{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:d2029efd-983f-5962-a9ea-c47d1083dd85", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@3.2.25.post12+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@3.2.25.post12+tuxcare", "version": "3.2.25.post12+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@3.2.25", "type": "library", "version": "3.2.25" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2007-0404", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:042e0d65-c719-54c1-9020-23972f41ee95", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0404 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2007-0405", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:375ad280-af0f-53e9-ab59-230b403a2abe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0405 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2007-5712", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:3e2bd131-5adc-50d7-b7cf-20fbd8a36b8f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-5712 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2008-2302", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:c4816cb3-138f-53b1-8cd6-b9bd05ae98a2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-2302 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2008-3909", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:8c1bd712-bc97-5355-9125-771c64c15d68", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-3909 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2009-2659", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:234d2a58-236d-5fb6-b52d-3202ef79266a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-2659 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2009-3695", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:a44c9e8d-39ab-528a-a733-73afaed51de7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-3695 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2010-3082", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:71254c97-d966-51e1-85fc-4e2e095f591f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-3082 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2010-4534", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:70069ac7-fb43-556d-81a3-a3da17f45e8c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4534 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2010-4535", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:b668e21f-989b-56f1-b63a-d6b4d0dbad0d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4535 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2011-0696", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:2215dcff-4b7c-5e6b-9adc-5966fd71b70b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0696 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2011-0697", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:b8350083-40fe-554b-9124-134ea2037d92", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0697 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2011-0698", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:44376f4e-95fb-5b9b-9de3-469958198f2f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0698 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2011-4136", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:d41a20ad-17f2-5b12-bdf6-c6c92c004506", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4136 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2011-4137", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:3fb39623-a93b-592b-a477-09c4647e752b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4137 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2011-4138", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:f493d0e6-bdee-5ef4-9614-847b6f9d84c1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4138 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2011-4139", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:6b4770b7-af69-527f-af51-bad5a5e9895d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4139 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2011-4140", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:1c662490-2769-5762-9671-123567521e9b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4140 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2012-3442", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:8daa7b42-bff9-5e4a-8e28-ba1f01f26cf3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3442 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2012-3443", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:48fab857-4ded-5178-b83b-5448628cc970", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3443 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2012-3444", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:d4152605-d619-5011-b4ed-3fa819b1ba49", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3444 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2012-4520", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:ca4422d5-bf2e-5163-8782-28103482a3e3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-4520 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2013-0305", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:a61c4b44-f49e-5244-89a4-b9653d927836", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0305 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2013-0306", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:86824b4d-01cf-5363-9065-561e1645221f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0306 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2013-1443", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:b1dfe553-aaa3-5801-bd3c-f7871cc951c5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1443 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2013-1664", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:1914cd3b-acd6-5440-ab89-e748c15a2c86", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1664 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2013-1665", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:2382ceda-7dbf-5117-b3a6-16b116281431", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1665 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2013-4249", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:e36620d5-0154-59a7-b401-0bc8bc89d310", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4249 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2013-4315", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:69520ff6-f8d9-52f8-8add-208f5fd8d03c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4315 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2013-6044", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:84d73ac4-1736-5ffe-b7e3-8da65594d749", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6044 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2014-0472", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:e2754075-0a3f-5689-b268-8ce5fb63c493", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0472 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2014-0473", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:2b0ba5f1-0781-5eb4-9e9b-42fcc623a56c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0473 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2014-0474", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:23d32b54-3a1d-5d90-8ff8-c42c76ca5ba5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0474 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2014-0480", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:1a8e8768-2ae5-5106-9ee8-6018344dce34", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0480 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2014-0481", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:4a2fd7cb-dc8b-5e56-9bd4-92d2c2cc7bb0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0481 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2014-0482", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:8c88071a-784a-560e-a2a7-321ad0773eb6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0482 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2014-0483", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:29760c4a-150e-5184-bf5f-ac6928f7005a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0483 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2014-1418", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:f3466bd5-013d-5aea-989b-49a9331b3e21", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-1418 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2014-3730", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:06537e53-02e5-50f0-82cb-8b8efa00778d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3730 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2015-0219", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:fc3e5545-5efc-558d-8e83-90001e71c331", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0219 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2015-0220", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:cbc57bdc-2632-52d0-93a2-33f3d4b39d12", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0220 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2015-0221", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:1585e80e-cdcb-52bd-a280-0eb39a817f9b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0221 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2015-0222", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:b8a27d08-f331-5f9c-a4dd-c25bdeefd941", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0222 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2015-2241", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:24d2c0d5-5f75-5b29-930a-4da5d7376d75", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2241 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2015-2316", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:204004fb-d540-554f-9cdb-190fb472b5b8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2316 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2015-2317", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:4c1eb296-4b15-57ce-88b4-d76e5df2d508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2317 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2015-3982", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:68401090-bb8c-57f9-a171-8a5cb4d83214", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3982 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2015-5143", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:3ba428f3-55d4-5ee5-a04a-fb6e3f55bcb9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5143 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2015-5144", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:2de03939-4eb9-5b0b-b9f9-154add4e8b44", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5144 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2015-5145", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:ad307e24-e96f-5cb0-85b3-4ec1a965e765", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5145 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2015-5963", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:1cb554f7-b169-5f61-9ace-151a3a429cac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5963 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2015-5964", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:b43a02cd-befa-5d4c-b043-f91581cf59c9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5964 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2015-8213", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:7a66ce30-1a52-548a-a3d8-b8c2ddfe8e85", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8213 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2016-2048", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:203a4572-30f0-5501-b363-a80e0aff5085", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2048 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2016-2512", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:b4a46745-0bb6-5373-8cef-398eea31e50a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2512 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2016-2513", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:828c2b95-c724-5f84-8f99-3f85962462a5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2513 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2016-6186", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:e868eea2-fe64-5417-9a7b-8294f30f72a0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6186 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2016-7401", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:89099011-afba-5f4d-9a49-5d798c803140", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-7401 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2016-9013", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:bc8f86f8-2ea6-5076-9f2d-f53f36401370", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9013 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2016-9014", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:a8ad1919-d937-551b-9b04-994bcdf6e214", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9014 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2017-12794", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:cbd90198-6479-5832-b0f2-2247fb29f890", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12794 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2017-7233", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:64d0673a-6b89-59b7-8a1e-bfee5afc8563", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7233 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2017-7234", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:8971d382-cb28-5cde-9c4a-971c55d00f5d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7234 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2018-14574", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:7efcdfb1-4360-5a10-9646-25675038a496", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-14574 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2018-16984", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:11011ad3-f302-544b-a04e-e0f3081e8520", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-16984 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2018-6188", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:6de05538-177c-57d1-95f9-bcebbd114cf0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-6188 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2018-7536", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:3ba2e551-c1e8-5d2e-88c3-db2a94b2ce0e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7536 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2018-7537", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:2f6f03d1-c736-52ac-9043-dbc931fdea83", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7537 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2019-11358", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:ca576a0a-9bce-5d93-8e8e-db98052c65fe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-11358 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2019-12308", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:ee963ad7-9dc3-51ac-a2f0-ad7a31599044", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12308 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2019-12781", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:68457c9b-0748-554b-995a-b243c1318fd6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12781 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2019-14232", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:3ab78d31-80a6-5a19-b670-416608374096", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14232 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2019-14233", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:66417c3b-b40f-57b7-ab6c-1648e60b7038", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14233 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2019-14234", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:0767a198-cedd-5716-8d04-ab38aa7baf01", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14234 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2019-14235", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:0e4fcad7-8db6-5f77-91e9-9ce550bb9449", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14235 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2019-19118", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:f5c33564-e8f9-57cd-b919-384573ec94db", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19118 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2019-19844", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:79e2b821-3ac0-52ff-a555-c1995d9609b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19844 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2019-3498", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:69e05344-df86-57b4-b175-b59a14ed163e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-3498 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2019-6975", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:acf7d1d9-3e48-5f65-97fe-329c0e421363", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-6975 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2020-13254", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:87640f38-01c5-56b8-9c3e-cfecc4162bea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13254 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2020-13596", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:f70eaa1a-72f5-5b69-9419-c17daecb96e3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13596 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2020-24583", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:2e4b3f19-d210-5be0-a337-de3129752a85", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24583 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2020-24584", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:aae4275f-26e7-5825-8030-a9309dc438b6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24584 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2020-7471", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:c408883e-f64a-5a06-82d5-4e949688df15", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7471 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2020-9402", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:b2cedef2-4719-50ce-884e-57de471a0d95", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-9402 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2021-28658", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:c7fb80ec-daeb-5e1f-a462-56ceafd918fd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28658 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2021-31542", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:45d3788c-a214-5a70-8812-79116ea40ca6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-31542 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2021-32052", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:2b7893bd-db9d-5863-ad25-5d0cc0bac3c2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-32052 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2021-3281", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:e4538f68-ee43-5f44-b988-29e15f413544", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3281 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2021-33203", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:30295e9d-cc3d-5b1c-a5e8-3693233cdfc2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33203 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2021-33571", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:fa694ff4-dfca-543b-a7c9-46e64a576472", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33571 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2021-35042", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:926b91ef-3711-5279-b1a4-96f1a01aba3b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-35042 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2021-44420", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:a64a2b76-446d-5ee2-8173-e6e61e2bab84", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-44420 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:55f664df-8bbc-5278-a091-8ee778eef338", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45115 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:8b01ce4d-ac80-5d3b-853c-a1e55f45614e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45116 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:4e5434f2-1cf6-5f2f-a94a-10924ef95bc2", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-45452 does not affect version 3.2.25.post12+tuxcare of django. not_affected \u2014 The target (Django 3.2.25) is not affected by CVE-2021-45452. The upstream fix from Django 3.2.11 (commit 8d2f7cff76) was already present in the release that TuxCare onboarded. All three fix components are present in django/core/files/storage.py: (1) backslash normalization before path validation in get_available_name() and generate_filename(), (2) relative path enforcement via os.path.relpath(...", "justification": "code_not_present" } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:fb76856a-f1f1-53e2-886d-15aeee7bd535", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22818 does not affect version 3.2.25.post12+tuxcare of django. not_affected \u2014 The target Django 3.2.25.post12+tuxcare is NOT affected by CVE-2022-22818. The vulnerability (unescaped output in the {% debug %} template tag leading to XSS) was fixed in upstream Django 3.2.12. The target version 3.2.25 already contains the complete fix from commit 1a1e8278c4, which HTML-escapes all debug output via the escape() function. This fix was authored by upstream Django developers an...", "justification": "code_not_present" } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:e1bfb061-3aef-5f6d-9cb0-1558ce756716", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-23833 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:bd2af96a-a7cb-5354-8af0-523fa9bba88c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28346 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:0e474ed8-5511-5d5b-9651-283e51278633", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28347 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:85c0ee7e-5ecb-5d38-a311-d46992f42b6a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-34265 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:4ebf77b0-d842-5d35-95fa-0bb0828dba9c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36359 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:481629f2-9ae2-5ca1-abfe-870be3e8d8e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-41323 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:5fba8065-d1cb-5797-a30b-f668068411a3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-23969 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:cccc274c-418b-5470-b0c0-7f4780e98467", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-24580 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:f8667fd2-d4d8-57e4-9303-e3dfe0c3de96", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31047 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:0937f5d2-8c02-58a6-8142-bc75118fb9a5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36053 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:af619632-0f8f-5492-8ac4-3c7aae751ccd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:4163f230-06a9-501a-a1a9-e8534ee3a1a5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-43665 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:47b1d2b1-0344-5989-a813-ea5a4ff5981b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46695 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:46d89d08-a717-5eab-8cad-c06da2852d71", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-24680 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:849c3f83-9e02-5d00-8243-62b74b288618", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-27351 does not affect version 3.2.25.post12+tuxcare of django. not_affected \u2014 CVE-2024-27351 is not present in Django 3.2.25.post12+tuxcare. The vulnerable regular expression pattern that caused catastrophic backtracking has been replaced by a secure WordsRegex class implementation. This fix was authored by upstream Django maintainer Shai Berger (shai@platonix.com) in commit 072963e4c4d0b3a7a8c5412bc0c7d27d1a9c3521 and was included in the upstream Django 3.2.25 release b...", "justification": "code_not_present" } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:042027c2-858d-55f0-b563-1336da334152", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38875 affects version 3.2.25.post12+tuxcare of django, and is fixed in 3.2.25.post17+tuxcare." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:c31f7603-afda-5bbe-bc20-8a06fee75ba2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is already fixed in version 3.2.25.post12+tuxcare of django. CVE-2024-39329 already fixed on tuxcare-current/3.2.25 by cf29797b67 (inside the CVE-2025-13473 backport), released in 3.2.25.post14+tuxcare; authenticate timing equal for unusable-password users on post17." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:cae736ea-088f-5903-804c-0fb66ab6c5b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39330 affects version 3.2.25.post12+tuxcare of django, and is fixed in 3.2.25.post16+tuxcare." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:ad4df8f2-8256-5233-9422-ba46f3e01bb7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39614 affects version 3.2.25.post12+tuxcare of django, and is fixed in 3.2.25.post16+tuxcare." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:94d78348-2b81-5285-ac21-bde844a5ad68", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-41989 does not affect version 3.2.25.post12+tuxcare of django. Django 3.2.25 floatformat() parses repr(text): str/Decimal input yields quotes, parsing fails and the value goes through float() with a bounded exponent; upstream test inputs run in 0.000s. The expensive path needs an object with a numeric __repr__, not attacker-supplied. See PYELSCVE-3148 / django!68.", "justification": "code_not_reachable" } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:e6c061aa-5f55-5470-962a-5faab3e59ee4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41990 affects version 3.2.25.post12+tuxcare of django, and is fixed in 3.2.25.post17+tuxcare." } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:fe3d651a-e873-54db-95af-edb1d01f597c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41991 affects version 3.2.25.post12+tuxcare of django, and is fixed in 3.2.25.post17+tuxcare." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:cbcf3a2e-bbdc-5698-a3a5-b0e3ac4b1116", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-42005 does not affect version 3.2.25.post12+tuxcare of django. Django 3.2.25: names passed to QuerySet.values()/values_list() never become SQL aliases on 3.2 (alias grouping arrived in 4.2, django 04518e310d); 11 query shapes injected 7/11 on 4.2 pre-fix and 0/11 on 3.2.25 (sqlite). See PYELSCVE-3148 / django!68.", "justification": "code_not_reachable" } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:00e36126-e505-5d35-a3b9-1d8d6c4abd84", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45230 affects version 3.2.25.post12+tuxcare of django, and is fixed in 3.2.25.post17+tuxcare." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:9c190a53-aa81-5c3b-9c3d-4d661410db1f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:bec58042-f945-5227-8662-b3d01b4b1c03", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53907 affects version 3.2.25.post12+tuxcare of django, and is fixed in 3.2.25.post17+tuxcare." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:333fc761-34fc-5bd0-a6fc-51bd0dff1a7f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53908 affects version 3.2.25.post12+tuxcare of django, and is fixed in 3.2.25.post18+tuxcare." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:534949de-021c-53e0-816e-ae36dcfa87a0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-56374 affects version 3.2.25.post12+tuxcare of django, and is fixed in 3.2.25.post16+tuxcare." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:70de0b72-8a2c-5d17-a287-e088f965e4e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13372 affects version 3.2.25.post12+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:442b6f79-d41e-5b9a-a77d-8004bce9ae9d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13473 affects version 3.2.25.post12+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:a03ced24-38cd-53ef-851e-cc623a159ba1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-14550 affects version 3.2.25.post12+tuxcare of django, and is fixed in 3.2.25.post13+tuxcare." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:335a8f38-e19b-5f18-b0b1-0cc03159d49b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-26699 affects version 3.2.25.post12+tuxcare of django, and is fixed in 3.2.25.post16+tuxcare." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:b1545ad1-53eb-5135-857c-fca4493ba12c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27556 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:17aa2ea6-6ff5-55b6-ab35-8fede897b6c7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32873 affects version 3.2.25.post12+tuxcare of django, and is fixed in 3.2.25.post16+tuxcare." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:d96874aa-4a1e-527a-9c90-08ff006de516", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:2703f238-d9c3-54f7-a5ed-d31e9f0713cc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:ca6ce961-eda6-5f1d-b561-2f3ed68bc7ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59681 is already fixed in version 3.2.25.post12+tuxcare of django. CVE-2025-59681 already fixed on tuxcare-current/3.2.25 by ec740f90ef, released in 3.2.25.post4+tuxcare; all four of annotate/alias/aggregate/extra reject alias with '#' on 3.2.25.post17." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:88e6cd3a-2b27-5108-ae2d-4a77a3c5432d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59682 affects version 3.2.25.post12+tuxcare of django, and is fixed in 3.2.25.post16+tuxcare." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:9abe2cf2-5cad-50d4-b44a-b3967c84e6cb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:0157bc49-f413-59cd-9b3f-f6a85f0b2b36", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:24ee3878-1153-5e2a-baf4-c055ce30cf58", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-64460 affects version 3.2.25.post12+tuxcare of django, and is fixed in 3.2.25.post13+tuxcare." } }, { "id": "CVE-2026-108147", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:78eea69d-fbb4-532c-bab3-8e2e390919e5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-108147 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2026-111211", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:e4459064-f1a5-568d-bc66-a973d2cf2233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111211 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2026-111362", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:749fac86-ef0b-5e1e-997d-422c04a7a7ae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111362 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2026-113593", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:502a4459-cabc-5535-a64b-5effed1e7086", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113593 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2026-113733", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:4598e218-45f1-5ccc-9d20-cd34c6fac728", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113733 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2026-114582", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:db4303aa-9237-5d6a-b132-da38e78bf484", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-114582 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:e9736b0c-86d2-559d-b9dd-94fc089536a7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1207 affects version 3.2.25.post12+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:80e33677-6595-5321-9347-88e02870de22", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1285 affects version 3.2.25.post12+tuxcare of django, and is fixed in 3.2.25.post13+tuxcare." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:338a1309-5f0a-5497-8050-9b8bb6ceb4b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1287 affects version 3.2.25.post12+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:c182b13d-3485-5dfd-8c71-1337c0802a56", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1312 affects version 3.2.25.post12+tuxcare of django, and is fixed in 3.2.25.post15+tuxcare." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:b8336c69-3d07-5b90-b855-afbabfff29c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15307 is fixed in version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:d6933bd5-df92-51c5-95a8-70a1fecf7702", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15830 is fixed in version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:d1836b9a-7de5-506a-ad2e-ea99d8b3246d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25673 affects version 3.2.25.post12+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:eee06e3a-43ec-5610-8569-7b4af2dea3d5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25674 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:a8f6d3a2-3364-5576-a390-727f692c7993", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33033 affects version 3.2.25.post12+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:0add1068-25c3-5b0b-8664-def42f8a6340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2026-35192", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:c3670487-8ea2-5cc8-be21-af2e1190bd87", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35192 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2026-35193", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:92078f6a-f0e5-51b4-b656-3e1cf718c354", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35193 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:a0a35d78-bf24-58dd-9a8b-806643e26eda", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-3902 affects version 3.2.25.post12+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:81d759fb-e5f0-5c03-bc71-2992bfce31d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4277 affects version 3.2.25.post12+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:a2ba2e12-d069-594a-b279-6bb7ff63b7d6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4292 affects version 3.2.25.post12+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:a370dffc-ff57-5dc6-87e9-7da24564e818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:df857fca-3b78-59ef-89a6-6e3b4a140b1c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:828688ed-6ca3-5a8f-8586-89d98e73444a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:3b004cbe-736f-540b-bb16-7da94e3021b6", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 3.2.25.post12+tuxcare of django. not_affected \u2014 Django 3.2.25 is not affected by CVE-2026-53878. The CVE concerns `DomainNameValidator` (introduced in Django 5.x/6.x) which does not prohibit newlines in domain names. Django 3.2.25 lacks this class entirely. The existing domain validators (`_simple_domain_name_validator` in sites/models.py, `EmailValidator.validate_domain_part()` in core/validators.py) already prohibit newlines either explici...", "justification": "protected_at_runtime" } }, { "id": "CVE-2026-5766", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:234ddd27-bd89-5936-9980-9e7ddef81062", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-5766 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:101bd9ec-3130-51c6-9e1b-38f646cc35a7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2026-6907", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:88e73f01-4173-51cf-9223-eddd5e8f73f3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6907 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2026-7666", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:2304c51c-2686-5921-aa80-442c2d4b35ea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-7666 affects version 3.2.25.post12+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ], "bom-ref": "urn:uuid:1db5f08f-939b-56c4-846e-2408b7411918", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 3.2.25.post12+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@3.2.25.post12+tuxcare" } ] }