{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:88d5323c-6512-5953-b0ac-4e74f4eb80ad", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@3.2.25.post8+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@3.2.25.post8+tuxcare", "version": "3.2.25.post8+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@3.2.25", "type": "library", "version": "3.2.25" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2007-0404", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:c9482a42-9252-5a41-a978-0d04d51a1b4b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0404 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2007-0405", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:80dc4795-a5a0-5971-92a1-3748da35fad4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0405 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2007-5712", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:316d821f-364b-5c70-aa0e-7ed1f573e9cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-5712 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2008-2302", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:8339225c-d3e7-5022-a423-af7bbc293af2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-2302 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2008-3909", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:b8596c3d-4142-54a7-bfea-dd47599733ed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-3909 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2009-2659", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:f11d8c5e-8307-5df6-b753-b205cdf41af1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-2659 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2009-3695", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:be47a492-a31e-55b4-a64a-b9c24b8c3e9d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-3695 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2010-3082", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:e2350825-dbad-5e7f-b03c-7740f66ff3dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-3082 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2010-4534", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:f11d4111-e10b-582d-8b20-55c8778965eb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4534 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2010-4535", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:d02a3ac9-fcb8-5708-a496-d8f401783864", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4535 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2011-0696", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:0c40daff-1fc4-5039-a8cf-f1b9fb259fea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0696 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2011-0697", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:a3c8c8fa-8b07-5e27-95d6-eb0fbc0df189", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0697 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2011-0698", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:63266592-c609-550e-a22f-f6bf6a43704e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0698 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2011-4136", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:80a4dd7a-3019-5cf9-91c8-4dcd8b26222c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4136 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2011-4137", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:de86eda7-d313-5ed2-8695-35637a673d60", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4137 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2011-4138", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:8348ba69-5c61-5423-a6d7-1c965052d549", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4138 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2011-4139", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:06135db6-0eb6-58b6-a4d2-f11bf154d051", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4139 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2011-4140", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:4b771346-3d45-52e6-92df-866759e39081", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4140 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2012-3442", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:5db525a4-95d0-580d-8cd5-40880914a081", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3442 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2012-3443", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:35c17b69-3e7e-5bd0-94bc-b7aec54447b1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3443 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2012-3444", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:a43da9fb-aa9c-51bf-91e3-de50af229b9a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3444 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2012-4520", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:a466283f-33c1-5cfc-880f-e725354a41c8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-4520 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2013-0305", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:1e281d07-e958-5607-aae4-9673880df1e0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0305 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2013-0306", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:6ebf0c15-c95c-5be3-accf-fc0307180180", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0306 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2013-1443", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:6d2f1490-d3d6-54a4-86ce-86bdc2ca3509", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1443 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2013-1664", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:0174d1cc-47f5-58ab-8425-901b044ec6e7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1664 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2013-1665", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:ba433e78-d3c3-57d8-9e8c-8829ad3cf191", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1665 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2013-4249", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:25566e69-4bc3-5ed1-a3d7-208a81f58331", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4249 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2013-4315", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:d44b7cd2-9fdc-533b-8c00-0a26ed7c2670", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4315 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2013-6044", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:a0344959-98b9-51a6-b444-d56d731a7e94", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6044 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2014-0472", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:1163dd53-490c-5c64-aecb-6693733d98c2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0472 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2014-0473", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:3d532404-c157-5088-aae8-211b196e915c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0473 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2014-0474", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:06faa9e6-768a-5be0-a851-8149ba219beb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0474 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2014-0480", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:7da8b242-a299-52b1-ad6e-90a4d2d96eb9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0480 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2014-0481", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:755e292f-17e0-5c46-9965-addd7250d263", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0481 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2014-0482", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:90e7569e-714f-5f38-8dac-8f83634cbaba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0482 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2014-0483", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:efdc0501-5125-56fd-9a1e-768f90ede7d3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0483 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2014-1418", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:8e716c1c-7532-59c4-86b6-796eda0e76f5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-1418 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2014-3730", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:c5f8da2c-b254-56a0-aaac-ede5caad53ba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3730 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2015-0219", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:f183e977-569b-59fc-b384-0f4422692cdd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0219 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2015-0220", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:9742d941-f364-5bc4-935b-bc14a0f8357f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0220 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2015-0221", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:4267579e-7677-58a0-b90c-b6b10bf26530", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0221 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2015-0222", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:63661a18-50fc-5de9-8687-647767e07beb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0222 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2015-2241", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:995394a9-1eea-571a-a5ea-6f1c8935cf4f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2241 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2015-2316", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:f5cf7ee1-7244-5172-99f4-522fd4dbfcb6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2316 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2015-2317", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:65555cf4-810f-545d-8f22-546390425f32", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2317 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2015-3982", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:1cdf8383-c645-557e-b3be-bcfa0083e324", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3982 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2015-5143", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:364dd1e2-9df6-51e9-ad8b-fcbb2202b32c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5143 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2015-5144", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:f143c2fa-07f5-561f-b70e-158734a79b9e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5144 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2015-5145", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:5a489d08-085d-51c8-abbd-7ac920357c23", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5145 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2015-5963", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:17c385e9-0905-5ba1-a0a0-61c6284a19e8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5963 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2015-5964", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:b66a1882-bf66-556e-8c38-bbc659551f63", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5964 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2015-8213", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:701ffb6e-cc83-569e-a006-63337596a63e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8213 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2016-2048", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:17f0ce54-827e-55ca-b0a6-b030c8e1ffdb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2048 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2016-2512", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:606b8448-dcd1-55e2-ab1d-28310d024370", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2512 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2016-2513", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:835e845c-e558-546f-bee7-6b82cb352dcd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2513 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2016-6186", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:031738aa-ddba-5c17-a3ab-ca4b45d9e785", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6186 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2016-7401", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:b8f3a942-1ba2-5633-bbfe-f02099fc5a98", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-7401 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2016-9013", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:19f7001f-deb6-5f0b-ad1a-f94dc3205d65", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9013 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2016-9014", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:70ce7151-7cbe-573b-b9d5-f9fef2bc8d08", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9014 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2017-12794", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:0badcb7e-bb4f-5316-b039-1e3317562e3d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12794 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2017-7233", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:458a8174-bdbb-518f-ab27-9ed66fd1dba2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7233 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2017-7234", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:4e91fd92-8f1b-528d-a495-52a3412abac4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7234 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2018-14574", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:33db8f55-40e1-5583-a35a-016740e52330", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-14574 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2018-16984", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:6d12ce5f-8949-5800-831f-b6d7100d7d46", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-16984 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2018-6188", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:dae034d9-a552-50ff-9f26-019ad82867e7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-6188 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2018-7536", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:d19001a1-f020-5191-9286-0be003887acd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7536 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2018-7537", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:a7498237-f5de-5e7f-989b-3813320b36a7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7537 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2019-11358", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:c61c7fae-f8d7-59e4-a3c0-84f912f7b159", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-11358 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2019-12308", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:ae39b740-ee87-52c5-b15a-fb833135102d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12308 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2019-12781", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:93ac2e5d-0b7e-5718-a526-08fb92c40794", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12781 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2019-14232", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:5e4fcea7-2972-5a73-8014-7f7f0cf9a4c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14232 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2019-14233", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:9f31efac-fe73-5a42-b44e-c43ae43ffbcc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14233 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2019-14234", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:8d857b8c-4618-5183-8cb6-8241f1b767c5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14234 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2019-14235", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:3d3d3278-74d5-515b-a242-3b101f6508c9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14235 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2019-19118", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:e6cc13c5-219a-5a4d-a3c3-f94018c7ea23", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19118 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2019-19844", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:8ae19389-625b-5664-9449-ca576db826cb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19844 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2019-3498", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:979e80ed-b75d-5a0e-89e3-2c82eca28ac3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-3498 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2019-6975", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:b83d1253-8e21-5f3b-a595-351092c81b11", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-6975 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2020-13254", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:c45a1431-7e86-5d32-a475-c93eba5ac825", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13254 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2020-13596", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:9a4a2d8e-590c-5157-bdf0-89920e71bb5e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13596 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2020-24583", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:070507c1-2cb7-57a9-83b6-b448e6789f5f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24583 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2020-24584", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:b38ce6bd-fb0d-5444-92f9-da368b73c08b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24584 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2020-7471", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:0e6ff2e9-d93a-55d4-bc37-fb3e34d92301", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7471 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2020-9402", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:88eb8a1c-fd5d-5ee1-88ac-27f6224e09bc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-9402 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2021-28658", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:677427bb-c68e-55fa-b00d-60852f097d67", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28658 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2021-31542", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:740dafa4-afc2-588f-ad30-f319df035dc1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-31542 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2021-32052", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:066960c5-ecf3-5cab-b5aa-81da3a1ad61b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-32052 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2021-3281", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:c79861f9-f5ca-5cad-bbf7-1a10ef243ccf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3281 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2021-33203", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:af7ec9bb-ddf0-53be-9e2e-291f344a0197", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33203 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2021-33571", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:b290553f-9cf5-5245-a1e7-70d28ac00877", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33571 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2021-35042", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:98482462-c3f1-511b-afed-cea4ce0ac5c1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-35042 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2021-44420", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:d82a892b-da5b-5247-9c84-268761e73dc8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-44420 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:b4516e5d-88c6-5d0e-a876-1eb05b36adb7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45115 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:56be3243-4626-5b21-b3f1-f79de653f27e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45116 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:e2067b3c-621b-5074-8752-60cc30152797", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-45452 does not affect version 3.2.25.post8+tuxcare of django. not_affected \u2014 The target (Django 3.2.25) is not affected by CVE-2021-45452. The upstream fix from Django 3.2.11 (commit 8d2f7cff76) was already present in the release that TuxCare onboarded. All three fix components are present in django/core/files/storage.py: (1) backslash normalization before path validation in get_available_name() and generate_filename(), (2) relative path enforcement via os.path.relpath(...", "justification": "code_not_present" } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:a720a5f3-1acc-54d5-ae51-cafdabce3e92", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22818 does not affect version 3.2.25.post8+tuxcare of django. not_affected \u2014 The target Django 3.2.25.post12+tuxcare is NOT affected by CVE-2022-22818. The vulnerability (unescaped output in the {% debug %} template tag leading to XSS) was fixed in upstream Django 3.2.12. The target version 3.2.25 already contains the complete fix from commit 1a1e8278c4, which HTML-escapes all debug output via the escape() function. This fix was authored by upstream Django developers an...", "justification": "code_not_present" } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:aaf57d68-98a6-5df9-a3b3-6b1bc8ccadcf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-23833 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:80de45cb-8239-52b7-9f19-aad08883e7c8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28346 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:c0705309-2153-5c73-9690-370ee25cd5da", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28347 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:0c46b8c1-e3f6-5aa0-a8d1-3e1e5c1f9c3e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-34265 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:1c9eadc7-865f-5b20-983b-4b9b251c88cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36359 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:7d6ffa5b-0f19-5673-befc-efd86b1f2b21", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-41323 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:a348970c-ad10-5201-bdd8-09d4638ee15f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-23969 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:4db8a576-b226-5b9a-ac96-6cd0a15e9362", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-24580 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:4947faa3-89ca-5729-b3b5-036dff4d4c38", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31047 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:ef861dd5-8b7f-59b7-b6ee-3661cfd2730c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36053 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:17792020-ec59-5400-ba8a-e11baecdf141", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:e259c50c-4d61-54a7-9582-4d1ef1a03ac4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-43665 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:909a9f02-de6f-591e-bbc3-dee13d2d27db", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46695 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:9ceb37be-43f8-58c6-8a4d-1d5739127d3a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-24680 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:5ae53f5f-a2ea-5de5-a293-de33408128a3", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-27351 does not affect version 3.2.25.post8+tuxcare of django. not_affected \u2014 CVE-2024-27351 is not present in Django 3.2.25.post12+tuxcare. The vulnerable regular expression pattern that caused catastrophic backtracking has been replaced by a secure WordsRegex class implementation. This fix was authored by upstream Django maintainer Shai Berger (shai@platonix.com) in commit 072963e4c4d0b3a7a8c5412bc0c7d27d1a9c3521 and was included in the upstream Django 3.2.25 release b...", "justification": "code_not_present" } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:012a4d10-43d2-5a32-b287-6b4ae8448637", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38875 affects version 3.2.25.post8+tuxcare of django, and is fixed in 3.2.25.post17+tuxcare." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:1df5c42f-29b7-57e6-9a21-08f186f9a7e5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is already fixed in version 3.2.25.post8+tuxcare of django. CVE-2024-39329 already fixed on tuxcare-current/3.2.25 by cf29797b67 (inside the CVE-2025-13473 backport), released in 3.2.25.post14+tuxcare; authenticate timing equal for unusable-password users on post17." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:8a9f3e90-1aa0-58a4-a4ba-afc121c324f6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39330 affects version 3.2.25.post8+tuxcare of django, and is fixed in 3.2.25.post16+tuxcare." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:eed49228-f67f-5abe-bacf-494741a760b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39614 affects version 3.2.25.post8+tuxcare of django, and is fixed in 3.2.25.post16+tuxcare." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:530c5ac7-949b-59e1-8e3f-5c1af3bc0604", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-41989 does not affect version 3.2.25.post8+tuxcare of django. Django 3.2.25 floatformat() parses repr(text): str/Decimal input yields quotes, parsing fails and the value goes through float() with a bounded exponent; upstream test inputs run in 0.000s. The expensive path needs an object with a numeric __repr__, not attacker-supplied. See PYELSCVE-3148 / django!68.", "justification": "code_not_reachable" } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:700804f4-8b3d-579f-9c2a-4bca998ecc91", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41990 affects version 3.2.25.post8+tuxcare of django, and is fixed in 3.2.25.post17+tuxcare." } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:8540eeb7-4479-5845-9fed-9ff270605ba1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41991 affects version 3.2.25.post8+tuxcare of django, and is fixed in 3.2.25.post17+tuxcare." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:79756bdf-c7dc-52c7-b2b1-69652b93bc7e", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-42005 does not affect version 3.2.25.post8+tuxcare of django. Django 3.2.25: names passed to QuerySet.values()/values_list() never become SQL aliases on 3.2 (alias grouping arrived in 4.2, django 04518e310d); 11 query shapes injected 7/11 on 4.2 pre-fix and 0/11 on 3.2.25 (sqlite). See PYELSCVE-3148 / django!68.", "justification": "code_not_reachable" } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:338b2d30-9352-509a-8b9f-232b78dbcd0f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45230 affects version 3.2.25.post8+tuxcare of django, and is fixed in 3.2.25.post17+tuxcare." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:683d04bc-0e43-5c27-b248-4e167a82ba47", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:42510eff-5144-5f04-a1d8-9e59226c2f1d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53907 affects version 3.2.25.post8+tuxcare of django, and is fixed in 3.2.25.post17+tuxcare." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:d79e5176-b88b-586c-89a8-ec95c850b062", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53908 affects version 3.2.25.post8+tuxcare of django, and is fixed in 3.2.25.post18+tuxcare." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:169653ca-adaa-5997-8f99-8c5b2a4b957e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-56374 affects version 3.2.25.post8+tuxcare of django, and is fixed in 3.2.25.post16+tuxcare." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:76c9a38e-9a4c-5391-89e3-b58a62264148", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13372 affects version 3.2.25.post8+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:61438ced-b93e-5770-ade6-a99b75b48892", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13473 affects version 3.2.25.post8+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:065b643b-8226-58c4-83d1-2ce382d6275c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-14550 affects version 3.2.25.post8+tuxcare of django, and is fixed in 3.2.25.post13+tuxcare." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:f0cc3ead-ab08-5516-aff9-181e92b9b933", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-26699 affects version 3.2.25.post8+tuxcare of django, and is fixed in 3.2.25.post16+tuxcare." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:27f170d3-ed56-50e9-935b-fb5e595d9611", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27556 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:cfe06060-a578-5662-8faf-e291a6842d88", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32873 affects version 3.2.25.post8+tuxcare of django, and is fixed in 3.2.25.post16+tuxcare." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:9a07fb85-7a44-523b-adb3-14c247c777d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:4a0838db-3a04-59e9-81e1-cb92dcca36b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:2f18e0fb-de2f-579d-bbe6-c3c6c9c5effa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59681 is already fixed in version 3.2.25.post8+tuxcare of django. CVE-2025-59681 already fixed on tuxcare-current/3.2.25 by ec740f90ef, released in 3.2.25.post4+tuxcare; all four of annotate/alias/aggregate/extra reject alias with '#' on 3.2.25.post17." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:ac845bce-c03c-57f0-b0b4-3e85e11fbf47", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59682 affects version 3.2.25.post8+tuxcare of django, and is fixed in 3.2.25.post16+tuxcare." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:68635462-1fe8-591b-8938-375e0103c1d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:822f8484-d748-56a9-9c8f-d195cdf2863d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:97b2d8d4-716c-5f3b-ab5e-ceb7c634cee1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-64460 affects version 3.2.25.post8+tuxcare of django, and is fixed in 3.2.25.post13+tuxcare." } }, { "id": "CVE-2026-108147", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:0e2328c8-fb69-5097-a668-f2347928ca8f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-108147 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2026-111211", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:8d45b67a-d387-50cd-b0a0-1d396aa8577a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111211 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2026-111362", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:d159a618-29ce-5e2d-882b-5529a53d2832", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111362 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2026-113593", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:5861688b-e466-5c59-88c1-852d42e4e4b1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113593 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2026-113733", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:591bb012-dd91-532b-8104-a688c9e67fad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113733 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2026-114582", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:546e4e8f-96bd-50e2-aded-2ac56ad9a8c1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-114582 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:ec30e989-6c49-558b-a3a4-cb4d47bf53c8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1207 affects version 3.2.25.post8+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:e5b29fa1-0bbd-5d65-bad2-deced947b0b5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1285 affects version 3.2.25.post8+tuxcare of django, and is fixed in 3.2.25.post13+tuxcare." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:a9a47dac-d6ac-5ccb-89e3-678d2a8257c9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1287 affects version 3.2.25.post8+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:a5c3d2c0-5ee5-5fc2-8bf9-346d60e67043", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1312 affects version 3.2.25.post8+tuxcare of django, and is fixed in 3.2.25.post15+tuxcare." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:82301218-b3c3-5373-96fc-0488b6d02a4f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-15307 affects version 3.2.25.post8+tuxcare of django, and is fixed in 3.2.25.post9+tuxcare." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:69153e9e-a965-5491-8373-23126561b1f0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-15830 affects version 3.2.25.post8+tuxcare of django, and is fixed in 3.2.25.post9+tuxcare." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:65419029-ddf9-543c-a847-2e16e37a1528", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25673 affects version 3.2.25.post8+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:d8a71bc5-2a23-57b8-aa4d-0b4531f604fc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25674 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:85d26d4e-33df-5045-bc28-ee496334ad54", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33033 affects version 3.2.25.post8+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:e7015716-7822-50a8-b8d1-73c1c4b296f0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2026-35192", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:0ddab18c-5f0b-51ef-a7c6-e1e17f6229a0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35192 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2026-35193", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:5ec755bb-454b-5cfc-ab9d-d3b6ab25b968", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35193 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:801e63cb-0956-5486-b590-49ea8ebb0329", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-3902 affects version 3.2.25.post8+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:e6b1892d-849d-5ced-9f01-6d972dce279d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4277 affects version 3.2.25.post8+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:b4d01d30-c15c-5d20-9268-0dfe885fd6b2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4292 affects version 3.2.25.post8+tuxcare of django, and is fixed in 3.2.25.post14+tuxcare." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:c4c173ed-4219-5880-bfc0-9d4daa2addfd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48587 affects version 3.2.25.post8+tuxcare of django, and is fixed in 3.2.25.post10+tuxcare." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:c88ac170-5766-55be-a5fb-411e43148d24", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:1defdbaf-505a-5721-8fe9-48229222a155", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:44a0cd59-d927-5234-93ba-beba7f7e6473", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 3.2.25.post8+tuxcare of django. not_affected \u2014 Django 3.2.25 is not affected by CVE-2026-53878. The CVE concerns `DomainNameValidator` (introduced in Django 5.x/6.x) which does not prohibit newlines in domain names. Django 3.2.25 lacks this class entirely. The existing domain validators (`_simple_domain_name_validator` in sites/models.py, `EmailValidator.validate_domain_part()` in core/validators.py) already prohibit newlines either explici...", "justification": "protected_at_runtime" } }, { "id": "CVE-2026-5766", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:6b02e862-5e45-511b-9ca7-52248f20a8f1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-5766 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:ed90df96-0d41-5caf-8e30-8b497d3734d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2026-6907", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:4260d532-5f2e-5371-bddc-2328976d9ce2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6907 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2026-7666", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:661de243-1b35-5f5d-a3ac-b2288d62fd64", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-7666 affects version 3.2.25.post8+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ], "bom-ref": "urn:uuid:65839dc3-cfa6-56b1-b593-e411e25d4f94", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 3.2.25.post8+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@3.2.25.post8+tuxcare" } ] }