{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:4e28ce9b-03f0-527d-a76b-b6787cc7a20c", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@5.1.4.post8+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@5.1.4.post8+tuxcare", "version": "5.1.4.post8+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@5.1.4", "type": "library", "version": "5.1.4" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2007-0404", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:e3bd815b-6c66-55f5-be53-dc079f035128", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0404 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2007-0405", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:c8ec3b12-6b1a-53b1-acb3-41b17293f4d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0405 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2007-5712", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:e9ec913e-51be-58eb-a008-8d461be7c60e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-5712 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2008-2302", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:0bd36673-d558-5560-873b-c3460882156a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-2302 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2008-3909", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:4102229e-225b-58f9-bc5c-d1f25deab5a0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-3909 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2009-2659", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:18ec3582-a202-53dc-9bd6-cad3e824d81d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-2659 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2009-3695", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:61a41ba9-1f04-5fbb-897c-88fccfe03f24", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-3695 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2010-3082", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:fa54ecab-39f1-51cc-9ebd-7bc68fd792c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-3082 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2010-4534", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:a97693e2-db91-5e77-8dd3-f7a8cc5a0ce5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4534 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2010-4535", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:a23aea5f-f05f-5eb7-bb11-22b369207c85", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4535 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2011-0696", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:74d92fc8-c9d5-56c3-b0da-0842d61c1b32", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0696 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2011-0697", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:d5951f15-e180-5513-bfe7-56e278e6e978", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0697 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2011-0698", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:29d973ab-d5cf-5917-9488-038389e4ccd9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0698 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2011-4136", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:e5d7d3b1-debe-5f47-87a3-3c4fec38cc84", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4136 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2011-4137", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:704aefaf-fff4-5603-86be-c1484f429f41", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4137 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2011-4138", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:5d2a7aaa-4aae-50c1-8ee1-2e86a141d2a8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4138 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2011-4139", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:13e81428-17ec-5fe0-a95b-2424c79a5687", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4139 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2011-4140", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:c4037799-ae32-57ec-aed5-600ce11bcb45", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4140 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2012-3442", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:86a588ff-ca66-5d70-8961-b805f111bc3a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3442 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2012-3443", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:6918ff3f-7189-5835-a83b-e1788407a261", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3443 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2012-3444", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:c4b34d24-874e-5a4f-9e05-4a8ba7fd8d27", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3444 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2012-4520", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:67393253-b143-5ac6-bf9b-004da4e2279c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-4520 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2013-0305", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:8c399662-6f65-5174-9596-19a21bbb7d42", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0305 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2013-0306", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:19e0a138-3792-5a39-89a7-e59402557128", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0306 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2013-1443", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:819fb8ed-ab70-5fdd-b936-0e40859eb9d3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1443 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2013-1664", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:1a12cad7-3643-50ca-b07e-3bf58f15dac4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1664 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2013-1665", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:17697d4e-d2bb-5f90-916f-1285457d64b3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1665 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2013-4249", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:e0f42e93-1fb7-542c-8607-59ff0bade93c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4249 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2013-4315", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:d4e193f3-9689-52e1-a4dd-de641b55b287", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4315 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2013-6044", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:d0c96a46-55a4-5e94-a714-5c445970908b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6044 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2014-0472", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:13c13879-5301-5ac5-b417-6a441cf71c8f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0472 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2014-0473", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:0af77c5e-be9a-5a87-b154-07876cacf17b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0473 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2014-0474", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:06bbeddf-7fb3-54b1-9077-913ebf2d0fad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0474 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2014-0480", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:46af7299-5862-5b91-a372-1dd8c8737c45", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0480 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2014-0481", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:68c19aa7-d42f-5f49-8c4a-97bd530fe103", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0481 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2014-0482", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:a38cebdf-55d3-5218-ae97-8950fd4d73e9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0482 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2014-0483", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:fb508b67-0adc-55ad-be6d-3b15774ad7e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0483 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2014-1418", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:e3237c6a-7c89-517c-8429-2e14bf7c1706", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-1418 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2014-3730", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:7663ad3b-d0d3-51d2-b6b7-f13ee11c9e52", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3730 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2015-0219", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:310ca3bd-d056-5a36-a690-4ebd7749d670", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0219 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2015-0220", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:0e35dd9b-edfd-5b20-b915-5413b832a12b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0220 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2015-0221", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:f364f497-bbdb-58f7-b581-3ab9f5eaa08e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0221 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2015-0222", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:82d238fe-87d2-5c50-b801-96c4ccb5f807", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0222 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2015-2241", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:268f717b-d667-5713-9c5d-a674b918a88c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2241 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2015-2316", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:36474503-b19f-5474-9537-85933e7a0fb9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2316 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2015-2317", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:da6256ea-ce55-57ab-9aaf-702749d86894", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2317 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2015-3982", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:c5569ed3-c589-552f-9a31-8afbed8521f8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3982 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2015-5143", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:2e7796c7-352b-5307-8bd0-9377f206041a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5143 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2015-5144", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:4321bfb5-21ca-56ee-a9d6-f62f32499955", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5144 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2015-5145", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:d43bfbfd-2585-5f48-bbb0-c78092315b81", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5145 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2015-5963", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:970d7285-607e-5dc8-a2bc-fd2a177b1353", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5963 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2015-5964", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:f280d202-d156-5bec-bb4a-9bb56715a19d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5964 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2015-8213", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:683fe8d2-3904-5231-ae55-0a15c4c394b0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8213 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2016-2048", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:5f74f41c-e6bb-5a50-a0f4-2908f963769c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2048 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2016-2512", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:c7e1f41c-9c63-5fab-b64f-77bd13d17d99", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2512 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2016-2513", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:822114ea-9022-52e8-af73-2f989decfeee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2513 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2016-6186", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:d981d49b-4f0d-543e-83b8-a55f96d5dca0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6186 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2016-7401", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:e90d817d-b2e5-59a3-a516-af4117065c95", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-7401 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2016-9013", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:e8f334f6-dfd0-5a7f-ab10-fae271d99315", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9013 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2016-9014", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:03ba03b4-0492-56f7-9ada-b34cafddf5c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9014 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2017-12794", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:63071b24-e593-5508-b11c-8236b83f2006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12794 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2017-7233", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:97f9b687-03bb-5f07-98b3-caddab7bafe2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7233 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2017-7234", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:8bb701eb-3880-5e2b-85e6-0aacb410785e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7234 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2018-14574", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:98d367ce-4a3c-50cf-a542-06f0280de460", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-14574 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2018-16984", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:0d16c78b-e64d-5e40-9a2f-c12f95ab74e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-16984 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2018-6188", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:69283aec-fc0c-58cc-b01a-be59261a393b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-6188 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2018-7536", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:e477e78a-7383-529b-9b37-fa4b1dc885f3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7536 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2018-7537", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:5d8daada-8957-5c6c-acd8-67469da98294", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7537 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2019-11358", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:3b08001b-880e-5b07-b206-1530ba3af735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-11358 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2019-12308", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:ea5be323-5af2-5235-b1c7-653ce4a27d27", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12308 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2019-12781", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:7a30d6b1-d18b-5a4d-bf72-54676ac82140", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12781 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2019-14232", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:82302d57-5e04-5d3b-a48b-c47b797364d2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14232 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2019-14233", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:7586a855-3ba7-53f5-8abf-4c3b6383e5f5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14233 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2019-14234", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:6d30f9eb-049b-5f35-81af-96ba08e19367", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14234 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2019-14235", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:66f5df37-ed24-57fa-8df9-18519612e863", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14235 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2019-19118", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:1afad5e4-e683-5fd2-8f2a-bb41f28a8633", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19118 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2019-19844", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:2d1d3163-fd12-5319-a716-ffc6963857b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19844 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2019-3498", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:d4a5b474-24cb-599a-ac75-cab1f97558ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-3498 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2019-6975", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:2c8aea0a-b1ee-5aed-9674-a6d949b8fb6b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-6975 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2020-13254", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:94f5cbed-49cb-5b85-b313-925f2fce9add", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13254 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2020-13596", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:846aaffe-15ec-5810-9f82-87e3f7570993", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13596 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2020-24583", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:fc5518e5-5188-5b5a-99ff-22add8438c36", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24583 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2020-24584", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:bd3ea943-ae42-5d26-81a2-8b7d52037927", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24584 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2020-7471", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:785b6617-93c4-57d8-b669-9b444fa43d83", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7471 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2020-9402", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:40d61d66-6476-5f25-a98c-4985166701dc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-9402 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2021-28658", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:bf3fd260-31f4-5866-b083-3db4b2ca11c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28658 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2021-31542", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:8234a3dc-1eeb-5693-b524-3d656f364038", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-31542 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2021-32052", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:1170ead8-3fd7-5640-91b6-4a9122fc2e10", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-32052 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2021-3281", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:08093101-948d-5ed8-a941-062f08831c85", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3281 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2021-33203", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:970e4270-8e6b-51d1-a52f-a98129e47e94", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33203 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2021-33571", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:563759dc-9823-5df0-8782-2217117eb109", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33571 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2021-35042", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:f81dcfc4-462e-5d7a-acc2-d357c6104de1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-35042 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2021-44420", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:13ef2058-c618-569b-91a6-6e240e75cce3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-44420 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:d72c21aa-893c-59ab-bee7-bf8f3fd1e881", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45115 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:f267e1b4-9736-55a0-9a89-b2f23cf1fd91", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45116 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:4ad65777-b2d1-5a60-a415-aa0aa61afab8", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-45452 does not affect version 5.1.4.post8+tuxcare of django. not_affected \u2014 Django 5.1.4.post10+tuxcare is not affected by CVE-2021-45452. The directory traversal vulnerability in Storage.save() was fixed in upstream Django commit 6d343d01c5 (Dec 2021) by Florian Apolloner, which was already present in the Django 5.1.4 upstream release before TuxCare's maintenance began. All protection mechanisms from the fix are present and active in the target: path normalization, \"....", "justification": "code_not_present" } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:f0b963bc-9632-5b3b-bd26-870211701f59", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22818 does not affect version 5.1.4.post8+tuxcare of django. not_affected \u2014 Django 5.1.4 is not affected by CVE-2022-22818. The vulnerability (XSS via unescaped output in {% debug %} template tag) was fixed in Django 4.0.2, 3.2.12, and 2.2.27. The target version 5.1.4 already contains the upstream fix from commit 394517f078 by Markus Holtermann, which was shipped in the upstream release before TuxCare's onboarding. The DebugNode.render() method properly HTML-encodes al...", "justification": "code_not_present" } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:b7d4585b-6194-59b6-b0fa-16b35d6dddbe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-23833 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:19cc4ffe-0e80-5e40-8f71-292df25dbf80", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28346 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:8d17077f-725d-5f4f-ae1a-c8680ea97899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28347 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:6f474b42-b5a2-544b-b352-748b0408270a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-34265 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:4734cba2-8d37-5bfe-8717-609d8c311d7f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36359 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:e1a81fd3-3948-520e-b1b5-4b65f6c00496", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-41323 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:39818983-3eee-5574-b16d-562f775e0c06", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-23969 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:7dfadb3a-dffe-54fd-9529-1b4e773204d5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-24580 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:fbbbacc9-aabc-5b30-9a69-6d70e6409e3e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31047 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:b0b9452c-3911-5a6d-8315-42cb5878b29e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36053 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:a9b33fbb-395f-5659-a0d7-92d9f9297454", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:3b4e39e1-aac3-5680-9d59-d003866baed1", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2023-43665 does not affect version 5.1.4.post8+tuxcare of django. Django 5.1 Truncator no longer uses the vulnerable regex: it was rewritten on html.parser (upstream 6ee37ada32, django/utils/text.py:176-252), and the CVE-2023-43665 fix 17b51094d7 is present. Probe '<'*40000: 3.43s on 4.2.5, 0.00s on 5.1.post15 (also at 5M chars).", "justification": "code_not_present" } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:184c5984-d53f-57a9-8084-29623bcbdf45", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46695 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:9898f480-ebde-51e0-95b1-baf658483a51", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-24680 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:1a81388f-ed59-5275-9c29-11dedcb8ec9b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-27351 does not affect version 5.1.4.post8+tuxcare of django. not_affected \u2014 Django 5.1.4 is not affected by CVE-2024-27351. The vulnerable regex pattern `r\"<[^>]+?>|([^<>\\s]+)\"` used in `Truncator.words()` was removed in January 2023 (commit 6ee37ada32) when Django switched to HTMLParser-based truncation. Django 5.1 branched from main after this architectural change, so 5.1.4 never contained the vulnerable code. The CVE only affected older branches (3.2, 4.2, 5.0) that...", "justification": "code_not_present" } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:7b2075d6-ce00-55b1-a44e-df36e80511bb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38875 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:f07ee338-0556-5c69-8e13-ed5704a5a4ae", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-39329 does not affect version 5.1.4.post8+tuxcare of django. not_affected \u2014 CVE-2024-39329 timing attack vulnerability is NOT present in Django 5.1.4. The fix (commit f5d16483f3) was already included in the upstream Django 5.1.4 release before TuxCare began maintaining this version. The vulnerable code pattern has been replaced with timing-normalized code that calls make_password() to equalize response times for unusable passwords.", "justification": "code_not_present" } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:397e999f-e442-56c0-8df4-c4a679485771", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-39330 does not affect version 5.1.4.post8+tuxcare of django. not_affected \u2014 CVE-2024-39330 is not present in Django 5.1.4. The upstream fix (commit 6d36203648) that adds three validate_file_name() calls in Storage.save() and backslash normalization in validate_file_name() was already included in the Django 5.1.4 release before TuxCare onboarded it. The vulnerable pattern (missing path traversal validation allowing directory traversal via \"..\" or absolute paths) is not ...", "justification": "code_not_present" } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:5a11a0a2-24a0-5f30-9631-6389ab84c726", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39614 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:a117a297-70e0-5c19-bb6a-c2d094abac11", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41989 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:5d82841e-77bb-56fc-9881-cc6310fa722f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41990 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:7d4c40c1-fa5d-50e8-9d5c-9e9eb7414683", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41991 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:0eb8a2c4-4b01-533c-9561-6b047e42f43f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-42005 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:80068701-3ace-55ed-a780-606eaf750e89", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45230 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:c99fe5dc-3ecf-5e4a-8c39-7cf64c19ac4e", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-45231 does not affect version 5.1.4.post8+tuxcare of django. not_affected \u2014 CVE-2024-45231 is NOT present in Django 5.1.4. The vulnerability allowed email enumeration when password reset email sending failed, causing observable 500 errors. The upstream Django fix (commit 3c733c78d6 by Natalia) wraps email_message.send() in a try-except block that catches and logs exceptions instead of propagating them. This fix was already present in the Django 5.1.4 upstream release b...", "justification": "code_not_present" } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:ee0e8530-6f35-5830-af82-2e2e99c08afa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53907 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:45e087fb-599b-59b7-bc61-d1259fd145d1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53908 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:8b30251d-0aa0-5f88-b55b-5e046ce08ff5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56374 is fixed in version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:fb046b48-81f1-571c-80b9-5e260ad310e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:216b7b40-4e75-51da-a9ff-c36eff30ea30", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:daf05185-116e-59fa-b8a4-9bfe742756ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:30396e20-d39e-5877-8601-ef30f64d6f40", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-26699 is fixed in version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:32d194d9-56ff-57ec-9e35-38ca6607e241", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-27556 is fixed in version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:3562f5a0-eb3e-5a4e-9ae8-60240036c7c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32873 is fixed in version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:02ebca38-c925-5dc9-a660-d3f4c2d7a120", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:71ef2803-e451-5f97-a214-f716ae4f98dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:cebea927-5d43-55fe-b037-c4ad5f44dbbe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59681 is fixed in version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:ff5b2d02-af57-5627-9acf-c82621c4e6ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59682 is fixed in version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:487e04d6-f1d7-5c04-941f-22f6000ac445", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:fa370305-fac2-525b-83fb-a7b6c477987c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:b592ad08-c769-516b-9ee1-979f1eaf8dda", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2026-108147", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:fc7a3d52-b4b5-5f02-9f3d-0f83500f867e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-108147 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2026-111211", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:5ff90f7f-04d6-5d22-a423-9fad0bfb932a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111211 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2026-111362", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:aa32da42-748f-521e-98cd-6ee9c39f827e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111362 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2026-113593", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:a84eb0d3-b424-5552-b2d5-fc07f18a33f8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113593 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2026-113733", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:266dab8e-fd76-5287-a781-1832dd8b9375", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113733 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2026-114582", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:3f2f08fe-4bb4-5028-a078-76dfbcf2a0e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-114582 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:83a96f22-ac89-5128-b7dd-f2f9d4ed1657", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:7bd961dc-885e-5d91-8cdb-b88a6bf37c25", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:d8350935-9f72-5939-8232-9ccfc44bfc7c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:5d587105-b3a4-5035-95a5-992f70a89337", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:07423994-974c-5a64-a0a8-5a38ebdfe9c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15307 is fixed in version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:ce1c90fe-719e-5b81-917f-44fe5f31bf73", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15830 is fixed in version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:328523cf-6e01-5fe9-87d2-ee7f92f11e76", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25673 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:0f7e69ec-c8bc-526e-b524-02243689fc99", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25674 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:9ba3fdae-b29e-5b73-811e-4c8071e718f7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33033 affects version 5.1.4.post8+tuxcare of django, and is fixed in 5.1.4.post11+tuxcare." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:abf4f38c-5a29-582b-b1c9-188c441b0f8c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2026-35192", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:5ce69348-e84d-58c3-bc7f-f14148d9dc1b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35192 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2026-35193", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:3c1827b0-84c6-54b5-84a0-fccbaa7310cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35193 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:ce2727cb-f026-54aa-a54f-1d7dbf6e9a13", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-3902 affects version 5.1.4.post8+tuxcare of django, and is fixed in 5.1.4.post11+tuxcare." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:35b49d65-6846-518c-858c-8085f2ee4328", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4277 affects version 5.1.4.post8+tuxcare of django, and is fixed in 5.1.4.post11+tuxcare." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:fdd48768-2b54-5e17-9c36-7d51d9c21108", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4292 affects version 5.1.4.post8+tuxcare of django, and is fixed in 5.1.4.post11+tuxcare." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:8a2b4cd4-1e03-5651-94ad-0b84d8b4304d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:0cff5833-d704-527a-860f-abaeb703c994", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:cfb05fe4-fd35-5275-86cf-b717d002c32b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:f6cbf4f1-a160-5f3d-8690-7ad22c3b925c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53878 is fixed in version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2026-5766", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:a29263d0-9859-52a8-a4a9-a768bcc8165a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-5766 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:2224e03d-d66c-5f50-9995-8c764f6c5583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2026-6907", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:828c8914-10ba-565d-84f2-ce77c3b382e3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6907 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2026-7666", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:91d0fde9-4b86-5cf2-813e-41d763e07a59", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-7666 affects version 5.1.4.post8+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ], "bom-ref": "urn:uuid:8a3d49c9-817d-56ef-b346-d0501a56e830", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 5.1.4.post8+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@5.1.4.post8+tuxcare" } ] }