{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:6dee30c5-ff19-5481-b9c5-e07aabb2d6bc", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@4.0.post21+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@4.0.post21+tuxcare", "version": "4.0.post21+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@4.0", "type": "library", "version": "4.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2007-0404", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:5316f639-1cd2-5381-a9cb-9ea170f5b25c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0404 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2007-0405", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:4d751e39-a98a-59ad-a502-63c14d444e12", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0405 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2007-5712", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:de9250e8-998d-5670-b348-a4abc7757388", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-5712 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2008-2302", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:1e17a4c8-3002-57ba-93fe-327edbc2fbea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-2302 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2008-3909", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:996bf5f4-a1d1-58a9-9ed3-a68082f9d1b1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-3909 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2009-2659", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:56f08fb8-6fc7-5b7c-afc1-4b1ab2ec40c0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-2659 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2009-3695", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:e6926f55-0cef-5111-a213-f731ca7702ed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-3695 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2010-3082", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:a91117d3-225b-5d26-9489-e3e4132735d9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-3082 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2010-4534", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:6893cf20-fd73-5aa5-96fe-9cd8c52ad02a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4534 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2010-4535", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:0b74e8bb-c556-5f9d-b704-ed38440f77b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4535 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2011-0696", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:e4cecdaf-3355-5b3f-9669-fc104ca052ea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0696 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2011-0697", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:49331fd0-15b0-5ce1-8bfb-75338aab313e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0697 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2011-0698", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:ce1f7933-6500-53bc-a00f-0a17ae27ae3c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0698 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2011-4136", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:09b28a66-8540-5aae-a78b-5b8cb49df98a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4136 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2011-4137", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:d4c5569f-6ab2-5c0d-a57e-7d448feb44aa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4137 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2011-4138", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:a963415f-0c16-5193-8fb0-4e2c93edc8dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4138 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2011-4139", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:3bd6a4cd-63c7-5891-82ad-6bfb8f92f09e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4139 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2011-4140", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:e3429561-17d2-53ed-8b59-c2d23d300688", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4140 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2012-3442", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:2374875c-96b6-5b5a-b924-79281f7cfe5c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3442 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2012-3443", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:a6fbcc78-a062-5ae1-ab09-e491ee65be00", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3443 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2012-3444", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:cdbffc20-0883-50fa-b1f0-4c6eccb3abc5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3444 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2012-4520", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:de2c2c4f-15b4-5623-b7ed-9e9c64ec1308", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-4520 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2013-0305", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:cda00877-de26-50b9-84da-25a072da98ac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0305 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2013-0306", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:0746217e-b20d-53ab-a5a2-97f84725387d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0306 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2013-1443", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:fb327f07-147d-5151-adb2-8d9ff29ec0f4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1443 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2013-1664", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:b5dec75b-a297-5b68-90d4-c0494b484452", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1664 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2013-1665", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:3405c940-b910-5fc5-a49d-eb1c87a48e1b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1665 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2013-4249", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:2773acf4-c51c-5571-8aa0-315a702bdc34", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4249 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2013-4315", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:b53c9bc1-43ac-5cbc-963b-645bf48634d1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4315 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2013-6044", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:664f8daa-ff7b-5261-a1a2-410a43c4d7c5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6044 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2014-0472", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:7abda298-5485-520f-9f7f-e0b3af4965e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0472 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2014-0473", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:5a7a32b7-cc6b-5970-8c99-37bd24d6cf87", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0473 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2014-0474", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:74bde9b0-def4-59cb-b1d9-7458277b1ee5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0474 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2014-0480", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:f2caf0bc-08d7-57d7-9b87-2f27fb8048cb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0480 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2014-0481", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:316e3e3a-c7ff-5bcd-ae36-52c27c06fa99", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0481 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2014-0482", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:07643194-f42f-5808-8fc5-8ba72e2ae4d8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0482 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2014-0483", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:70fbd687-2e28-5c54-9afd-3dbe588c2f44", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0483 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2014-1418", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:079ea2d7-c6e6-5e3f-94c9-c102013874dc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-1418 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2014-3730", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:b3d52ac0-8c3c-5662-a9aa-5f8befcb5c19", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3730 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2015-0219", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:ea9a4804-548a-5c44-8eba-a2bd3f721673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0219 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2015-0220", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:d1d23f90-acb4-5350-bc29-2eb8ce8a29a6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0220 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2015-0221", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:960826ed-3e12-5931-b2d0-422609e68aef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0221 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2015-0222", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:4142a33e-0dc1-592e-962c-012d7c6d50d2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0222 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2015-2241", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:738a6bcd-738b-5f9f-9e89-0261a09664a6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2241 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2015-2316", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:dfa9fa0f-789a-5fe8-b85f-9a4567c78217", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2316 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2015-2317", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:d8341822-49a1-564f-a584-02d7f34a6734", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2317 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2015-3982", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:39787705-7359-5441-96e9-8ae41b2266ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3982 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2015-5143", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:589c634f-0429-5fb5-b368-1b99db352d87", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5143 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2015-5144", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:da915a1c-ee14-5eb6-ae85-082025487bef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5144 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2015-5145", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:caac67c3-2dc0-55b7-a1ff-4faf3931587f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5145 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2015-5963", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:0aa3c856-64c4-5d25-8739-95847b247cbe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5963 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2015-5964", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:570bdba1-5fc5-519a-aaec-66a1db8b55b5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5964 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2015-8213", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:0cc93b50-bd4a-5be2-8660-df2a7576818d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8213 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2016-2048", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:2c43b679-de31-5949-bf77-0e66c3bbb33b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2048 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2016-2512", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:6a3a6f2a-4a82-58db-a81f-9ccd33870949", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2512 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2016-2513", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:8579f9b7-65d5-5b4a-b7e2-40a68efc2607", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2513 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2016-6186", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:1e263af7-8bcc-5cce-ba53-042415faf1b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6186 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2016-7401", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:996cf912-704a-532d-a233-0219f51173c5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-7401 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2016-9013", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:8a55ee10-cbc9-5bff-a297-24f31a66567b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9013 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2016-9014", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:6d778d0f-593e-5a7d-80d9-4b38a0d89ce0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9014 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2017-12794", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:79d01668-ef0e-5eed-bc5d-fac7203a767d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12794 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2017-7233", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:67450cf5-aada-5c9d-a982-f638d17ded7f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7233 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2017-7234", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:9d05079c-1402-5c72-b65c-b1962d8baa10", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7234 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2018-14574", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:1371dcb1-15ce-51b7-aa90-26a0978ee67a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-14574 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2018-16984", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:eee64457-26b8-5122-a6b2-a910cc24dd88", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-16984 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2018-6188", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:5d5c7c48-1df2-5b2b-906a-2445edb277ed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-6188 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2018-7536", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:1392a24d-9f5e-5e5b-aab4-0e4c8e335ef1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7536 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2018-7537", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:c5d75a7f-c670-5d9d-b3c1-f82d3ef8fe50", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7537 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2019-11358", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:2eff97c6-2e0b-5cda-9410-5b4a857b2ee9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-11358 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2019-12308", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:04a43997-b135-56f8-8ff6-6a1b427e055c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12308 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2019-12781", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:bdc7f9e8-942c-5406-9dad-f56a7172e7f4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12781 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2019-14232", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:2c370d06-fbd5-5b07-90cd-4fbc2f64a715", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14232 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2019-14233", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:d673c884-66f0-5ef9-8a00-096b3fea1e41", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14233 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2019-14234", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:6e4dc3be-5a72-5c80-b750-9ea898d2e9e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14234 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2019-14235", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:e905aaee-b44f-520d-9255-d4c590f99969", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14235 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2019-19118", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:422697b0-83de-52ce-aada-451d9fd09455", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19118 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2019-19844", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:d413ed6c-9bab-5b49-8b54-aac3b7807f5a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19844 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2019-3498", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:ca42d806-87b4-5845-8983-56b872494457", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-3498 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2019-6975", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:ad6dc684-f5a0-5c09-a81c-9ecfd6876367", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-6975 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2020-13254", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:0d5d0981-c265-5114-adb9-5660b1922a90", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13254 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2020-13596", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:5551b93a-f85e-5a31-94be-ea20de9e903b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13596 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2020-24583", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:d9ebabb0-053f-5ab2-980f-90d1d215c760", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24583 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2020-24584", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:241dda3e-2f86-510a-b05d-518cdd781dd1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24584 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2020-7471", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:9eaad534-2cf9-5291-9406-5c37ea5957ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7471 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2020-9402", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:a03f2a7e-8dda-549d-9f0b-fa4718654559", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-9402 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2021-28658", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:013593a9-e912-5dd9-b16b-12a03750757d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28658 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2021-31542", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:43f45360-f693-505c-b21d-5233a99c2fcc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-31542 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2021-32052", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:a0a7ce43-3143-5bee-9574-7d2f24963d8a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-32052 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2021-3281", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:0446526b-a8f5-51f8-9ce3-ebcbaf0d38b8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3281 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2021-33203", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:b0651cee-0496-5c68-8537-5c68cc8f8cc8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33203 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2021-33571", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:63c068d9-351a-5dd9-8aee-20390b1bd15d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33571 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2021-35042", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:74aa4227-bd0f-579d-96d7-081446ddd80f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-35042 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2021-44420", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:1186b669-11f1-506d-bfd1-83e3848f0d68", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-44420 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:ff4c46e9-e656-5d08-9845-c64971108ae0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45115 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:716969d5-0d80-5f69-a589-fab4a279bb67", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45116 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:1b1f9c83-68e7-5aa2-b633-09c116ae926b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45452 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:88875be6-30ab-5745-8039-615531c21e30", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22818 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:d733d6c8-fb94-59bd-a873-7677472d748a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-23833 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:8c79f943-3356-533e-be62-491e34049b81", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28346 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:4a653085-151b-5cd9-8528-8ee6d0db9488", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28347 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:ceda23ee-8d30-5c65-90f9-9cfa1da57895", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-34265 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:e312c0ae-e505-59f5-a366-693a0980beb9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-36359 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:a1567856-4a11-540a-a2b5-b086d0162774", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41323 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:2328db3a-c04b-5858-adf3-64ce49f4dbc9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-23969 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:9f7d4c07-abd0-56e1-bdea-5880c1e949bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-24580 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:cc9c8d49-c8cd-5fbf-9251-9745a666448d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-31047 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:cac1550c-f67d-58ba-9f3d-3419db7d1a56", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-36053 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:3944605a-92fc-552f-ac97-2c82844a9d6c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 4.0.post21+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:b43c80ac-e734-5d31-9260-d0a87297b6e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-43665 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:94322b33-c1ac-5651-b9c1-018c41a4fff6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-46695 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:803c1733-b6a2-5576-b9ba-fbeddc1ec0bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24680 is already fixed in version 4.0.post21+tuxcare of django. Already fixed on tuxcare-current/4.0 by bot commit b68a12db02 and released in 4.0.post27+tuxcare (verified by code reading, see PYELSCVE-3147)." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:9312eb2d-3711-51d8-8f0e-5d9096a5177e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-27351 affects version 4.0.post21+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:d3a3e5bd-e22d-5c6c-a905-28a4adc37f5c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38875 affects version 4.0.post21+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:ac4147b6-edb6-56db-aea5-7f82070ea8db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is already fixed in version 4.0.post21+tuxcare of django. CVE-2024-39329 already fixed on tuxcare-current/4.0 by 7a1768c267 (inside the CVE-2025-13473 backport), released in 4.0.post18+tuxcare; timing difference present on post17, gone on post27." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:36bc6a43-c36e-5b11-8985-1d4589ed13dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39330 affects version 4.0.post21+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:f2659a4c-f388-5f93-a30d-224d6af94d42", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is already fixed in version 4.0.post21+tuxcare of django. Already fixed on tuxcare-current/4.0 by bot commit b68a12db02 and released in 4.0.post27+tuxcare (verified by code reading, see PYELSCVE-3147)." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:afa6e672-7f26-5b0b-875e-3455744e73a8", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-41989 does not affect version 4.0.post21+tuxcare of django. Django 4.0 floatformat() turns string input into float(), a huge exponent becomes inf and the expensive Decimal path is not reached with attacker-supplied input. See PYELSCVE-3147 / django!67.", "justification": "code_not_reachable" } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:2912f12d-cbcd-5882-a1ab-e761cab186a7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41990 affects version 4.0.post21+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:0d162378-cc62-5c32-88f3-1844bae294cb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41991 affects version 4.0.post21+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:06345a08-7b9f-5947-8eb1-c1ffe15ada1d", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-42005 does not affect version 4.0.post21+tuxcare of django. Django 4.0: names passed to QuerySet.values()/values_list() never become SQL aliases on 4.0 (alias grouping arrived in 4.2, django 04518e310d); 8 query shapes: 3 injected on 4.2.14, 0 on 4.0.post27. See PYELSCVE-3147 / django!67.", "justification": "code_not_reachable" } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:be5ff160-4d9a-5a4d-914c-9de9e6adb69c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45230 affects version 4.0.post21+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:04306230-6ded-5bb7-88e9-b0549aa1ba85", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:f7c4819b-4810-5c71-b13f-9bcba6bc40af", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53907 affects version 4.0.post21+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:2e5f74a5-d59f-5673-9e2b-b3e33e5c7986", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53908 affects version 4.0.post21+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:72fe3a54-d336-5338-8c1a-e81f7156e480", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-56374 affects version 4.0.post21+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:9b1c8a31-4a09-5693-9d07-a02f4c0f4862", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:d4aa596f-ea3a-5727-bf8a-bd33e43039f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:6f97e209-32e0-596b-8d8d-0506081aafff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:f94e11ee-55a5-5d22-a7a6-0debcf8e50a7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-26699 affects version 4.0.post21+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:fa6a20f2-dd98-5f65-8b52-db03b6e37ec0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27556 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:57b2141c-920b-58e7-873d-672e9831ae84", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32873 affects version 4.0.post21+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:6965cb23-f91a-582a-80e9-13ad54e2c1d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:709199eb-fb2e-516c-9c85-a04d2a09ca26", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:a67c9225-37ef-59b0-b0a6-dc29c1d8d760", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59681 is already fixed in version 4.0.post21+tuxcare of django. CVE-2025-59681 already fixed on tuxcare-current/4.0 by fe5f66c68a, released in 4.0.post17+tuxcare; 4.0.post16 accepts 'injected_name#', post17/post27 reject it." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:f1d3aa4e-72d3-5e34-996b-ae3567aad361", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59682 affects version 4.0.post21+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:35e2780c-7897-5548-a6da-9f9fd0077ae7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:51ceef9c-a3c5-54f5-8fe0-7d549390c82b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:a4991b08-c491-5a6a-b2da-a8043dc3ce06", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-108147", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:84f40f0f-0b32-5bf6-9ef5-99f5a7f7adf6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-108147 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-111211", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:6123dc69-200c-5934-8a87-0b2851046d9e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111211 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-111362", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:dd32fe50-4ade-5f00-858d-380a15bacd79", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111362 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-113593", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:248f531e-bf94-54a2-adfb-89267cdd1025", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113593 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-113733", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:913335f4-b7d4-5ab7-88ed-8b3ece98243c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113733 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-114582", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:011ed3bf-d855-5a30-ac95-c296a99c39ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-114582 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:2a32bf69-2c2a-5c14-99a5-7e88bc5f380b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:4fc15bf4-d8b4-530c-801c-45726760ebaa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:0f4915c5-a162-5198-bbd9-08c384b0e068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:056c9377-d5a1-503d-bd05-aaba3c55360d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:a8a51d14-5af2-51c2-9c2b-bfabb5781d2d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-15307 affects version 4.0.post21+tuxcare of django, and is fixed in 4.0.post23+tuxcare." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:e1a7e4c8-35cf-5bb4-a068-f883fcc42281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-15830 affects version 4.0.post21+tuxcare of django, and is fixed in 4.0.post23+tuxcare." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:70e23938-8ead-5fd8-9177-3afef74f304a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25673 affects version 4.0.post21+tuxcare of django, and is fixed in 4.0.post26+tuxcare." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:5947804b-32b3-541c-a108-f700553ae1e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25674 affects version 4.0.post21+tuxcare of django, and is fixed in 4.0.post26+tuxcare." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:85f35cb0-be39-51b6-bc66-b9fbad530088", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33033 affects version 4.0.post21+tuxcare of django, and is fixed in 4.0.post26+tuxcare." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:7722721c-9046-599f-9eb7-2192a5c43069", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-35192", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:0b5f4ff8-774f-5fb3-9f5a-acdb7d9184a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35192 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-35193", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:af15494e-7554-50e2-abec-bd085a1566f9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35193 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:1856bb47-1352-524d-b0f3-86d8dba2b4cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-3902 affects version 4.0.post21+tuxcare of django, and is fixed in 4.0.post26+tuxcare." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:5dcf9a86-0fbd-5b4d-823c-d8be27f6a76e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4277 affects version 4.0.post21+tuxcare of django, and is fixed in 4.0.post26+tuxcare." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:0ac427a5-7cf2-5b39-a490-ba55845255ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4292 affects version 4.0.post21+tuxcare of django, and is fixed in 4.0.post26+tuxcare." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:a1060525-f4f7-55fe-8c5d-90561a32d2d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:a67aaf27-ba70-50fd-bd72-04f766db0407", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:0047e92b-e3e1-58bd-8092-800788fca051", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53877 affects version 4.0.post21+tuxcare of django, and is fixed in 4.0.post22+tuxcare." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:0b67a8fd-a935-5854-bb22-1b5001bbdcf9", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 4.0.post21+tuxcare of django. not_affected \u2014 Django 4.0 is not affected by CVE-2026-53878. The vulnerable component DomainNameValidator does not exist in this version (it was introduced in Django 5.1). All domain validation in Django 4.0 is performed by EmailValidator, URLValidator, and _simple_domain_name_validator, which properly reject domain names containing newline characters through various mechanisms (regex anchors, explicit unsafe...", "justification": "protected_at_runtime" } }, { "id": "CVE-2026-5766", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:52c9ed0c-4a86-5648-980e-201a335c9525", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-5766 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:5a68dfdd-7697-5e76-b494-fb8e5a44f405", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6873 affects version 4.0.post21+tuxcare of django, and is fixed in 4.0.post22+tuxcare." } }, { "id": "CVE-2026-6907", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:19da47ec-35cc-5c62-a0f7-7cc86fb700e3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6907 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-7666", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:58d526a0-e17c-5b9f-9e77-9cd94bd9c0c6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-7666 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:2add7bc0-98b8-5dbc-89de-8d71d33e14f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 4.0.post21+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ] }