{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:3507ec12-fcdb-5ffe-b25e-5f0b55f4b5b5", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@4.0.post22+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@4.0.post22+tuxcare", "version": "4.0.post22+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@4.0", "type": "library", "version": "4.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2007-0404", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:512d44e5-a13e-5de7-a51a-0476e32d8197", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0404 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2007-0405", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:83f1f646-ec71-5d58-8967-a838321e42b2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0405 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2007-5712", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:8f259a7d-61f9-565b-b48d-a121d25a5c10", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-5712 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2008-2302", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:5d018049-1f49-562b-8dd7-6e2d2b57f274", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-2302 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2008-3909", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:ebba4055-eb45-5aa5-aa73-a541ba2a1d2b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-3909 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2009-2659", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:3cac5aa9-c33c-5e76-98cf-d7a16dc55a6b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-2659 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2009-3695", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:53945530-eb14-5886-aec6-84f52e7919fe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-3695 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2010-3082", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:25bdccb1-d49a-5751-8b92-333a38b2430a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-3082 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2010-4534", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:c52ab4a2-15d4-52cd-86b6-e05336cb1696", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4534 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2010-4535", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:d2e2dfb9-f7e9-585f-8cd8-4fa177f66371", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4535 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2011-0696", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:f03d0ac7-a961-5f00-a057-7d474fa01f3d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0696 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2011-0697", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:fa973388-9566-5824-816f-7130078b9252", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0697 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2011-0698", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:6a92e07a-44be-5187-baa6-7bdf4f8bb9a2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0698 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2011-4136", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:68ef3c19-e124-52db-97ba-f73a9fb9bdc9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4136 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2011-4137", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:d3900044-1c67-58f4-88af-a5860f034782", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4137 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2011-4138", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:f1e9c163-c7c3-5ce2-b158-53cd2fd562e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4138 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2011-4139", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:5dcff50a-dbac-586b-9ec8-55d3a862b072", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4139 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2011-4140", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:01cc17db-6fc9-5ab1-88b5-486952df319b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4140 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2012-3442", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:c4be6b44-fdc8-599b-822c-2bc49741e99f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3442 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2012-3443", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:a9543211-81ed-5bc8-a17c-4e5015e26251", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3443 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2012-3444", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:6edd141d-acc5-59a9-9bb0-a10f161d9a8b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3444 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2012-4520", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:c13e51f1-23ad-5061-ab71-a13ae99fc789", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-4520 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2013-0305", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:c3b1cb20-9965-5e2f-9c3e-2054a046a0b0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0305 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2013-0306", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:ec004bc5-86d3-59dc-8f2d-9d559d57211f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0306 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2013-1443", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:f43c0539-ca1f-5a1f-8a34-a17bc378e736", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1443 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2013-1664", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:ecdd42cc-0cd1-5c3a-ae10-5a7bda09fee4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1664 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2013-1665", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:5b607772-fb12-5835-b515-c1a1068653ae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1665 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2013-4249", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:ed21f53c-17fb-54da-8678-710aa14be1ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4249 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2013-4315", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:c9985a60-965b-5df0-a7b2-6434fed90741", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4315 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2013-6044", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:d5946710-76e0-52da-a84f-0e08a171d50d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6044 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2014-0472", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:80802336-a460-5e39-8a4d-941f7fbd6ba4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0472 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2014-0473", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:610b92fe-08b0-53d8-817f-f8e085e497eb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0473 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2014-0474", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:b0a1617b-c583-57ea-a742-881a435067eb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0474 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2014-0480", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:becfffde-fe6b-5f7f-99c0-e88c915e28c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0480 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2014-0481", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:d18b01fe-df86-580c-bf0c-61e865cd4583", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0481 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2014-0482", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:170547af-3593-5c16-9d72-ca6ca8c7d44f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0482 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2014-0483", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:bdcfb560-48fc-5016-8a00-fe34783129d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0483 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2014-1418", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:e1e17e32-752b-5dcf-af6c-a5d1f3e884a2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-1418 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2014-3730", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:ff5a3bc2-1f2b-5649-8b9f-e3b4f3654e94", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3730 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2015-0219", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:39794845-f489-5856-9bd7-c5b175cc79fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0219 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2015-0220", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:156209c6-fe6b-5f27-aba1-3431a6459894", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0220 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2015-0221", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:35ebd3c6-d175-50c6-b050-9ce4544a7497", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0221 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2015-0222", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:c299c5e4-4b8f-5d2e-8a0a-6417b7476837", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0222 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2015-2241", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:de79487d-547b-5388-9e07-e0212950e66b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2241 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2015-2316", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:69a61926-e6ed-5bb8-9bbf-3872aaab7bb1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2316 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2015-2317", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:4a322106-4de2-512e-a436-9ade5a61584e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2317 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2015-3982", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:bf56eb5c-9761-5774-becf-f9aacd981119", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3982 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2015-5143", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:a25107cb-9107-5516-904c-a534041e752f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5143 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2015-5144", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:bd1dc313-a281-58af-830e-526d7bbb5f88", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5144 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2015-5145", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:afc9c6a1-0023-57cf-9205-3d5bc9a47159", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5145 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2015-5963", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:902f3c47-a2b2-5e06-ada7-f3ce2037cd83", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5963 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2015-5964", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:7e5582ac-cee9-5c4f-9e74-f2936a11cadd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5964 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2015-8213", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:86d079ed-5586-5e86-8d7e-9162cb63688f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8213 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2016-2048", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:0848bcb4-2a13-547b-a5b1-1101187597db", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2048 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2016-2512", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:47439c75-a55d-5575-9a77-8e7e0d9cf72a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2512 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2016-2513", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:db192591-ea21-5954-abb5-bf8a46f23f51", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2513 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2016-6186", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:6f4a2347-9bf9-56fd-93c8-52a0e9c64826", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6186 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2016-7401", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:3ed1fb85-45cc-5934-9b44-163dc129bc94", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-7401 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2016-9013", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:8d8f2958-5394-5870-8856-6e02c00d55fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9013 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2016-9014", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:05584143-35a6-5ab0-89cf-5a48f13da373", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9014 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2017-12794", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:da56476d-ddf0-5816-bddc-43b0a7090e33", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12794 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2017-7233", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:60d2a3d7-2a42-5dc2-a98e-422a013518ca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7233 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2017-7234", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:3c630f78-8aed-5664-807c-92cb4c8c4fba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7234 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2018-14574", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:497f01ff-83d3-5db6-85ff-77ff80357ec6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-14574 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2018-16984", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:ed98a362-e47a-5b29-9441-49fe87a9d254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-16984 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2018-6188", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:0fd5c8a1-55b5-59d1-b1c5-54fbf0cd589e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-6188 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2018-7536", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:76501d57-7cd5-5ff7-960c-f0d87c9e3c60", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7536 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2018-7537", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:13254e31-53c5-5b31-b287-22e056372a98", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7537 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2019-11358", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:d0c8e60e-40c6-539f-bdd6-263da0402904", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-11358 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2019-12308", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:d181e80c-749f-5009-9343-1d8c8a72baba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12308 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2019-12781", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:7f0c7729-2661-5b9f-94a8-d8968b525551", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12781 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2019-14232", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:2da377b7-9faf-5bf0-9927-990dc74bc894", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14232 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2019-14233", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:11e12f86-3c1c-5509-a048-f6f7f7a9d068", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14233 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2019-14234", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:53af7a61-ceea-5b03-983b-0769a6db43dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14234 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2019-14235", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:efe1ee2e-39b5-5df5-a1a9-faa6d0bb7581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14235 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2019-19118", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:21cf5a33-994a-5578-b229-a24269962ae3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19118 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2019-19844", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:bfed2773-a695-5bc2-a383-3edbcaa2ad57", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19844 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2019-3498", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:508303f2-4fac-5e52-bea9-235ed81ac49d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-3498 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2019-6975", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:1f3d973c-7811-5b36-91e8-4e271a897213", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-6975 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2020-13254", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:69d1f694-52a6-508b-b78b-112ccd8d43a3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13254 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2020-13596", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:e34617ec-faff-5115-9459-9a7c3fc10b49", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13596 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2020-24583", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:d03f25c8-d381-5f12-a2d2-e2cd6e5fee7e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24583 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2020-24584", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:ecb18c95-63c6-5247-bb2c-a5f7cd17532d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24584 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2020-7471", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:79853351-d986-51da-aaac-6d4374b8ba0b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7471 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2020-9402", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:2bd61074-40e3-5d78-bc99-e4ed42411505", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-9402 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2021-28658", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:f6bed311-7acc-5326-93e3-fd3a569df913", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28658 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2021-31542", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:56bfe3bd-b5cf-5220-9261-9103b2bdf5b8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-31542 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2021-32052", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:23096466-fa34-5079-80f2-4e6d310376dc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-32052 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2021-3281", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:c811e6f1-b3ee-5edf-a620-864bfff99308", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3281 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2021-33203", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:a337f3ee-fb29-574e-88d0-e0a0c4897265", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33203 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2021-33571", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:4c33253b-f83e-510e-82af-daef70bfdb3f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33571 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2021-35042", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:da3edbb7-858d-5b26-8868-5142614cb440", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-35042 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2021-44420", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:e85e21d1-676b-56cd-b73c-5fb2348f6e9f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-44420 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:37249fb3-89f4-58bb-bacf-ff27c2b3ecfd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45115 is fixed in version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:b62a15ae-d29f-5add-95bb-a843fa8f98d7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45116 is fixed in version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:42dec791-52cb-5d9f-8fc2-b95942644ca4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45452 is fixed in version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:c1e10d7a-ce74-54b3-becb-566d1fe1cd75", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22818 is fixed in version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:fa3bffd0-2e28-59f0-9904-3d398e2770c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-23833 is fixed in version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:03975810-a3e9-59d6-b290-eabc2a8dcd1d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28346 is fixed in version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:5cdb146f-aa64-5c13-ac72-8de1a1e3a89d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28347 is fixed in version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:c1685d60-5fc3-594f-8098-2a59ffa1f75a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-34265 is fixed in version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:c0beb006-ed26-59ed-98e7-95f24a8664e8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-36359 is fixed in version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:3d30dd6d-bfef-5808-87b8-701634f4b03b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41323 is fixed in version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:c70d837b-3abc-5b33-9166-16de8b07a5f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-23969 is fixed in version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:06304519-db25-5daf-b786-8fd5c8d097ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-24580 is fixed in version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:adb8e5b9-362e-54af-b2f2-81c403f602dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-31047 is fixed in version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:b47ebb77-a5fe-5d91-aba8-7cc8649d9efe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-36053 is fixed in version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:807a97a0-d1c8-5a5f-a5af-e22b9ec62e6b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 4.0.post22+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:ad354550-360c-5d3f-a89e-533875cf1030", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-43665 is fixed in version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:030221a5-b3a8-5fc2-82c2-77d7016a4c71", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-46695 is fixed in version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:7b8c5864-b9bd-5f66-8a1f-516b1957649e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24680 is already fixed in version 4.0.post22+tuxcare of django. Already fixed on tuxcare-current/4.0 by bot commit b68a12db02 and released in 4.0.post27+tuxcare (verified by code reading, see PYELSCVE-3147)." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:d0b6a8f0-61ec-57cc-a0cf-e9890824d1c8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-27351 affects version 4.0.post22+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:230c6088-55df-5c72-bd01-dcc34924f6dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38875 affects version 4.0.post22+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:66d2b64e-b98e-5a53-a337-d56fe1bbef2d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is already fixed in version 4.0.post22+tuxcare of django. CVE-2024-39329 already fixed on tuxcare-current/4.0 by 7a1768c267 (inside the CVE-2025-13473 backport), released in 4.0.post18+tuxcare; timing difference present on post17, gone on post27." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:dbac9fb6-e9bf-58e4-a73e-7ea36e502310", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39330 affects version 4.0.post22+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:b07dbbf8-08a0-5ca5-a91f-6c85050acb5c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is already fixed in version 4.0.post22+tuxcare of django. Already fixed on tuxcare-current/4.0 by bot commit b68a12db02 and released in 4.0.post27+tuxcare (verified by code reading, see PYELSCVE-3147)." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:e60c3f2d-9268-5287-8058-aaca6fda74c0", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-41989 does not affect version 4.0.post22+tuxcare of django. Django 4.0 floatformat() turns string input into float(), a huge exponent becomes inf and the expensive Decimal path is not reached with attacker-supplied input. See PYELSCVE-3147 / django!67.", "justification": "code_not_reachable" } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:1220c868-078e-5812-bb2c-455e6e3963cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41990 affects version 4.0.post22+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:11d2cd5a-18d6-5923-9b14-da5a4ff3c775", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41991 affects version 4.0.post22+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:8cfaf2e3-225f-5ada-b338-f9df6c8c8ec3", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-42005 does not affect version 4.0.post22+tuxcare of django. Django 4.0: names passed to QuerySet.values()/values_list() never become SQL aliases on 4.0 (alias grouping arrived in 4.2, django 04518e310d); 8 query shapes: 3 injected on 4.2.14, 0 on 4.0.post27. See PYELSCVE-3147 / django!67.", "justification": "code_not_reachable" } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:4b8b070b-407f-5f3d-9f4d-61a9111deb82", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45230 affects version 4.0.post22+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:b76c75bb-256d-5690-a033-259c57d2d916", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:c063b0dd-6b5a-5a13-9949-a452e4121c3b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53907 affects version 4.0.post22+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:d464c362-0f23-556c-bcff-ab62cad0d031", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53908 affects version 4.0.post22+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:a46ad801-b770-51e9-b3f8-043618e394dc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-56374 affects version 4.0.post22+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:580f6cba-d9f7-513c-b887-151d1518b4c6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:a4a6dd41-f11b-59dd-a46d-b5352c7c2537", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:a53bcdc8-e40f-5f79-a0a5-3585208e9bce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:fa3f039d-bc96-59fb-a278-0793cb295c52", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-26699 affects version 4.0.post22+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:8330dbaf-ed62-5d81-8253-345701eb64a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27556 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:c75188cb-8daa-566e-8fc4-813e4178024a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32873 affects version 4.0.post22+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:a3b39e38-4f52-535c-8a4c-eb22332c68bd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:047144c1-4f9c-5315-8527-16573a909933", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:d70cea9e-7796-58f1-a7ef-d854592aedf6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59681 is already fixed in version 4.0.post22+tuxcare of django. CVE-2025-59681 already fixed on tuxcare-current/4.0 by fe5f66c68a, released in 4.0.post17+tuxcare; 4.0.post16 accepts 'injected_name#', post17/post27 reject it." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:7dffb365-8911-5641-90be-852c55b15f6c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59682 affects version 4.0.post22+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:8a1056b9-7a60-5372-92fa-e0b78b5830ba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:4b8b9eab-c1e6-554b-a734-6ab1592b3414", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:8fbeb865-0898-597f-8c96-8e9d49871a6f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2026-108147", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:faf11511-4165-5f11-bbf4-c34dc77bd67a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-108147 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2026-111211", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:b589f242-205a-51b7-bb46-3080f9a83927", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111211 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2026-111362", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:e392088f-eec4-535a-aa15-79ca78626a3b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111362 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2026-113593", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:118dd43d-a166-5647-9365-135aec14dc1f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113593 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2026-113733", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:e2e2e7b4-7695-5366-84db-8637abd5e8e9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113733 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2026-114582", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:d0ab3ee1-4e93-558b-a074-d31397aa1293", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-114582 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:0cdbb057-8081-5299-bc40-aa8c54550cb8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:d2364629-d34b-5d1f-9f0a-b6102ad72064", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:9bebc610-6cfb-536e-aeae-76b904333703", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:de4dab85-c017-5bf9-9713-602397cbc2d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:b4ebff2e-3d7c-5ebf-bd7b-117ed37047de", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-15307 affects version 4.0.post22+tuxcare of django, and is fixed in 4.0.post23+tuxcare." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:e47eb130-654c-599e-8971-5a946fff3d58", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-15830 affects version 4.0.post22+tuxcare of django, and is fixed in 4.0.post23+tuxcare." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:bf590cd4-2f52-5f0c-a8a4-9f55486b2fec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25673 affects version 4.0.post22+tuxcare of django, and is fixed in 4.0.post26+tuxcare." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:0b666a84-bf4b-5958-a9de-bfd025001ebf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25674 affects version 4.0.post22+tuxcare of django, and is fixed in 4.0.post26+tuxcare." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:417a01bf-cf0d-535f-83d7-ea994907a3c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33033 affects version 4.0.post22+tuxcare of django, and is fixed in 4.0.post26+tuxcare." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:efe524a2-9659-5eff-a412-73820d6b909a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2026-35192", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:9dd4791e-7ec1-50f5-8c5c-c12a17cb9f9d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35192 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2026-35193", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:452ad878-a19e-53a2-b723-038ed1709c7f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35193 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:dbc03ab6-88b5-5e85-bc4e-850f38fc2abb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-3902 affects version 4.0.post22+tuxcare of django, and is fixed in 4.0.post26+tuxcare." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:55e6181f-2f65-525d-9544-e8272312c2fd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4277 affects version 4.0.post22+tuxcare of django, and is fixed in 4.0.post26+tuxcare." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:9da1bd4d-930c-5a2f-9fa5-5d3694ada085", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4292 affects version 4.0.post22+tuxcare of django, and is fixed in 4.0.post26+tuxcare." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:d615bd2a-d616-5bbf-bef1-a49b9f522e1e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:0516c29a-7f6e-59e1-b32e-7acd10d32b75", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:ec549636-c7ab-578f-9512-4900cb6221fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:10837297-984f-5eae-aefb-7d5d1d10ee97", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 4.0.post22+tuxcare of django. not_affected \u2014 Django 4.0 is not affected by CVE-2026-53878. The vulnerable component DomainNameValidator does not exist in this version (it was introduced in Django 5.1). All domain validation in Django 4.0 is performed by EmailValidator, URLValidator, and _simple_domain_name_validator, which properly reject domain names containing newline characters through various mechanisms (regex anchors, explicit unsafe...", "justification": "protected_at_runtime" } }, { "id": "CVE-2026-5766", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:83ffb1b6-3ace-5838-85b2-641b2861a407", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-5766 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:2183afae-d13a-5696-93f4-3097c6a1dd61", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2026-6907", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:96408e44-5a5c-5495-a433-0ec97544c590", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6907 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2026-7666", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:943ae631-8215-5b6f-95b9-cde7211d1e69", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-7666 affects version 4.0.post22+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:1ccb5087-330a-5604-a3b0-a8116c5cbb1d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 4.0.post22+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@4.0.post22+tuxcare" } ] }