{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:ab66d3eb-ad9c-556f-a0a1-6199f8f582e7", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@3.2.25.post15+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@3.2.25.post15+tuxcare", "version": "3.2.25.post15+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@3.2.25", "type": "library", "version": "3.2.25" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2007-0404", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:cae05343-67d7-5604-883c-125a5ef0e8d8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0404 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2007-0405", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:dc960bd9-8a8e-5aaf-831c-392faa846441", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0405 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2007-5712", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:fc32c451-f25f-5918-a45c-d3aeba14294b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-5712 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2008-2302", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:f991b2d6-c214-565c-8e63-4c837be3a08f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-2302 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2008-3909", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:08d55678-10ab-5a34-9705-0f6067feed90", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-3909 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2009-2659", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:5ba7ed1e-b2cd-534c-9abb-3f29055fa43b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-2659 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2009-3695", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:e27b5915-2c3e-5e6b-b1d8-b2a83250cef8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-3695 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2010-3082", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:6c9dfc34-66e6-5fa3-bfdd-aefea112d9e8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-3082 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2010-4534", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:700ecb3f-68b1-5802-8a58-cb7266f2eb10", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4534 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2010-4535", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:05fd91d8-4b9b-5739-bd13-219b0cbcfd03", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4535 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2011-0696", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:0a94f116-57f3-55e6-8c8f-9137590c3da3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0696 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2011-0697", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:fdb6bfc7-dde4-5864-8e41-cc62ff5783aa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0697 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2011-0698", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:ce9e1001-31fd-531e-850c-b6de2957d69a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0698 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2011-4136", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:e3434562-e62d-5afd-843e-a95522a4b532", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4136 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2011-4137", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:645ad492-c1c2-5c23-9a7c-7ffcdf0fb56d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4137 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2011-4138", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:535df1af-eacd-58d9-b96b-2297de4167f8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4138 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2011-4139", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:ae197e1d-b91d-5709-921a-d113c7260477", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4139 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2011-4140", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:c67c022f-72b8-5520-bfbc-2e027c5848ab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4140 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2012-3442", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:94efffc3-083f-539a-bb9f-ddd992b20fab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3442 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2012-3443", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:fc4d14b2-3bc3-5653-8046-c70c6cc4e3ec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3443 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2012-3444", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:6bfc4651-eadd-50ba-9267-66402b4caa5e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3444 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2012-4520", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:55ec6c86-cf0f-5823-976b-a1945f6e3477", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-4520 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2013-0305", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:dd34c29b-1bc5-57b5-8e16-fed97be32445", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0305 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2013-0306", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:ae4cad42-98e8-5579-b364-3696ffffa997", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0306 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2013-1443", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:b45f2e45-ead4-55da-bed4-f1a61c26dfad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1443 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2013-1664", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:e16c96a5-3098-55bf-9af6-3d31cc2e1c15", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1664 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2013-1665", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:2275ef31-8e5c-5de2-b1b0-092bdeb1fbab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1665 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2013-4249", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:7606021e-2bc6-5fbe-81c3-a44efee187fc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4249 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2013-4315", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:6c8e98a6-8142-57cf-9139-70311a75b9c5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4315 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2013-6044", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:feed252d-0506-535a-b71f-38e4ab3ca16f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6044 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2014-0472", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:5d8a5c5b-1eb7-5598-8501-7913f2b8f3eb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0472 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2014-0473", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:0f7bea3b-c938-5cd4-81ff-21f2c3fc0950", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0473 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2014-0474", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:12a543f2-b38b-5fda-a4b7-86901a70496d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0474 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2014-0480", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:83baa244-7284-5e1c-8f5e-a131046ec1ba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0480 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2014-0481", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:10cc4187-188e-50b0-bdd4-857f2140493c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0481 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2014-0482", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:4cf1b223-313b-5d77-b54b-e22829a03215", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0482 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2014-0483", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:578750c5-53b7-58a4-8c1d-c6b3d1aada55", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0483 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2014-1418", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:ec8bae05-5a0f-538a-a340-4269f572316f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-1418 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2014-3730", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:103b44f4-4c15-5df1-a75d-1c21b3d9befe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3730 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2015-0219", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:8af49ff2-536e-598a-a282-8bed64cd907e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0219 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2015-0220", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:f3cc6998-4379-58b3-b5ab-495106ac7e1b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0220 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2015-0221", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:c3975799-5708-5593-ae13-57514c57d688", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0221 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2015-0222", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:bb1153de-e837-5903-820f-6c810600f044", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0222 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2015-2241", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:fc1047ec-6e12-5314-b3a5-5cd216b13454", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2241 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2015-2316", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:28348fff-8109-5a7a-915e-97a0927ac953", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2316 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2015-2317", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:00359709-dc4b-538e-bac6-ec289c529c6d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2317 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2015-3982", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:dd3d7e0d-35d2-5fc1-bc9a-50b3261a7afd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3982 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2015-5143", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:ad535edf-947c-52e9-99d8-56c0678a660a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5143 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2015-5144", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:c88d8dc5-2f0e-507a-98eb-b0cb2f5b847f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5144 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2015-5145", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:a99dc8b7-7d8b-5ed2-8393-ea6e08e3dee8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5145 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2015-5963", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:35509de0-8cda-5ed6-8282-bd0589563857", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5963 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2015-5964", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:4b77b670-91ec-53e4-a5ff-e4f8068debe4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5964 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2015-8213", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:a64f4cb1-54b9-596a-81ab-3ba1239f0c0d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8213 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2016-2048", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:feae522f-b651-5383-a52c-55e2705148d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2048 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2016-2512", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:88c0b32d-4e01-5c3e-b074-8a3fdd341085", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2512 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2016-2513", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:6a45bc74-6ea4-521e-8b96-cf59e845d37a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2513 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2016-6186", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:54b20eed-e284-5e1f-a13e-c4635403e00e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6186 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2016-7401", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:e36f8e83-41f0-5539-a649-d35ee0039eba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-7401 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2016-9013", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:7a3a3d59-8c01-5d09-b4ca-ff7f470359e9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9013 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2016-9014", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:553541d0-471f-59b9-b475-1e38ad276538", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9014 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2017-12794", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:d7dd103e-6911-5980-9eb7-ed942c581b0d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12794 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2017-7233", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:41b64e64-e9cd-5ae5-8d2d-cb493635eae3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7233 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2017-7234", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:e5c164e3-ef26-5270-91ff-175980e70fdc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7234 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2018-14574", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:7dfcb8d8-513b-5f49-8a2e-e7e2429ea43d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-14574 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2018-16984", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:fee1a121-90e4-5bee-a1a6-ae40c64b0f42", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-16984 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2018-6188", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:87938107-9a14-51cd-9747-ef1ab748e2cf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-6188 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2018-7536", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:4fb82e1b-dc11-5801-90b6-22065b69b06d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7536 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2018-7537", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:cc51d38e-e36a-5c46-bf6f-9a55917eacee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7537 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2019-11358", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:71bdbfca-1436-5335-b1c8-177cd3557277", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-11358 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2019-12308", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:fcbe7f73-ea99-5581-800c-ec3bbd55c23e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12308 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2019-12781", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:5f300812-49fb-54d4-a3f4-5a71e3e5164a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12781 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2019-14232", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:877dced1-d59d-5e99-ad2b-b8b2d154e0d5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14232 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2019-14233", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:3d5c518f-dcdb-5d10-b9a1-e3533228f3dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14233 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2019-14234", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:296ca3cb-60d9-545b-b73b-91ee44b55aa9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14234 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2019-14235", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:ffa25580-005f-5523-a456-93fbead5a562", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14235 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2019-19118", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:218e1fae-ae34-5cda-9aad-0b0bc2a42d3b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19118 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2019-19844", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:e81ac7bc-831c-53e9-90b1-7496b6010310", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19844 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2019-3498", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:05c12f97-4f7c-5ea0-93b7-d35b010fb049", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-3498 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2019-6975", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:4b61233c-038e-529b-895f-24b9591c4f4b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-6975 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2020-13254", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:5a02bc93-c9e8-5a05-bf06-436b9197e2ec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13254 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2020-13596", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:dabb65d5-d4a3-58c5-b683-e270b14e991e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13596 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2020-24583", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:5833627b-7069-55c5-8779-1932bbd6979d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24583 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2020-24584", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:450d3808-671d-5f15-987f-75d9bb5fbea5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24584 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2020-7471", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:1fcf2947-5111-593f-96af-10d932f03d9e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7471 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2020-9402", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:49e3d23c-1248-562e-9d8f-ee8c6e2dc4dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-9402 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2021-28658", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:5557ab14-2222-549f-b32c-33155ef54cc0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28658 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2021-31542", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:a51ca3df-ef89-55bf-8f56-6c8cdb5655bf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-31542 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2021-32052", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:f905e73c-e458-5b37-9448-c128485e553b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-32052 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2021-3281", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:d6fca62c-df89-59bc-b1d5-4c25129c3be3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3281 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2021-33203", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:f5d1be7b-94b0-5ddd-ba64-8ed70d336b0b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33203 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2021-33571", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:acde7b23-4569-57fa-bc16-8cd822fe9d7c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33571 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2021-35042", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:519e2f77-9989-5448-982f-79bc537cbb9e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-35042 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2021-44420", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:57b872d1-da64-56fd-a30e-f9462ce6cc3d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-44420 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:c702aa23-b3a2-5f9c-a264-2c54b591d005", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45115 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:3508f203-4c85-50db-ae2c-b98770134cf5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45116 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:72305f19-b894-5fdb-aaf8-afea8aeef93d", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-45452 does not affect version 3.2.25.post15+tuxcare of django. not_affected \u2014 The target (Django 3.2.25) is not affected by CVE-2021-45452. The upstream fix from Django 3.2.11 (commit 8d2f7cff76) was already present in the release that TuxCare onboarded. All three fix components are present in django/core/files/storage.py: (1) backslash normalization before path validation in get_available_name() and generate_filename(), (2) relative path enforcement via os.path.relpath(...", "justification": "code_not_present" } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:f77b0e87-7536-59d1-89e0-026cde9eef1c", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22818 does not affect version 3.2.25.post15+tuxcare of django. not_affected \u2014 The target Django 3.2.25.post12+tuxcare is NOT affected by CVE-2022-22818. The vulnerability (unescaped output in the {% debug %} template tag leading to XSS) was fixed in upstream Django 3.2.12. The target version 3.2.25 already contains the complete fix from commit 1a1e8278c4, which HTML-escapes all debug output via the escape() function. This fix was authored by upstream Django developers an...", "justification": "code_not_present" } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:474375d0-0807-5601-a50e-6816c4ba1f5f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-23833 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:d8cc93dd-dc42-5f98-bdcb-433ee98f222c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28346 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:ad021d1d-9b8e-5c65-8519-1e050ffde3d1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28347 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:985ec965-10f1-5946-bb8f-475ae288e86e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-34265 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:6072c794-7376-588f-b3c2-1f9421523c88", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36359 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:53a43d34-079a-5eb4-9741-beac1d10718f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-41323 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:3c4f7cdb-5ac2-542f-a47e-08a2c39f2357", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-23969 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:3157910e-9fdc-5879-9a7d-fdc40078c56d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-24580 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:244738d8-ba8a-51aa-b3d0-80f60eca6e19", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31047 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:5d75604c-b197-5210-90b4-554a4f0af25c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36053 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:cebc7238-b266-5641-b50c-fafb15f321b6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:9af08d9d-be03-5ca8-9591-f42a8e1d14a1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-43665 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:37031ac8-0957-5c4e-b50e-2f97d6a3f5f3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46695 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:239ebb79-8f0b-5ce2-8077-2acf909fe920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-24680 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:0eb9167e-68ca-5514-85c4-53cd2ee645bd", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-27351 does not affect version 3.2.25.post15+tuxcare of django. not_affected \u2014 CVE-2024-27351 is not present in Django 3.2.25.post12+tuxcare. The vulnerable regular expression pattern that caused catastrophic backtracking has been replaced by a secure WordsRegex class implementation. This fix was authored by upstream Django maintainer Shai Berger (shai@platonix.com) in commit 072963e4c4d0b3a7a8c5412bc0c7d27d1a9c3521 and was included in the upstream Django 3.2.25 release b...", "justification": "code_not_present" } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:6800079b-03aa-5e51-a671-73be291d6a45", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38875 affects version 3.2.25.post15+tuxcare of django, and is fixed in 3.2.25.post17+tuxcare." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:5568b559-cd5f-5248-8f61-548f6ce5d168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is already fixed in version 3.2.25.post15+tuxcare of django. CVE-2024-39329 already fixed on tuxcare-current/3.2.25 by cf29797b67 (inside the CVE-2025-13473 backport), released in 3.2.25.post14+tuxcare; authenticate timing equal for unusable-password users on post17." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:bfec117c-8ca9-556a-84ab-68f17c4b8518", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39330 affects version 3.2.25.post15+tuxcare of django, and is fixed in 3.2.25.post16+tuxcare." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:906aa522-8bef-5830-8aca-a7d8b46f570d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39614 affects version 3.2.25.post15+tuxcare of django, and is fixed in 3.2.25.post16+tuxcare." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:46c4180a-d6a2-51f0-8a44-9f37790b1d37", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-41989 does not affect version 3.2.25.post15+tuxcare of django. Django 3.2.25 floatformat() parses repr(text): str/Decimal input yields quotes, parsing fails and the value goes through float() with a bounded exponent; upstream test inputs run in 0.000s. The expensive path needs an object with a numeric __repr__, not attacker-supplied. See PYELSCVE-3148 / django!68.", "justification": "code_not_reachable" } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:328d488c-5d9b-5756-8e38-b2203116a09a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41990 affects version 3.2.25.post15+tuxcare of django, and is fixed in 3.2.25.post17+tuxcare." } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:56de0732-1ecd-5d5c-8c73-ecbda848cc39", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41991 affects version 3.2.25.post15+tuxcare of django, and is fixed in 3.2.25.post17+tuxcare." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:3818bacb-2146-5fce-a794-9de9f78833cc", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-42005 does not affect version 3.2.25.post15+tuxcare of django. Django 3.2.25: names passed to QuerySet.values()/values_list() never become SQL aliases on 3.2 (alias grouping arrived in 4.2, django 04518e310d); 11 query shapes injected 7/11 on 4.2 pre-fix and 0/11 on 3.2.25 (sqlite). See PYELSCVE-3148 / django!68.", "justification": "code_not_reachable" } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:9f71251c-e306-5f7b-ad44-2f65010fc130", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45230 affects version 3.2.25.post15+tuxcare of django, and is fixed in 3.2.25.post17+tuxcare." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:bf4bf147-d4ca-5d00-bd98-90ca64566366", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:229330b9-9db1-53f3-bc4d-ed5106d56923", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53907 affects version 3.2.25.post15+tuxcare of django, and is fixed in 3.2.25.post17+tuxcare." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:936fc58d-9a26-5826-b8d9-2f28327360ef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53908 affects version 3.2.25.post15+tuxcare of django, and is fixed in 3.2.25.post18+tuxcare." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:02a2424c-e5fa-59bd-97b8-00f98d87a6bb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-56374 affects version 3.2.25.post15+tuxcare of django, and is fixed in 3.2.25.post16+tuxcare." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:3ad7f1dc-0fe1-5aee-ae36-7c6e98e1c4bd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:08ed48d1-fa9b-513e-9db5-6b1cfbdaf800", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:402328fd-d01a-5d4b-bb3a-a313272a0d2d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:e3708c18-e3ab-5643-a42d-83d886c4257e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-26699 affects version 3.2.25.post15+tuxcare of django, and is fixed in 3.2.25.post16+tuxcare." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:6ec10e24-e77b-5f58-8d9d-77fe0d3f2292", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27556 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:6ae68749-cf18-5b12-9977-aaba0ce32cc2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32873 affects version 3.2.25.post15+tuxcare of django, and is fixed in 3.2.25.post16+tuxcare." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:698edd85-715a-534c-a7b3-fbdae038141e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:a6e56f01-ce37-561e-8b89-f7103cee299b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:335c991a-2976-5dd6-ac57-d1a773892b31", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59681 is already fixed in version 3.2.25.post15+tuxcare of django. CVE-2025-59681 already fixed on tuxcare-current/3.2.25 by ec740f90ef, released in 3.2.25.post4+tuxcare; all four of annotate/alias/aggregate/extra reject alias with '#' on 3.2.25.post17." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:c5d3b384-90c8-543a-8d35-e7576ffed31b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59682 affects version 3.2.25.post15+tuxcare of django, and is fixed in 3.2.25.post16+tuxcare." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:ed9b6af7-ca59-56c1-b549-665f3f88409b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:d77ebd5b-3fff-50ed-bd74-0a8603a4e198", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:26b44da9-0470-5673-a343-dac5d7a743ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2026-108147", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:30524181-f0cf-5b66-a070-60aa854388c6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-108147 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2026-111211", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:fd0bbea4-fbce-587d-b683-a96860c07a1a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111211 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2026-111362", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:534b4ede-3809-5e91-940c-6019d05a9bc3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111362 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2026-113593", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:13b6261b-011a-5c58-bca0-4525159c30ca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113593 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2026-113733", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:d2f748bd-57bf-5d68-aa0d-0ef72a437d0a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113733 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2026-114582", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:ca4f8026-9e70-5d38-910f-034d25193f0c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-114582 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:5c4d556d-1d76-5d9e-ae38-fd0af9ff97c6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:f3b94ebf-5bbc-583a-abbf-6a202300bfb7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:141ad88c-d8d2-5681-9cd2-0d5211f3f733", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:548293fe-a813-5ec5-91fc-44562f098f42", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:b50ed25d-2532-5296-aced-89e36e78e98c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15307 is fixed in version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:f256c3af-05bd-57c0-83f1-334d3aaf9965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15830 is fixed in version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:db71af17-6022-5dbf-819a-9d8fe650d2f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25673 is fixed in version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:f927267b-d0a2-585a-8a28-877b301d09e5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25674 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:ccb2942a-0bb1-515c-8ac8-5fc16e1a099a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33033 is fixed in version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:6da5bdfe-3466-597f-a07b-340be6bb9807", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2026-35192", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:13f28e8d-aaae-58b7-9d65-0a305bc21971", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35192 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2026-35193", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:0452e7f4-90ce-5dd8-a07f-8b91d71de1c1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35193 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:88febdfe-60de-5d30-a8b7-6c1d723dd0c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-3902 is fixed in version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:50ee5676-0925-5e9b-9c01-2073de911bd4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-4277 is fixed in version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:d4e3feda-71da-5369-a715-2b48a155eefe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-4292 is fixed in version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:f9cfcbd0-315e-5a53-98c6-e191fecfb354", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:ae5edd40-22a8-5d9e-9858-12d73f6c0e5a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:87d11fc2-b2e6-56ba-8633-b62bbc262515", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:a26b4dbb-40a8-577b-aa37-e7ae13892299", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 3.2.25.post15+tuxcare of django. not_affected \u2014 Django 3.2.25 is not affected by CVE-2026-53878. The CVE concerns `DomainNameValidator` (introduced in Django 5.x/6.x) which does not prohibit newlines in domain names. Django 3.2.25 lacks this class entirely. The existing domain validators (`_simple_domain_name_validator` in sites/models.py, `EmailValidator.validate_domain_part()` in core/validators.py) already prohibit newlines either explici...", "justification": "protected_at_runtime" } }, { "id": "CVE-2026-5766", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:c9b55ab4-1ddb-5499-a194-8b11364c6616", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-5766 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:28e32dfc-a4ea-5d97-82d9-0efcc2682be9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2026-6907", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:8e21364e-b2a0-5356-ab60-e51b0b46398a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6907 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2026-7666", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:0f5112d6-ae04-5378-b027-8dba1bfee70d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-7666 affects version 3.2.25.post15+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ], "bom-ref": "urn:uuid:bafa9e6e-28b8-546c-9644-9858cfeae744", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 3.2.25.post15+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@3.2.25.post15+tuxcare" } ] }