{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:156c79f1-ed14-5d52-88e4-b64b5660dd59", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@4.0.post23+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@4.0.post23+tuxcare", "version": "4.0.post23+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@4.0", "type": "library", "version": "4.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2007-0404", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:c656daf3-2a25-5c15-9de7-b024f9accda2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0404 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2007-0405", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:7b2ce6f7-f2c4-5151-9a60-931791dc873b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0405 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2007-5712", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:41b98453-38f7-57b0-bf34-4fd373f0aaae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-5712 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2008-2302", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:5e6cf106-860c-5b77-a38a-3a0c1915568d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-2302 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2008-3909", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:58898be2-6274-53f9-b24c-0be6da49326a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-3909 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2009-2659", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:f0bccabf-b32c-53ce-aa3d-c2b1b694af1b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-2659 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2009-3695", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:e951f700-6381-57bb-aa20-91f9d7eb0b7e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-3695 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2010-3082", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:c82f4150-2c46-528c-9110-2e8bc4eefc35", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-3082 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2010-4534", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:c3b9feb0-8fd3-5cfc-9c98-3502f3e7f324", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4534 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2010-4535", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:850a13cc-9992-557b-81c5-5830c52fb728", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4535 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2011-0696", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:d13d4081-9c82-5986-b7b0-644d44dff527", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0696 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2011-0697", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:5f6703c3-20ac-5800-9611-714b5ca19873", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0697 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2011-0698", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:6a3f040a-12cc-58a1-b50f-67cedf234a5f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0698 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2011-4136", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:67137d21-d7be-5af7-b73f-62598e0e2d01", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4136 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2011-4137", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:0d6e8894-9cc8-5fc4-a768-78b476c05258", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4137 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2011-4138", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:47428750-addf-51fc-9136-24dcf3ae740f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4138 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2011-4139", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:79b3c161-084d-534b-b156-2986119c0b09", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4139 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2011-4140", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:78b669b0-06c0-5423-a167-9f63d9cf3397", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4140 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2012-3442", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:c6f98a48-c0c0-57c5-abbd-e63a29c5923d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3442 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2012-3443", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:ff8a21c3-c9fd-5d87-9ac5-105f3b370880", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3443 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2012-3444", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:e7cda0d3-03ad-5236-938b-6f94159b5cff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3444 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2012-4520", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:7bf3a1da-bb37-5ac6-889c-6e2db5771e22", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-4520 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2013-0305", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:284621ef-a9a4-5d44-b818-99c09d92b0bd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0305 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2013-0306", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:599d92be-25cf-519a-8a6d-8bfc8c13372b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0306 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2013-1443", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:7a05417e-1348-5282-84c1-40431df2ce2b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1443 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2013-1664", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:24eb0ca3-85ef-5d74-bde2-ad07ae3f9b2e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1664 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2013-1665", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:9a737bd1-a8db-5ff2-b881-3b39c1670083", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1665 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2013-4249", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:36be2904-0221-530f-9f52-0d9b05401999", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4249 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2013-4315", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:0818595c-312a-5003-bd56-d5491d4a752b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4315 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2013-6044", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:a796b271-bb13-5485-9553-2443018b2e56", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6044 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2014-0472", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:1a3c3da6-14b2-59ce-9591-7d5ac171d196", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0472 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2014-0473", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:4eecb85d-eeab-5b6e-9317-8170885a9d4c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0473 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2014-0474", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:970f3010-c9bd-54ab-ad9b-6d7bf2951737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0474 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2014-0480", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:0cbe6d0c-6686-58e0-9af4-578e1457a183", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0480 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2014-0481", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:09542f03-5eac-5ae9-957d-62bfca6dda04", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0481 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2014-0482", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:90193966-adc2-5696-9b58-1e28b4156a58", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0482 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2014-0483", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:00acb58f-7520-557a-9253-8dc9188417e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0483 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2014-1418", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:1f3f0473-64a0-5a01-8f70-808c601cae62", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-1418 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2014-3730", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:a46df2d1-2465-5130-9bbb-33154d17b70c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3730 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2015-0219", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:1af31fd1-17d4-53e4-8a47-7b58a0a4daff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0219 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2015-0220", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:3e15e883-06a0-51e2-9d95-9ee20435dde4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0220 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2015-0221", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:366ac912-e578-50e3-935e-ceec34e9da3c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0221 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2015-0222", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:d243c190-7b4d-5b19-a465-31571fd23251", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0222 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2015-2241", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:e8dc676b-d863-5d55-b59a-299ea5a4fc5d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2241 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2015-2316", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:f7ba90ab-1fa6-5ea7-883d-1c5a73aefeae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2316 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2015-2317", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:506978e1-2e1a-5d08-b121-f60e58bc525d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2317 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2015-3982", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:1c9a7fef-e3ea-5b7c-a299-964f0c1b5025", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3982 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2015-5143", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:0698d8be-c18f-5159-98e6-f2542a25a963", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5143 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2015-5144", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:4af7127e-46e5-502f-9a14-ad077b8ce0d7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5144 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2015-5145", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:3c5602bf-9136-574a-9976-b56186231522", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5145 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2015-5963", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:e4596397-4722-55f9-926f-eecdf15b0b31", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5963 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2015-5964", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:8eeb64ec-0bb1-5287-9252-4c8e556a8da5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5964 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2015-8213", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:d51450e2-1286-5063-92cc-fba042b45b79", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8213 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2016-2048", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:7a07d4df-bb22-57d8-9230-0dc59735b807", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2048 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2016-2512", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:3397bf53-ce61-57ec-8f62-1d523b072597", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2512 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2016-2513", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:7c235866-53c6-5598-9c57-0433151c38e3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2513 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2016-6186", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:4f6e74fd-7538-5556-a3a9-926445655e36", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6186 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2016-7401", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:9df8a4a1-8503-5cca-b2ac-51e64388cf01", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-7401 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2016-9013", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:00e32cc1-c020-5a9f-b649-1aa0abfb716a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9013 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2016-9014", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:677dc7a7-7a20-5129-a086-8a26db79d0a0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9014 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2017-12794", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:925bc8cf-7dd3-56aa-89cd-a9798746d989", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12794 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2017-7233", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:1d12e892-2130-586a-ae0b-8bd2bb379d06", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7233 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2017-7234", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:f98e2f08-f316-5810-8ea5-bd78b0df2e8f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7234 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2018-14574", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:d7dec193-9ce4-5c02-ba8a-de44259ad017", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-14574 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2018-16984", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:99b6a82f-9560-5047-b6e1-f4566499414d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-16984 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2018-6188", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:8d845f1b-8ee9-5a5b-8595-bdef2b3b61d3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-6188 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2018-7536", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:9d0c7832-0368-5c7a-9ac0-04fa80d762d5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7536 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2018-7537", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:4c314195-5aa9-517e-941a-f5e843067da2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7537 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2019-11358", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:88c7dfaf-7169-583e-bace-1afb82cea168", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-11358 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2019-12308", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:5189792d-3c4b-5f49-abfa-30928fd33c87", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12308 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2019-12781", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:aef69e36-2e0a-56f6-9821-e1badd19b9b0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12781 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2019-14232", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:cca219ac-7ca7-53ba-9c48-fc39084426a7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14232 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2019-14233", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:19eb6c19-fbdd-5b5a-b2d7-e988bb035df2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14233 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2019-14234", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:b76bc50b-2391-5345-b354-d1b966613d23", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14234 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2019-14235", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:610a58c5-3d60-5f59-b9b9-ffd2e3b8d90e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14235 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2019-19118", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:b30fe1e7-0e03-572d-9f40-52c52ddd18b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19118 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2019-19844", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:81750a1f-0f25-5eec-a8be-fd05bc3ee0f6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19844 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2019-3498", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:5e09de85-785d-5019-a25c-17f8fd63fa76", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-3498 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2019-6975", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:7b044481-91e5-5a48-9556-c4098dc96e01", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-6975 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2020-13254", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:f56a748d-c9c2-5ca2-ae2f-72599514723f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13254 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2020-13596", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:8f276fec-acc1-52a2-962c-af6b67d2a254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13596 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2020-24583", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:7b224e1d-1da6-53ef-a939-d7baf5829f71", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24583 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2020-24584", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:af2793cf-d302-540e-9502-6de2dd187e8c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24584 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2020-7471", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:382762bc-b836-57f2-b205-1133c048c8ec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7471 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2020-9402", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:99b10676-80c3-57e4-a4c9-43fe03114e9c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-9402 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2021-28658", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:c8152a36-577a-540d-a390-35e56c984c2d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28658 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2021-31542", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:01aaab6d-cd39-5a48-8e9e-e1110179983f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-31542 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2021-32052", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:eb07566d-1f20-5d77-8891-2272b69c1bf8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-32052 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2021-3281", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:80dca6d1-fd14-5241-8e5a-d2d5b4d2093a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3281 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2021-33203", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:d7e59580-c845-57d0-b72d-a706f4e28c24", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33203 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2021-33571", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:f76ebec9-07d8-596e-9699-3934b9a3c8c0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33571 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2021-35042", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:cf9a4aad-93eb-546b-a352-a418b1739938", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-35042 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2021-44420", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:ed65987f-df64-55b3-b8ff-b5b6fc90c37e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-44420 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:f4ae8da7-2ef6-5c9f-9b6a-477bef336344", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45115 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:360e50f4-6a46-5312-9522-71e25f8439c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45116 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:b78a4c94-cdd6-5132-b85a-d81d9e5d4a24", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45452 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:c7161655-4a8e-55f5-bfaa-5922081187ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22818 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:c4525f1f-026f-585b-9c18-5eb981dcde0a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-23833 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:b03bb16c-5da4-5ea4-b746-d5fdb2df477f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28346 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:8c1f9305-032f-5973-b8b4-3472f5f01c83", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28347 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:199eacf1-e137-54b5-92da-46b70a16037c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-34265 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:d83639b6-e972-5dcf-8f98-9bc8978e22c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-36359 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:769a15e8-4a64-59f5-b165-5fdfaff6d391", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41323 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:3077a5c4-6f6a-5501-8359-adaf79237274", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-23969 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:1f756c51-3c04-55d4-ac38-a7ce2edab2c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-24580 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:e9b3c4dc-7c38-55c2-98e4-b261a4d710b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-31047 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:cda34600-c531-512d-85d9-c8872514537b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-36053 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:951641ec-3b32-5b2d-817b-74e653b1e580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 4.0.post23+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:91b24ccd-2145-5d69-a145-2e532e07172d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-43665 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:1b2862ea-8c0c-5d55-b155-dd1c81d3bffb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-46695 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:a1a320ef-4508-5afb-868f-e07a6dfe20a1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24680 is already fixed in version 4.0.post23+tuxcare of django. Already fixed on tuxcare-current/4.0 by bot commit b68a12db02 and released in 4.0.post27+tuxcare (verified by code reading, see PYELSCVE-3147)." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:d90e863e-83ca-5532-9e38-c33de5d8728b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-27351 affects version 4.0.post23+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:0702d47d-6912-5d81-9804-a9dffc76e672", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38875 affects version 4.0.post23+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:cc14c6df-5ea2-5395-a5b9-c0fb4c24f699", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is already fixed in version 4.0.post23+tuxcare of django. CVE-2024-39329 already fixed on tuxcare-current/4.0 by 7a1768c267 (inside the CVE-2025-13473 backport), released in 4.0.post18+tuxcare; timing difference present on post17, gone on post27." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:b7a4c9ce-eeb2-56a7-80b8-8ef6f4eecc70", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39330 affects version 4.0.post23+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:70f84b37-a9ec-5d73-b70d-5b035ec5d8b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is already fixed in version 4.0.post23+tuxcare of django. Already fixed on tuxcare-current/4.0 by bot commit b68a12db02 and released in 4.0.post27+tuxcare (verified by code reading, see PYELSCVE-3147)." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:404d2cb5-c844-5c47-aacb-4f95784d4654", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-41989 does not affect version 4.0.post23+tuxcare of django. Django 4.0 floatformat() turns string input into float(), a huge exponent becomes inf and the expensive Decimal path is not reached with attacker-supplied input. See PYELSCVE-3147 / django!67.", "justification": "code_not_reachable" } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:9f07827f-21fd-5b15-9c8d-beefa208e33f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41990 affects version 4.0.post23+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:2643b698-0945-5b95-8bff-be69885481b3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41991 affects version 4.0.post23+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:2c0bc101-6a3d-52cf-acaf-82453c9fcc2f", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-42005 does not affect version 4.0.post23+tuxcare of django. Django 4.0: names passed to QuerySet.values()/values_list() never become SQL aliases on 4.0 (alias grouping arrived in 4.2, django 04518e310d); 8 query shapes: 3 injected on 4.2.14, 0 on 4.0.post27. See PYELSCVE-3147 / django!67.", "justification": "code_not_reachable" } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:9ba15af8-84ae-5e71-9d1e-90c4ae0e03a3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45230 affects version 4.0.post23+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:d67b634c-6b4d-5e03-aace-c14a8f885865", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:4c0d03a1-8b34-570e-a057-20339c209d8f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53907 affects version 4.0.post23+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:786bdced-c80a-5bb7-86f6-21dba42db286", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53908 affects version 4.0.post23+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:70b0c9c1-4cc6-55c6-9f7a-7de74d0f422c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-56374 affects version 4.0.post23+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:dfcc0eee-3ab3-5d5e-b050-f783dedd12ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:76b08d1d-128f-5261-8d0a-13392ae9b408", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:1c742a71-4809-5d10-b341-20c693fc3124", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:ad549150-ddb2-5172-95fe-463623ea4c7a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-26699 affects version 4.0.post23+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:adb42db4-2e07-5ba8-80bc-b63e6334a129", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27556 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:d3300f2d-3fd5-50ad-9929-ddaefa0ca5b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32873 affects version 4.0.post23+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:19fdc5a1-8766-5bc9-82d7-ba54bec8894e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:a82fcb60-3844-55ef-bda8-6e3fb2c11dbf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:187523d7-95cc-5593-810d-6d8c4a3e8ec6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59681 is already fixed in version 4.0.post23+tuxcare of django. CVE-2025-59681 already fixed on tuxcare-current/4.0 by fe5f66c68a, released in 4.0.post17+tuxcare; 4.0.post16 accepts 'injected_name#', post17/post27 reject it." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:7b5c635a-10cb-5203-b904-985482a62660", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59682 affects version 4.0.post23+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:1dae725f-1a7e-5bd6-b156-9ffe76486ddd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:c9245511-4b2d-511a-9e0d-aeaafe2413e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:1610f00e-a34a-5e0f-9325-05257a77e3d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2026-108147", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:dbaca59a-2f99-57ee-9eda-6e878cc95cd3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-108147 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2026-111211", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:11abb119-26cb-50f1-ad66-0b4c72ef8db9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111211 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2026-111362", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:b613b000-1ddd-52ac-9d77-99dbeac68f0d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111362 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2026-113593", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:f64c45f3-474f-554a-b5dd-5061d0549473", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113593 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2026-113733", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:0b359172-c2c9-530d-b4fc-cd35a7e7378b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113733 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2026-114582", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:0a99361c-7c79-59b2-9798-349d809d9f72", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-114582 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:64b9aba7-b092-551c-bc11-dd0043dd233f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:4f61fbe5-e276-59e1-845d-64077a4d10e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:6f5aa6fb-1161-581c-a6c7-17d32b64da0a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:408b8f97-fbcb-5629-a405-fc6efb717d83", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:b21fb9f6-bbb5-5203-8d24-520ea2c1c017", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15307 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:af269681-25cd-57d6-820d-7a8ea82b2bc2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15830 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:ecf284d3-538a-58bc-89ff-b253692932cb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25673 affects version 4.0.post23+tuxcare of django, and is fixed in 4.0.post26+tuxcare." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:e9e7aab7-6c1b-5fa9-8172-16fa5a88a44d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25674 affects version 4.0.post23+tuxcare of django, and is fixed in 4.0.post26+tuxcare." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:48b5cbbb-9fa9-5629-a63a-2a3df4fab48d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33033 affects version 4.0.post23+tuxcare of django, and is fixed in 4.0.post26+tuxcare." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:16b8306a-d060-561a-8289-f7781b650109", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2026-35192", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:1ffdf20a-d4b3-5750-b7cc-2a56123e733b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35192 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2026-35193", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:c9c65adc-73af-514f-96df-6f4187c53f83", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35193 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:e94b7199-8b38-5524-bcc3-87b210dcce7d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-3902 affects version 4.0.post23+tuxcare of django, and is fixed in 4.0.post26+tuxcare." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:cd422bf6-b072-5def-9826-918b122f5372", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4277 affects version 4.0.post23+tuxcare of django, and is fixed in 4.0.post26+tuxcare." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:d507ad3d-13c0-559e-b026-f1541bf1b7a2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4292 affects version 4.0.post23+tuxcare of django, and is fixed in 4.0.post26+tuxcare." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:75a8face-c54e-58fc-9db5-aa3e6d26a933", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:00bacb98-a1af-58ea-963f-bd4071a96f18", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:8844050d-9fbb-5d33-ae1d-3e810a52dd76", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:ec45e2bc-6599-590c-9982-e5c678802fef", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 4.0.post23+tuxcare of django. not_affected \u2014 Django 4.0 is not affected by CVE-2026-53878. The vulnerable component DomainNameValidator does not exist in this version (it was introduced in Django 5.1). All domain validation in Django 4.0 is performed by EmailValidator, URLValidator, and _simple_domain_name_validator, which properly reject domain names containing newline characters through various mechanisms (regex anchors, explicit unsafe...", "justification": "protected_at_runtime" } }, { "id": "CVE-2026-5766", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:722b7362-11bd-5881-8922-7bbe9138e2c8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-5766 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:3f32bfdb-9561-5f7c-8197-41541cf86ca2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2026-6907", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:d992908c-0315-5d48-b55a-67e41bcf8d93", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6907 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2026-7666", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:4f139082-5843-59a9-aa08-6dbe2f6584e1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-7666 affects version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:8bc4ca16-9624-5e01-8d71-2927890372f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 4.0.post23+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ] }