:75,116), path traversal detection (base.py:77-80,119-122), relative path enforcement (filesyste...", "justification": "code_not_present" } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:505725ed-36e0-5977-818e-301d4293b66c", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22818 does not affect version 5.0.post14+tuxcare of django. not_affected \u2014 The target Django 5.0 repository is NOT AFFECTED by CVE-2022-22818. The vulnerability (XSS via unescaped output in the {% debug %} template tag) was fixed by Django upstream in commit 394517f078 on 2022-01-02, three years before this Django 5.0 release. The fix\u2014which wraps pformat() output with HTML entity encoding via escape() and blocks output when DEBUG=False\u2014is present at django/template/de...", "justification": "code_not_present" } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:8bb39824-a10d-5e32-a586-23f493f7187c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-23833 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:a23ee6da-bb0d-5b90-9f09-c3997c07cee5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28346 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:8e325150-2cb1-5483-988c-9ccd5d0b83cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28347 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:b582dbb8-c159-57a6-a18d-9a5816b6986f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-34265 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:77fba044-4f55-5e21-8866-b4c7d37da42a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36359 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:959bd869-ab8b-5a25-a62c-23a586d2d78a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-41323 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:5abab0c3-064d-5990-9e5d-1fe6d4f1715c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-23969 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:4d45319d-54fc-5c03-b341-9a455f6a1d76", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-24580 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:b0c4ba17-1c1f-576f-8535-745c0bc1f5cb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31047 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:5d4db0c0-0543-5520-bce9-a482d301dbed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36053 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:4fad3664-5565-5c71-b09a-8d967b27b7d9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:f2fda30a-19f5-5295-a9e6-d3886bf5e95d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-43665 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:34bf1429-841c-5985-8c9f-afa9f54a0f06", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46695 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:14182ed9-f000-54e5-bba7-0c534925255e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24680 is fixed in version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:43c55daf-c82b-56eb-9825-5ea3e7c78f35", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:9159827c-b6ea-5564-bc4a-3937a58ec289", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:129ca083-8231-525c-b4e1-c7589fd9899f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is fixed in version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:2244ef49-187a-56ce-89a3-7ac72d5f06dc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:6a27cf17-c09e-5963-89ec-d097e4fade1d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is fixed in version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:df116bc3-f431-5d4b-854a-801f34ab37b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41989 is fixed in version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:116b3921-ec63-5abd-b409-cd6d5b632bf5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41990 is fixed in version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:cf2d579e-2063-55ee-8cb0-112b4ed2b3c4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41991 is fixed in version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:4e2339e5-2265-5c5d-aa74-236a0bd7e566", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-42005 is fixed in version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:57b9b94f-787f-5c66-a355-2d61ecfec338", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45230 affects version 5.0.post14+tuxcare of django, and is fixed in 5.0.post15+tuxcare." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:e7d0a17e-effb-5449-9d79-6703cf74df32", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:a827d6ef-2b0b-576c-8fe3-4e863955409c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53907 is fixed in version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:1a78e84d-c5b1-5dee-ab44-7f6ca7f5d5ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:9de592a1-bebe-5e89-8bbe-e838d87da04e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56374 is fixed in version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:4a92ce6b-de08-5761-b5ce-9bdf8aa0a89b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13372 affects version 5.0.post14+tuxcare of django, and is fixed in 5.0.post17+tuxcare." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:475a9fff-6d51-5da9-9686-d8d2abfe2eb4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:bc3bc8d7-9b22-5a8b-8211-058a084ba701", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-14550 affects version 5.0.post14+tuxcare of django, and is fixed in 5.0.post17+tuxcare." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:dc2ff037-34a0-5b14-8e7e-9329172e6828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-26699 is fixed in version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:66987c1e-40bc-5c2b-bbc0-49adadd24a48", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-27556 is fixed in version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:682b83f7-35b0-5b68-9ec2-794e439b919c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32873 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:9fccbd60-8966-552b-9eaf-7ae8be983c42", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:e5c6ffa1-fa46-5f36-a9af-529887283cb9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:b03cd4cd-72c9-5bd3-913b-869c6356d84b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59681 is already fixed in version 5.0.post14+tuxcare of django. CVE-2025-59681 already fixed on tuxcare-current/5.0 by 9f60b363dd, released in 5.0.post10+tuxcare; alias 'x#' rejected on 5.0.post21 from Nexus." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:c11c0b4c-1b90-5636-bc48-129dee9a361e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59682 affects version 5.0.post14+tuxcare of django, and is fixed in 5.0.post21+tuxcare." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:0940bbb9-008f-56e7-acd9-a88de85bf57a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:d02e6d59-65b9-596e-82c1-cbec08661290", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:3803b6d3-ee15-57e9-a94a-2854e19ecfac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2026-108147", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:43775f62-84d6-5e61-8f1f-2e1d1953a799", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-108147 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2026-111211", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:d8ef2d63-b67c-59c2-888f-7eec72144169", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111211 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2026-111362", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:49f4892b-a1a6-5b57-9164-68764ff6d90b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111362 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2026-113593", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:2e69d147-dbd5-5d90-9415-50ad243e0214", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113593 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2026-113733", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:4b9f0c6f-2df1-5e53-9aa3-9c6c8815578c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113733 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2026-114582", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:d957ccae-d483-520e-aadc-5f9f407aa43d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-114582 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:a95ee693-2a13-57cf-bcc6-efa9943c9f28", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:6967c064-6a51-50c7-be09-19d0e99afae9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1285 affects version 5.0.post14+tuxcare of django, and is fixed in 5.0.post17+tuxcare." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:642bbf46-ff8e-56c5-96e7-191ecfeb8c80", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:78b55375-3973-5ca0-8721-9c87df023fe7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1312 affects version 5.0.post14+tuxcare of django, and is fixed in 5.0.post15+tuxcare." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:6c6c5e22-1599-5983-be17-d99719a360da", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-15307 affects version 5.0.post14+tuxcare of django, and is fixed in 5.0.post16+tuxcare." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:b58753ef-eec8-5efd-98b9-38341f204525", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-15830 affects version 5.0.post14+tuxcare of django, and is fixed in 5.0.post16+tuxcare." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:6345e152-9a83-54b8-a1b6-0a6dd2904fc7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25673 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:c128df07-28cf-5c91-9878-34052aabfdc1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25674 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:673269de-8fd0-55fe-b921-9b259a9d646a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33033 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:d8ef8de4-b5d3-5d86-930d-ea76a7fcdcb0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2026-35192", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:f8840af5-1cd5-5c98-a352-df0202b3c723", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35192 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2026-35193", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:c1fbe254-0938-531d-8873-be66697dba1a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35193 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:a6c41728-2f20-5bb0-844a-2dace62da63c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-3902 affects version 5.0.post14+tuxcare of django, and is fixed in 5.0.post22+tuxcare." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:8e327e37-95e3-5b19-885d-c25456be1231", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4277 affects version 5.0.post14+tuxcare of django, and is fixed in 5.0.post22+tuxcare." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:4c6dd127-4b50-53ba-8839-429c1bd6b131", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4292 affects version 5.0.post14+tuxcare of django, and is fixed in 5.0.post22+tuxcare." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:8175275c-c1bd-5857-8e57-d683b38976bd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:a08514e5-b10d-5c94-ab56-4c3eb2724880", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:e487ffce-80e5-5d70-9ed0-14f769b1ca40", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:a068b9c1-128c-5cba-9c96-0112648c4819", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 5.0.post14+tuxcare of django. not_affected \u2014 Django 5.0 does not contain the vulnerable DomainNameValidator class. This validator was introduced in Django 5.1 (commit 4971a9afe5). Since the specific component affected by CVE-2026-53878 does not exist in this version, Django 5.0 cannot be affected by this vulnerability. Additionally, all domain validators present in Django 5.0 (_simple_domain_name_validator, EmailValidator, URLValidator) a...", "justification": "code_not_present" } }, { "id": "CVE-2026-5766", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:ed52a052-14c4-51c6-b313-e4c3d4d7e783", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-5766 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:8ebffaeb-6e89-5e4a-91fe-2fa6243fa8dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2026-6907", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:99f1265c-88cf-5115-9cc6-9376156ce505", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6907 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2026-7666", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:2e388dad-c61a-5c7f-9a62-7396ccbe236b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-7666 affects version 5.0.post14+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:ffe61d3c-9fc7-5f1c-8302-ff091a275395", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 5.0.post14+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@5.0.post14+tuxcare" } ] }