{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:1047a9fc-90c8-535b-bc21-85b553b34ddc", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@5.0.post17+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@5.0.post17+tuxcare", "version": "5.0.post17+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@5.0", "type": "library", "version": "5.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2007-0404", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:9a6a099d-aebe-5905-8976-85d9453d6678", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0404 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2007-0405", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:78beb9ed-a99f-5e24-9eba-e0c5cc1a458a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0405 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2007-5712", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:2f85e397-8cc8-51bc-b3f3-40fb7cbc8962", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-5712 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2008-2302", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:0f752298-e9f9-5813-8e40-7246622133ac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-2302 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2008-3909", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:94fab0a6-50c4-5351-b7c5-2b7856fdbab1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-3909 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2009-2659", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:9aec1380-4abf-5a66-a34a-e8c21acb0aa4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-2659 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2009-3695", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:b9355468-f73d-5703-8f74-91aa9732fc33", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-3695 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2010-3082", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:a2189f0b-7919-5da2-96ab-be5fe1bd6127", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-3082 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2010-4534", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:41b51e67-10e6-5503-9124-1f67f7589037", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4534 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2010-4535", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:98ab1c9d-fcbb-5c0d-b198-2f32cddda426", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4535 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2011-0696", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:6cad7a49-c973-56d1-bc4e-f3803a37bb15", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0696 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2011-0697", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:66c8df1b-76aa-5962-b96a-0fd442f8df06", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0697 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2011-0698", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:ee66ca25-d2a2-5ed7-ae11-25460512312c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0698 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2011-4136", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:1196abe3-42a6-5591-822b-ab0f21019f7b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4136 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2011-4137", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:08260a2c-ad70-5ff7-9a99-20097dbb6825", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4137 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2011-4138", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:5095bbb1-5c95-565a-8f8f-0c9090e9abbe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4138 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2011-4139", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:b9f3cecc-1386-5457-8ab1-edb644d796c9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4139 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2011-4140", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:df9fafa9-1331-5355-93db-8058ad61b574", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4140 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2012-3442", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:b959f336-9940-523b-8761-3c06689dd460", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3442 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2012-3443", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:0de9b741-b97f-541a-972e-1df8afcc5077", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3443 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2012-3444", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:6b6eaad2-d43c-5704-8b18-d07117128425", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3444 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2012-4520", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:95046123-c52c-50bf-8221-345008e57c3a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-4520 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2013-0305", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:adfeca5a-40a9-5f74-8842-ead707dc55d1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0305 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2013-0306", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:65fa128a-b645-5fa6-8a26-e8535955f589", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0306 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2013-1443", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:aafdd2ab-f3ec-562a-9243-01112eaa3c9e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1443 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2013-1664", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:a993c7c7-8cbd-5f8b-ad95-3c0603e8eeaf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1664 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2013-1665", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:6840d50a-edad-581e-a523-df4ec2e45d34", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1665 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2013-4249", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:3ccd9d3f-b3ac-5570-82b1-e10d6105385f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4249 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2013-4315", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:2ac9d43d-00c4-5062-b47a-3c9fa3e9a2d6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4315 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2013-6044", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:6a2a530b-00b6-5d0a-9f86-0bd7b9abec5f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6044 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2014-0472", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:ffe61632-57e8-5f9c-8169-44bc542091f9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0472 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2014-0473", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:718b168f-f579-5161-9b5f-9d84424cf5dc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0473 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2014-0474", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:86aa4491-6ea1-5d7f-aad7-73462a513cb9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0474 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2014-0480", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:a39f32ea-8f4a-562b-a50e-3a6f50c6e541", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0480 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2014-0481", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:d1161963-be9c-5b99-9f87-0b79f12459a8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0481 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2014-0482", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:0c31e12f-d7ab-5b6c-aa69-959fbe86f804", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0482 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2014-0483", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:aeaa8292-2aca-5a7d-8299-fce476489bc2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0483 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2014-1418", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:cf09b5cf-9e95-50b3-84c2-07dfddba91f8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-1418 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2014-3730", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:d5ab6639-dbb0-52dd-a015-e7c839d3d002", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3730 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2015-0219", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:76d61949-8b52-5aee-8fdb-fd095e66a592", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0219 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2015-0220", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:aee02080-379c-5dba-8501-36324f3a5b1a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0220 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2015-0221", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:0b6973a5-e52b-5465-ae06-930960302ced", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0221 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2015-0222", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:8bdff754-2e96-58bd-b7af-9b42e03d4c84", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0222 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2015-2241", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:23d47723-6fcc-5759-bf0e-314946e23cd3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2241 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2015-2316", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:ec78be38-aac9-54c3-8771-01fca68a22f0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2316 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2015-2317", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:63ad0565-9690-5057-981d-6f9eaea400d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2317 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2015-3982", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:596717b6-5356-5c21-be2e-fe291f976230", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3982 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2015-5143", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:73e5b74c-adb1-5fd8-b49b-42cd4e368c5f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5143 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2015-5144", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:c4a547bd-a49a-50e8-af46-ca6861933e6a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5144 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2015-5145", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:20172152-c937-59bd-903d-5d790f6ad97f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5145 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2015-5963", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:1012b543-4986-5178-8e7b-ffff2089a73a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5963 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2015-5964", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:fdbe389b-cd5e-5269-b46a-472874d30b6e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5964 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2015-8213", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:4cc1465d-d4e5-5895-a93b-523db707e887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8213 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2016-2048", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:57296ca8-b7c0-5834-b454-ab1c9966ed78", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2048 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2016-2512", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:282cb8af-4ba9-58fe-93a9-cfc89d11e1fe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2512 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2016-2513", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:b7743bea-6bc2-5db7-873c-151ec1d0b120", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2513 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2016-6186", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:14209f04-be38-5e2a-9ced-c08220f347b2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6186 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2016-7401", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:196b1ae6-a282-5825-aaeb-8352810010e9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-7401 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2016-9013", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:45d2e83c-9cc5-5ea2-bc5d-e94cc30cc9b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9013 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2016-9014", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:1e304448-f2e5-54cb-81c2-c22750260d20", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9014 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2017-12794", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:5d2ee124-15f4-5442-8475-eef55772e312", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12794 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2017-7233", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:56cd210c-25ec-5d0f-be67-19973f24d5cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7233 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2017-7234", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:c1b444ef-1589-53ff-85eb-14ac6a73bbb3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7234 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2018-14574", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:4bf55b0d-0a6e-5ff0-8575-c5e97a544126", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-14574 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2018-16984", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:08abcb8c-e214-5f48-a294-38b8d8c35445", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-16984 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2018-6188", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:0e712671-9047-545a-8561-2ba917ca1124", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-6188 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2018-7536", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:2578bdf4-992d-5b6c-af90-8427cdd8781d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7536 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2018-7537", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:975ee35f-89bf-5d23-aeca-3fbd18130bd0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7537 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2019-11358", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:56e253e0-2420-5a67-806c-deff255811a3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-11358 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2019-12308", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:4bbc3b43-c2c8-5115-8c01-bf42f3a3dd78", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12308 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2019-12781", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:da0d7afa-2eca-5098-a21e-f872858e564f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12781 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2019-14232", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:83418939-ebb5-553b-93d6-0478bfd6b1a8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14232 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2019-14233", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:9e2bb013-4513-5a0a-8a0d-a759e425f307", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14233 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2019-14234", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:b3e1e41e-fa4d-5143-b57f-f8755802f1d9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14234 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2019-14235", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:61d34202-b58c-5b71-8e2a-916d060b6910", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14235 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2019-19118", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:6cc104a8-497b-5256-84ae-6f45c0c49c42", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19118 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2019-19844", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:f53e0376-95ae-5aa9-ab9a-8d74e704f8ef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19844 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2019-3498", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:fcffaf8e-79b4-512e-a3ae-11fea0c781cb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-3498 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2019-6975", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:7548751e-13d4-5a92-80eb-d15b7dfee7ef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-6975 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2020-13254", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:54ebdff9-f6b3-5bea-94b3-0f882eb2cbf1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13254 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2020-13596", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:a80fbc02-30d9-5bd7-b6cc-2f32c9b67145", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13596 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2020-24583", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:71c3b1ac-9e66-525b-922b-711cb5b7df9b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24583 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2020-24584", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:c2fe9728-e611-5416-9d40-049cdb4de98f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24584 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2020-7471", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:5bb09ca6-9a82-5c79-8dbc-d31a304e8858", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7471 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2020-9402", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:bf03f65f-bc5c-5bc8-811d-b21386c83502", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-9402 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2021-28658", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:8efd8975-e6e1-5710-a3bb-f660488619b5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28658 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2021-31542", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:b96c6992-fcc8-53d8-96d4-d6d6c9b9ba7e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-31542 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2021-32052", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:450be871-9f4f-570b-8e42-b7038437d24c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-32052 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2021-3281", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:0787aea3-7421-501a-b131-9b01769cc07b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3281 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2021-33203", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:aa148372-813e-5d32-aa22-1603edd9608d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33203 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2021-33571", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:459b549f-a7e2-5bc3-a369-974b04eaa027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33571 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2021-35042", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:61e60574-a038-592d-b713-bd8b7b1a24af", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-35042 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2021-44420", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:c74e567e-d00e-59bf-b5df-f6acee3830c2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-44420 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:e65606e5-be50-5699-8ca6-a050fc47a9a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45115 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:32c3b845-8ce8-5619-a837-b44f73f3d3de", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45116 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:35e0b798-d1f5-5a0e-ad5f-2451511f7e02", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-45452 does not affect version 5.0.post17+tuxcare of django. not_affected \u2014 CVE-2021-45452 (directory traversal in Storage.save()) is NOT present in Django 5.0.0.post20+tuxcare. The upstream fix (commit 6d343d01c5 by Florian Apolloner) shipped in Django 5.0.0 and predates all TuxCare commits in this branch. All defense mechanisms are present: backslash normalization (base.py:75,116), path traversal detection (base.py:77-80,119-122), relative path enforcement (filesyste...", "justification": "code_not_present" } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:d571ce3a-0a6c-5698-8305-693038026608", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22818 does not affect version 5.0.post17+tuxcare of django. not_affected \u2014 The target Django 5.0 repository is NOT AFFECTED by CVE-2022-22818. The vulnerability (XSS via unescaped output in the {% debug %} template tag) was fixed by Django upstream in commit 394517f078 on 2022-01-02, three years before this Django 5.0 release. The fix\u2014which wraps pformat() output with HTML entity encoding via escape() and blocks output when DEBUG=False\u2014is present at django/template/de...", "justification": "code_not_present" } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:5802968d-5c26-5e18-9dd8-51858c44003d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-23833 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:2c385335-611b-53d6-9d5c-6f4de86c3673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28346 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:df31cb1b-a2b2-50be-92fb-d05ba905070e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28347 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:0931bbb5-f38f-5bb7-b06b-753540826b74", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-34265 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:d321f918-edf5-51b5-bdab-328b69687907", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36359 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:43e54387-82bf-5254-8cc1-3e7f83a077e7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-41323 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:d39369ee-fc3a-51ec-a477-5ffbf3e92582", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-23969 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:b794a9d5-7cd1-5c06-9898-667532715bff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-24580 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:1210c2cf-4c0a-5c40-9b06-3062cb52e0fc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31047 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:0e11df8e-9815-5f93-8c22-4388dd91f591", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36053 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:f20a785c-2590-519e-9e7a-9dc9851563d6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:c3d62635-79d6-573a-bf86-a07941171503", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-43665 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:67f3b78d-38c3-5de7-b384-6f0b1a5c0acb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46695 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:8110fcbe-b86e-5fac-a2a9-8409c1fd4eca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24680 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:57486ecc-beac-5de9-9bda-564e049a64a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:fa94072a-1087-5193-bee9-a2740ed9f1fe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:8b87e606-8c48-5919-a264-ef6c194fdf15", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:2904e147-0afe-5102-bfb6-9a786f614209", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:7ba765e6-8b31-5528-88a4-189315fdcfce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:d16fd243-7eb9-5255-973d-04c70312b2fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41989 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:89acadb1-2b8b-565d-aa15-b96c005a74f3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41990 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:b45b814f-005f-5a51-be19-4342a26dbfd6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41991 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:abe736d6-3946-5f17-80d0-8657a491c4c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-42005 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:0bb016b1-16de-5a49-aac4-c7d38692f03f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45230 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:ca56b9ed-bca4-55d3-a0cd-a8256b672f01", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:c242f5a2-528e-53e4-9632-5cdb31bb65bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53907 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:95db5e5c-9a6a-52d1-a9fb-9daa0daf9dda", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:bd4d0025-c132-598d-87ea-657ec2b20232", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56374 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:ff7ac64a-57cc-5347-88b8-ecf8c40f7f53", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:870040d6-b825-5343-bfd6-cc7e090afddb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:c6c35289-52cf-5a24-896c-b9f3dffa3139", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:9328a765-47c7-503e-aca1-a5998972f326", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-26699 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:83e8f6ee-7181-54d5-b21c-5c2873c8536f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-27556 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:977e73e6-859f-5e9d-afb9-87240e17f22b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32873 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:96aef952-d497-567b-9423-2803d6971f04", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:66cf7539-172b-57f0-a619-cdc04e7eee3b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:7291e0e8-82c0-54e2-82bd-df8a9e6bc557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59681 is already fixed in version 5.0.post17+tuxcare of django. CVE-2025-59681 already fixed on tuxcare-current/5.0 by 9f60b363dd, released in 5.0.post10+tuxcare; alias 'x#' rejected on 5.0.post21 from Nexus." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:7a7b0944-0820-5de3-8e8d-6c769adda216", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59682 affects version 5.0.post17+tuxcare of django, and is fixed in 5.0.post21+tuxcare." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:72c8d35c-e9ef-5d86-ae3b-3578c4d9620c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:24b83dd7-149e-53c0-a538-75d6f12783dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:5388ecf9-5f53-5032-b668-af013415d843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-108147", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:30591681-3c2e-54cc-bccf-fb7077ac641c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-108147 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-111211", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:a653ae7c-1dca-5850-8157-ec296243fe59", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111211 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-111362", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:4980f037-18eb-5113-85f7-312086bfbe76", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111362 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-113593", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:9bf501d3-bc07-591a-8121-7aee3cb9941d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113593 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-113733", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:41c55dac-f85b-5ed7-b2cd-bfaca05992ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113733 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-114582", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:2e53f2f4-bb67-5211-9b82-4f87b40828c1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-114582 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:7e9258b2-08f2-5fe4-a2b7-f7ab65e55e03", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:6d98beef-7c3e-563e-b056-5e46f7ec8d04", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:15eaf9ea-9310-5905-bf18-69827c72fbf9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:1734a2cc-ab61-5e64-a02e-1bedc408bae6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:45a3a598-b41f-5b68-a900-32e2b448ce39", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15307 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:5234b253-0923-5eee-a4e0-39b3d213310f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15830 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:8b5c0f12-29e8-51cf-98fa-bce035d56bc5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25673 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:64f0b0aa-2f6e-57b9-9b1f-8b4e5cde5589", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25674 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:e0f1c6e3-38e0-591b-8ef0-5cef443ee19e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33033 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:a45d1a02-0f3d-5e35-9724-2fc90e85151a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-35192", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:7cd2ef05-973f-5f13-b220-a2750a23a892", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35192 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-35193", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:9c8fe72f-ec60-5d56-bb38-9e8bf659fc26", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35193 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:31f14718-51f9-5aa4-9aa5-dc1351dc47f1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-3902 affects version 5.0.post17+tuxcare of django, and is fixed in 5.0.post22+tuxcare." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:7ba5f1ac-45ea-5c20-9479-f55111b52546", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4277 affects version 5.0.post17+tuxcare of django, and is fixed in 5.0.post22+tuxcare." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:0518723d-0b24-599d-8e7d-c23083bc5052", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4292 affects version 5.0.post17+tuxcare of django, and is fixed in 5.0.post22+tuxcare." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:9b5f8fd4-dfb7-5395-8d39-31d335d5e575", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:02e350ba-3f31-5ba9-825d-bdf8057e8668", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:488b447e-a21a-597b-b17e-a8e3716f5af0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:1dbfd7dc-1862-5025-aab9-ca2d99ac27cd", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 5.0.post17+tuxcare of django. not_affected \u2014 Django 5.0 does not contain the vulnerable DomainNameValidator class. This validator was introduced in Django 5.1 (commit 4971a9afe5). Since the specific component affected by CVE-2026-53878 does not exist in this version, Django 5.0 cannot be affected by this vulnerability. Additionally, all domain validators present in Django 5.0 (_simple_domain_name_validator, EmailValidator, URLValidator) a...", "justification": "code_not_present" } }, { "id": "CVE-2026-5766", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:c2462282-fcbb-5324-b008-bf79fda8cc38", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-5766 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:1c73e54d-3127-5d75-aedc-14fb72e42184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-6907", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:7b8b86cf-653a-57c4-ac68-f3b2cb759c8e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6907 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-7666", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:eae8c7e8-471f-5212-8c0e-7179371bab25", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-7666 affects version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:3ecfd130-b9b3-584b-a6dc-4091ed7c9c16", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 5.0.post17+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ] }