{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:1e5fac62-f429-533d-90d8-e3522d8799e7", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@4.0.post25+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@4.0.post25+tuxcare", "version": "4.0.post25+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@4.0", "type": "library", "version": "4.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2007-0404", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:2076b76a-32e7-5080-a0d2-e59dc2037a0b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0404 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2007-0405", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:de2c2407-0ccb-56cc-82ee-296e40488732", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0405 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2007-5712", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:763aaca2-9df0-559c-a75d-0ca405519f36", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-5712 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2008-2302", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:4b1aa02c-f6b4-5caf-88e2-59072d463b23", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-2302 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2008-3909", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:630f045c-475d-5158-92da-5cc9c1530cce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-3909 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2009-2659", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:32961587-e269-59a2-80d8-eab32a3b7bb1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-2659 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2009-3695", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:2d497d0e-ac94-5ca9-8aac-68f8bcb064ba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-3695 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2010-3082", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:d1734ac8-ecde-5657-a46c-df2b6e79b931", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-3082 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2010-4534", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:143f9b50-9460-57df-a927-921400528be7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4534 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2010-4535", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:6ae2d088-2261-54c2-9ffb-41f738ee74ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4535 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2011-0696", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:c17cf4ab-1be6-5c24-b73a-338f4c4f83c6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0696 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2011-0697", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:3803cec0-393c-56e0-8dfa-120a2e052f91", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0697 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2011-0698", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:f9093541-2702-5604-8784-26a22c4d0815", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0698 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2011-4136", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:ab1f8d83-e42b-5c6a-a235-00532b9cc19a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4136 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2011-4137", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:82778680-a0ee-5203-88dd-3860b6e20814", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4137 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2011-4138", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:a0b5c3a8-9bbb-5732-bb25-d1ead80cab8d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4138 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2011-4139", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:48c125ee-e2c2-5ae5-8c8a-f8352387054d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4139 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2011-4140", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:a6475f49-4e23-509b-9fc7-1eaa46749be0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4140 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2012-3442", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:12ae5d98-5138-51c1-b101-ff76a18c51a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3442 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2012-3443", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:3bfe95ea-8d5c-510e-b10d-6ab53052fe27", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3443 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2012-3444", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:8bf38f40-35c7-557c-862e-8a0da074e40e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3444 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2012-4520", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:890c6bd4-b147-5679-a01d-4cb79cc4d12f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-4520 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2013-0305", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:01056235-0f43-58ee-86e2-dfbc17e66bfa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0305 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2013-0306", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:dd8e0ceb-df3f-523d-bf6e-2621d6798ac5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0306 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2013-1443", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:930c94df-9dda-5b81-a08f-8ddfad3a5b3d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1443 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2013-1664", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:16f6e035-f9cc-5dc3-ab1d-ddcd75afc450", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1664 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2013-1665", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:5cb19b20-88d5-5cbc-861d-9aad69c5506a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1665 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2013-4249", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:eb2ef825-7b9b-5416-b436-fc5dba8894fc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4249 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2013-4315", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:0f648c9d-c473-5da8-b19a-fc0335f74ddf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4315 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2013-6044", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:2a087108-aa0f-5c8c-a1bc-0335f3afe89b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6044 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2014-0472", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:22f86015-3dd6-5912-8d3c-84fed8cd1372", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0472 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2014-0473", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:040e6c10-a1a1-563d-a918-ba6cbe72e410", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0473 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2014-0474", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:a08497bd-a31e-52de-837a-7a9ab146ce96", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0474 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2014-0480", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:837c9504-fb25-5187-94af-24d24f1ee51e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0480 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2014-0481", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:1c23e866-3c2a-56dd-a3b8-00a1e5d9e7ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0481 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2014-0482", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:945962be-e70b-5143-869a-7fb68b965925", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0482 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2014-0483", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:da8d8c9f-997f-5232-a4b5-2d56cb18ee8e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0483 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2014-1418", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:ab2a5267-67f1-57e9-8a84-7937bc5cfa6f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-1418 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2014-3730", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:7b4918bb-ff52-5df9-8b5a-cf8c4b582f9f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3730 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2015-0219", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:f5fab609-6355-5330-890a-845445dd0541", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0219 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2015-0220", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:e3a3302f-48c7-578d-8f82-6da0c5cbd418", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0220 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2015-0221", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:8a48f38e-998f-557c-85c1-6f4b0f24df59", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0221 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2015-0222", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:a0881e9c-dce7-5db3-bf07-896e70cad02d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0222 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2015-2241", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:cc24a948-482d-5d85-b17b-88d18b42ff81", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2241 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2015-2316", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:c7a1d500-5a04-529c-b800-31213c7c5f82", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2316 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2015-2317", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:57fde45f-b100-5442-8a5e-ee203e3bb4bb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2317 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2015-3982", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:e1983515-a11a-5e98-9662-3f23c96c9fb7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3982 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2015-5143", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:0619b387-1813-542a-a596-0a4e44a3ead0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5143 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2015-5144", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:3ebd5fbd-857b-5541-9683-0dde83262cb5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5144 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2015-5145", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:dd3b7051-2d5c-55a5-bbfc-9b680635e239", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5145 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2015-5963", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:be0a8550-9d0d-5631-8f36-95b2dea0d132", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5963 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2015-5964", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:863f1520-9113-5f35-954b-cabed872f86b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5964 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2015-8213", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:f06b02cb-e5ec-5e8b-a1d7-fc03e6b84612", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8213 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2016-2048", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:e904524d-7dc2-598e-af61-91ea42a9f111", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2048 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2016-2512", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:d970abca-2497-5c8e-b91e-8bf6c18b5f3f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2512 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2016-2513", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:830cc68d-a68a-5efc-8eaa-78b795fb126d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2513 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2016-6186", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:16e55bc9-e636-58c4-90f5-655efdfd6c52", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6186 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2016-7401", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:db059107-021f-542a-ad58-d3fe6a929518", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-7401 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2016-9013", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:d858b77d-a2dc-587e-86a6-9770149e4d44", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9013 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2016-9014", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:0565bcb2-2cad-56d4-860f-675528ee6e01", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9014 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2017-12794", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:ca6f4c28-e29e-53ec-992a-be680c5df6cb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12794 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2017-7233", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:36cad5d3-6643-5414-9be4-5ab75118a9a7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7233 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2017-7234", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:85dc6aa1-78c3-571f-95a2-1098a3385b8e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7234 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2018-14574", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:408cbc3e-9419-5970-8b9a-93ca88d7024e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-14574 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2018-16984", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:8886a867-6da3-5bed-9df4-e9e07d8ea0ec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-16984 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2018-6188", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:ffa14634-4f80-59ca-8a8b-7352362b95d4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-6188 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2018-7536", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:08d59552-aaa4-5711-9aa8-73050b871940", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7536 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2018-7537", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:3b28a947-c9e0-502c-962f-08bf7acd6726", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7537 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2019-11358", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:c189e31e-43a1-5383-b84d-43ba24d38e2f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-11358 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2019-12308", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:c4b32879-42d8-526a-87bc-19a264c17f67", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12308 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2019-12781", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:a85d55a5-df23-573c-947a-618a83177266", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12781 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2019-14232", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:2cd48aae-20f8-5507-8f79-4353ad8ab418", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14232 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2019-14233", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:38115435-cbb7-5409-90e5-9f230aa3677a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14233 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2019-14234", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:025cca53-3f93-55ea-ac81-ce7154d0c67b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14234 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2019-14235", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:e08541e7-cc7a-58d8-af60-404063f0625f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14235 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2019-19118", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:2131a843-2c42-559c-8374-926f1f339384", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19118 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2019-19844", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:c027d0fb-19db-556f-a93f-85d4bd9667ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19844 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2019-3498", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:d52d1b52-293b-5091-995e-dae1b094b3b6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-3498 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2019-6975", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:6132fd13-705c-56d2-be32-d62f8d5d8620", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-6975 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2020-13254", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:d1f225c8-a467-5c22-8dec-fd8ff75c0121", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13254 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2020-13596", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:48740c11-6a0f-5a33-b671-e45411bc5838", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13596 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2020-24583", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:bdc38e31-d90b-5c2e-9ae9-3a682f848f13", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24583 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2020-24584", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:c07ac31b-20a1-5c75-b31a-aedb66008d79", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24584 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2020-7471", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:4a53470f-cf3a-501f-a62b-e998eb338ddb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7471 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2020-9402", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:ae38bee4-2de9-5301-9a77-d22c502ec255", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-9402 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2021-28658", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:9ae2bf0f-bed6-5c20-b9c3-b513aacec991", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28658 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2021-31542", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:e6661e55-246c-572c-ae81-e40bf37905f5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-31542 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2021-32052", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:8c40e9f3-798e-5d1e-82a7-be87c45654dc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-32052 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2021-3281", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:bf01ea19-cde3-51d9-b091-58d032c93dbc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3281 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2021-33203", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:12746fee-9f4e-5389-a939-6d439033b2fb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33203 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2021-33571", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:dd17c274-f518-59ba-9ba3-3b2c538aa122", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33571 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2021-35042", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:0191b357-c930-5567-be29-892547b338e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-35042 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2021-44420", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:8001792a-d20a-51a4-a0f2-5c6d02122ffd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-44420 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:f2282569-92fc-5c35-bd3c-372a1cbbba54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45115 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:3fd8e154-96b9-536a-872b-66445dcf17b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45116 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:f642b999-78de-56d0-9aa5-b0ac16255e6d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45452 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:75ea487b-3bcf-59c6-82c2-3ac6c03a54e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22818 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:21b44e93-b038-5973-89bd-dfbb6d35f419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-23833 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:c7d8c759-dea6-59fa-86eb-c68cb276205b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28346 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:4e45f326-2abc-5d52-8ffe-196be455771f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28347 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:09cc3566-0282-583b-a386-a7d0fbfd932c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-34265 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:cc6e3116-2fe1-5e2b-ab73-a5ede1cff80e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-36359 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:bd4aa494-ed21-5faa-b749-45ad8a2aa46a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41323 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:a9530cc3-2059-5ea4-91ca-49b2dfecb2f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-23969 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:8fd4fe89-8efd-59b0-9b29-4e9f2e395742", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-24580 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:7ab9d4af-6824-58fd-b25d-1317526169c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-31047 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:f4a95775-88c1-5001-9d27-8a71c6856183", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-36053 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:4b0819e5-41a8-5123-84c7-934139936e09", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 4.0.post25+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:a6060de6-e6ca-5d6c-9325-59f2fefbdc89", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-43665 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:2f0511e5-97b0-5de8-8e0f-f6804ee0d0d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-46695 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:fe08d286-717f-5f18-b443-6712b05176bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24680 is already fixed in version 4.0.post25+tuxcare of django. Already fixed on tuxcare-current/4.0 by bot commit b68a12db02 and released in 4.0.post27+tuxcare (verified by code reading, see PYELSCVE-3147)." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:88fabac9-533c-5870-a967-33b2cf18e9e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-27351 affects version 4.0.post25+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:e24d807d-5085-5620-bb83-6eaadd23a571", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38875 affects version 4.0.post25+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:05237275-1b93-55b7-b14f-6eba3db130ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is already fixed in version 4.0.post25+tuxcare of django. CVE-2024-39329 already fixed on tuxcare-current/4.0 by 7a1768c267 (inside the CVE-2025-13473 backport), released in 4.0.post18+tuxcare; timing difference present on post17, gone on post27." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:ed8ea60c-d063-50bb-a3f6-6f9768ea8cfb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39330 affects version 4.0.post25+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:5b5b9317-0c6e-58e5-a37d-181d58254d25", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is already fixed in version 4.0.post25+tuxcare of django. Already fixed on tuxcare-current/4.0 by bot commit b68a12db02 and released in 4.0.post27+tuxcare (verified by code reading, see PYELSCVE-3147)." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:5fcd429a-27af-5333-ba12-5a3c4466febc", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-41989 does not affect version 4.0.post25+tuxcare of django. Django 4.0 floatformat() turns string input into float(), a huge exponent becomes inf and the expensive Decimal path is not reached with attacker-supplied input. See PYELSCVE-3147 / django!67.", "justification": "code_not_reachable" } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:650fa360-6dbc-535b-a1e4-9247b7686dab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41990 affects version 4.0.post25+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:14ba65f6-cfae-56e7-b083-b32f089366c2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41991 affects version 4.0.post25+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:7161d316-3b6a-51f2-9130-0574e951a6b7", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-42005 does not affect version 4.0.post25+tuxcare of django. Django 4.0: names passed to QuerySet.values()/values_list() never become SQL aliases on 4.0 (alias grouping arrived in 4.2, django 04518e310d); 8 query shapes: 3 injected on 4.2.14, 0 on 4.0.post27. See PYELSCVE-3147 / django!67.", "justification": "code_not_reachable" } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:95d228bf-3106-5a20-989e-d5d775e09022", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45230 affects version 4.0.post25+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:9c4ffc3f-7002-5601-a75d-35178b1e5df8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:9aca29f5-8879-5559-abf3-31d0271c73bb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53907 affects version 4.0.post25+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:f4ba05b3-2449-5b81-b9ca-201be201d968", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53908 affects version 4.0.post25+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:f654e97a-e88c-5516-a122-4cd3d7f4cb94", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-56374 affects version 4.0.post25+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:cfa32fcb-3328-5838-b67e-e5ea31649afe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:ec921328-9594-5473-bb52-2cb7957e1eb3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:1d5b421d-a0e2-54bd-a95a-f30ccf998b6f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:497f9467-3403-501e-bb94-fe3132205b3d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-26699 affects version 4.0.post25+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:3e403cea-39ff-5af8-a360-593f8931470f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27556 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:cc97ba4f-81fc-59fd-ad68-f0c2017f8923", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32873 affects version 4.0.post25+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:159c3086-a8bc-5ac8-ba05-4dc491872e95", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:711ef41e-84d0-5b88-a053-4306d5eff9fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:cf304cab-c922-5114-b6dd-79dbf8041f0c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59681 is already fixed in version 4.0.post25+tuxcare of django. CVE-2025-59681 already fixed on tuxcare-current/4.0 by fe5f66c68a, released in 4.0.post17+tuxcare; 4.0.post16 accepts 'injected_name#', post17/post27 reject it." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:a2d6d649-531f-53fb-903b-9ee75705c1d4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59682 affects version 4.0.post25+tuxcare of django, and is fixed in 4.0.post27+tuxcare." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:bc05baeb-4278-59c1-8328-0ea0a6b40c43", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:eb7e9bc2-be32-5af5-9136-0a1591beb453", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:fa23a147-32ed-5185-ac8d-842cdd53e103", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-108147", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:b2069c89-5eae-5c4b-b79b-a0d8b08f0b83", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-108147 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-111211", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:163a3969-a5b5-5928-bb1f-5b860e0c83b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111211 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-111362", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:f33f68fe-57ba-5eca-8bda-05ccd65ae2e9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111362 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-113593", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:354ec62d-47e1-5940-b310-554a30ee9fdf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113593 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-113733", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:8d8eb168-2c6c-527b-b40f-dd421441dbe7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113733 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-114582", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:54b29813-75ae-52e8-91f4-7252c2bbf998", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-114582 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:087110f8-0810-556c-9076-aed8227af5dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:00e62622-1b6f-5995-9b30-9987f883b456", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:c1d095c0-5fb2-52a9-a008-d95bb9aa5255", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:2ed4716e-465a-5343-b95a-2d0ab6c2949c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:a3feb88e-0ba6-5473-9c37-b253c690ed7d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15307 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:782a6010-5305-5ab0-b747-88adf0e6021b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15830 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:0afb3426-a967-51dd-a0b5-4abdeb582079", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25673 affects version 4.0.post25+tuxcare of django, and is fixed in 4.0.post26+tuxcare." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:74a7be41-a9a2-55e0-b10f-60ce0b97c6a1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25674 affects version 4.0.post25+tuxcare of django, and is fixed in 4.0.post26+tuxcare." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:7d161ca0-f89c-5a9f-8f29-b415bf8daa98", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33033 affects version 4.0.post25+tuxcare of django, and is fixed in 4.0.post26+tuxcare." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:bb9d80df-24b5-59d7-9020-2f8de70e37af", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-35192", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:059fe8f2-3007-5409-b3d3-b8b4a8dd5126", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35192 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-35193", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:06816b00-26aa-57cd-a4b7-33aa0d9f999b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35193 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:7ef32e91-3940-5a11-b5f8-58287befeab1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-3902 affects version 4.0.post25+tuxcare of django, and is fixed in 4.0.post26+tuxcare." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:b319cb8e-080e-550f-b69a-0e54dff3fed9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4277 affects version 4.0.post25+tuxcare of django, and is fixed in 4.0.post26+tuxcare." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:0b2d5681-1fd7-5d81-9522-c6f3be392824", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4292 affects version 4.0.post25+tuxcare of django, and is fixed in 4.0.post26+tuxcare." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:1fd670e1-cbc3-57dd-a783-04bc92242a79", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:47daaa3c-db9f-51a3-a471-8f74a4003484", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:4cb4178a-719a-5bbe-821d-f94d454c4b12", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:7b7c2498-84c4-5306-a04d-12c7acebccd1", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 4.0.post25+tuxcare of django. not_affected \u2014 Django 4.0 is not affected by CVE-2026-53878. The vulnerable component DomainNameValidator does not exist in this version (it was introduced in Django 5.1). All domain validation in Django 4.0 is performed by EmailValidator, URLValidator, and _simple_domain_name_validator, which properly reject domain names containing newline characters through various mechanisms (regex anchors, explicit unsafe...", "justification": "protected_at_runtime" } }, { "id": "CVE-2026-5766", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:5b790be3-bf98-5c58-b33c-f02d00a4df9d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-5766 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:616fbb89-13da-5075-b5cb-b655eda5c405", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-6907", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:efdf75e9-a247-5578-818c-e434c7dd45fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6907 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-7666", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:fec2ebb7-218e-5592-ad26-8ea9b8e668e7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-7666 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:e3f06a4c-4af5-54c7-ac47-7957177579a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 4.0.post25+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ] }