{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:0a1b1ae9-580f-5c6e-b6c3-dcef87be389a", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@4.0.post27+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@4.0.post27+tuxcare", "version": "4.0.post27+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@4.0", "type": "library", "version": "4.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2007-0404", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:e94e5d8f-9a44-58a2-ba1b-c2f108d32b2c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0404 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2007-0405", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:2e3c605e-0ae5-5ed0-a904-fd076082ed59", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0405 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2007-5712", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:50b3a041-3586-5e56-b6fc-53b0f1d41caf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-5712 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2008-2302", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:d0698c16-b0b9-57b3-8f01-f9a74fd972f1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-2302 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2008-3909", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:de893061-6a96-50cb-9db0-b9e7f612221b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-3909 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2009-2659", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:e7299625-6a22-517a-bfc1-73faee166279", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-2659 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2009-3695", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:5ccf17a1-2225-58f6-8615-7d9ba0777c9f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-3695 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2010-3082", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:f8f44497-a874-5b7b-9d68-655e97025eb6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-3082 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2010-4534", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:e0d952d0-c6e5-56f2-b7c6-e1c7fe7c3827", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4534 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2010-4535", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:f3b9b226-5e68-5390-8da3-25bfe86939af", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4535 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2011-0696", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:ef391095-8b62-593b-9aba-9bc1bf22737c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0696 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2011-0697", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:473d591a-5b34-5428-b64d-32de943e263c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0697 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2011-0698", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:04c20b9d-4011-5900-9194-4b1bdb0e87e8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0698 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2011-4136", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:d0e9dcc2-0c23-5c3f-ac7a-bc1e92e056f6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4136 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2011-4137", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:375de5c9-78e0-571f-9161-514180879e5a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4137 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2011-4138", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:ba5a05ce-ce98-5f70-8a0b-2a90a4752480", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4138 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2011-4139", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:1f25ab5f-0a26-5cd0-922f-b83867fa1484", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4139 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2011-4140", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:c9cee43c-20b3-5e44-a3d6-90e526273867", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4140 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2012-3442", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:a70bab87-5156-5a56-b963-02427f5aa786", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3442 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2012-3443", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:605e0a5c-bbd5-5cec-81cd-f4e87ca871ad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3443 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2012-3444", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:3b00ae66-e048-523f-9609-f6bfde130e08", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3444 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2012-4520", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:6ac29633-7296-5fbf-9c82-19178e4ab3ea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-4520 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2013-0305", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:175b452b-eda5-54e6-94a6-1a5fa7e37078", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0305 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2013-0306", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:d7e320d0-98ca-5287-88d7-38ba9af2ec03", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0306 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2013-1443", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:44c4dad8-8d35-581d-96b6-91ec70691449", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1443 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2013-1664", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:99cf58a9-3412-5d84-a8ed-2e44a8f81e71", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1664 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2013-1665", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:96eb9ef1-02c9-529b-a2af-4107bb9f5f15", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1665 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2013-4249", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:0d10f38a-090d-5507-b481-2733b43100da", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4249 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2013-4315", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:25c2a0e4-cb86-51ea-9036-54e9aaec63d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4315 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2013-6044", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:2fb9a62a-0ef7-5146-b35f-eed70f76ff46", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6044 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2014-0472", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:ba733e24-56b5-5fe9-aa8d-104e7a8f4ab7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0472 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2014-0473", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:c3fb9c39-0973-5221-8021-63232b4882ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0473 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2014-0474", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:8e30bbc3-44c9-5079-b842-4d4a04bccb68", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0474 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2014-0480", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:75b79930-e57b-5993-bf0a-35f76692e5cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0480 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2014-0481", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:e146c61f-dd8a-5d59-9944-360096abf4f8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0481 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2014-0482", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:3256a1e2-9a40-599a-8bf9-0c065ab2fe8b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0482 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2014-0483", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:c2641464-5721-525c-9c4f-0afed2fb0841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0483 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2014-1418", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:eb3a301e-67de-549b-882f-d7cd93409cbe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-1418 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2014-3730", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:640de153-408b-52fa-97a5-dad2b406933f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3730 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2015-0219", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:15bfb718-45ca-5ce9-9c8e-afad7705143d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0219 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2015-0220", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:f405882d-3c1e-5182-b4e0-f7910eb6285f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0220 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2015-0221", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:7e8191c3-f452-5eb8-9ef1-629c30f2e66d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0221 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2015-0222", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:4192cfbe-6c52-5aea-bcbf-c656da1e8a70", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0222 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2015-2241", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:31ce6ff1-b765-5d92-a1ba-2c7e374fd4d8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2241 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2015-2316", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:12d696f3-705d-591f-80f8-ad0cc91d7677", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2316 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2015-2317", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:feb0c4ba-13d5-5f30-a330-2b3ec62efe10", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2317 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2015-3982", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:bbc4657d-acfa-56fa-9a6d-7b93f458f496", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3982 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2015-5143", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:16d9c034-17a0-5ebc-a015-daea3c39292c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5143 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2015-5144", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:3c02608d-d81f-5ba8-9a6f-88abe2be5f0a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5144 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2015-5145", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:027bc49a-ca9d-5202-873a-e4eede025fc2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5145 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2015-5963", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:01550d8f-1376-5c89-b9ab-bd16d653767d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5963 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2015-5964", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:ca6c44cd-c8a7-5be9-b017-01966750885d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5964 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2015-8213", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:625d9413-9a5c-5d7d-add5-3515b86195fb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8213 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2016-2048", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:eb08e3b4-dc94-55e3-b556-c7a200f1dc8f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2048 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2016-2512", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:8ec2a444-8692-5b1e-974b-5bbbeabd983f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2512 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2016-2513", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:5151ad62-a9af-5833-b2fc-73f18269833f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2513 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2016-6186", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:d0d7674a-29d3-5f1a-8ed6-d15a04b31762", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6186 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2016-7401", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:92b028b4-2617-508f-8f8d-051cb7529f75", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-7401 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2016-9013", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:25a5076f-b974-562e-bfd1-273cf1900603", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9013 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2016-9014", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:3200d83b-48cb-5bc6-8ff6-779d82ecfe2e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9014 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2017-12794", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:51adfc66-5633-5cc7-91fb-e525c66deaf1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12794 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2017-7233", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:fe3d23ee-1ded-5446-9395-a80e5274d743", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7233 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2017-7234", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:67895552-bf00-5c8f-acbf-5244e7e66049", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7234 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2018-14574", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:db9fe93b-1312-5792-a19a-f8d2e792cd3f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-14574 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2018-16984", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:ad9a67a4-514b-527f-8075-c1bd8074800d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-16984 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2018-6188", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:adacf7d8-5b0c-54c8-a62a-134e590f30c0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-6188 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2018-7536", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:c1fbf412-8edc-532c-8725-b26a79bef74f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7536 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2018-7537", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:e021d52b-c69b-574f-8d67-bce04c315a4a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7537 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2019-11358", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:5a4be9a6-7fca-5b3d-b2a3-90cdcd2a5983", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-11358 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2019-12308", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:e4f92fee-3063-54d3-9ae7-6f658d4bc5f9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12308 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2019-12781", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:2c5cea2e-8cbf-5828-a073-c7b5aa06deaf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12781 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2019-14232", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:4ff0d9c4-7bf8-50f3-8883-84b50617eefd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14232 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2019-14233", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:c6c727b8-cb86-55c9-9c62-f3a0d0f5f3dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14233 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2019-14234", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:e3b1ae28-91b7-5388-8cab-b9407d06b1ef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14234 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2019-14235", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:15bf08fc-4a95-524b-907f-7fc242fb1f41", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14235 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2019-19118", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:7e13fe78-c697-5366-878f-48fb6a3dedb3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19118 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2019-19844", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:ef274526-8286-589e-9e78-576a95281e54", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19844 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2019-3498", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:91e7809e-3fc1-5cb1-bb85-9bce53d01151", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-3498 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2019-6975", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:a5abde67-6e45-5c45-9443-1ece01e11f82", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-6975 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2020-13254", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:a964a6bc-b98b-550b-9260-233778cd999b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13254 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2020-13596", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:fd1a388f-7bbb-5862-8334-3940d26b6f34", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13596 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2020-24583", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:5fa27603-c4d0-5ce4-a299-f3a8ce437b9d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24583 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2020-24584", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:9f15511b-59d1-5893-b475-41054aad30ca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24584 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2020-7471", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:88263c93-560c-561d-95be-c03e5b23af52", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7471 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2020-9402", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:5c6df16e-6d72-5ded-ab2f-5882b7258b90", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-9402 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2021-28658", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:d5b1ce86-4234-5729-9d9a-a2a98b595bee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28658 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2021-31542", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:0618132e-57e4-5610-991d-4bfaa6cb6f00", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-31542 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2021-32052", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:c2ab0314-ef84-5dc4-b38b-481a3e1c0740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-32052 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2021-3281", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:e415c791-ac7f-51f8-bace-86f8f962fc00", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3281 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2021-33203", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:5de44262-85f5-5d80-beae-c6756ef454fb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33203 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2021-33571", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:2988e40f-d7e5-5a76-a586-367547ea71fd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33571 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2021-35042", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:58584a3b-39b3-5549-949d-195b52da68c9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-35042 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2021-44420", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:e3cf0eef-7c9d-5980-a139-d1296fb4562f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-44420 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:9d45136b-0ac6-569a-b845-3c1edd5d466e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45115 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:62acf6df-2be2-5550-8183-c2d15b490e9a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45116 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:8ac09342-2225-542c-8515-c2ec9ce0ab44", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45452 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:02af0682-c685-52c3-a5b7-e0d340e0aa89", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22818 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:5af668ac-b24c-520c-b456-50043c262969", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-23833 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:299f6164-f093-52b1-beb5-d9757ee15aaf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28346 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:3df9c656-be8e-5643-94ec-cf4156009da3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28347 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:770de54d-7d7c-5212-ba46-dafc236ee457", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-34265 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:350cac32-b3b8-50ca-8405-f961fa0e15bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-36359 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:f706b95a-7d93-5129-9d94-349ea8d531d4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41323 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:df64e8d6-c581-5e04-a94f-46a1afff2fed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-23969 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:05f87c42-edd8-5c4f-af35-6d787c9c39e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-24580 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:cabd6b26-0563-5964-9b2a-c84a770de2bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-31047 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:88482832-ebec-524b-8ad4-4663f5bc31b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-36053 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:0d6c2d1a-49e3-592d-bf3d-315f4156095f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 4.0.post27+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:d790ae67-d462-5a30-a53a-0ac257c43b53", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-43665 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:d0a77535-9aaa-5649-8207-550b29a984b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-46695 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:b0711328-8246-598e-97a9-2249e3b3cfad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24680 is already fixed in version 4.0.post27+tuxcare of django. Already fixed on tuxcare-current/4.0 by bot commit b68a12db02 and released in 4.0.post27+tuxcare (verified by code reading, see PYELSCVE-3147)." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:66a7b3ea-33a3-5f36-bdfe-a0190fccff41", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:8f08f4ee-2a1e-5e71-9689-315d58c3801b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38875 affects version 4.0.post27+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:ef135d8f-9cf5-52a1-93df-2fe5d39030d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is already fixed in version 4.0.post27+tuxcare of django. CVE-2024-39329 already fixed on tuxcare-current/4.0 by 7a1768c267 (inside the CVE-2025-13473 backport), released in 4.0.post18+tuxcare; timing difference present on post17, gone on post27." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:5568c425-c2bf-59e7-9853-db39b8ad6a73", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:e2c7cf77-0a74-54d8-975d-d665a394f759", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is already fixed in version 4.0.post27+tuxcare of django. Already fixed on tuxcare-current/4.0 by bot commit b68a12db02 and released in 4.0.post27+tuxcare (verified by code reading, see PYELSCVE-3147)." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:6e6a5515-ce83-53d6-860f-7302713fd291", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-41989 does not affect version 4.0.post27+tuxcare of django. Django 4.0 floatformat() turns string input into float(), a huge exponent becomes inf and the expensive Decimal path is not reached with attacker-supplied input. See PYELSCVE-3147 / django!67.", "justification": "code_not_reachable" } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:7d3f9509-d918-5542-8753-87fc8e2fdf18", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41990 affects version 4.0.post27+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:2a7af51b-b954-566c-bef9-35e1cdd317b1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41991 affects version 4.0.post27+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:47b5f937-2d92-5b52-8499-dce05050c7b8", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-42005 does not affect version 4.0.post27+tuxcare of django. Django 4.0: names passed to QuerySet.values()/values_list() never become SQL aliases on 4.0 (alias grouping arrived in 4.2, django 04518e310d); 8 query shapes: 3 injected on 4.2.14, 0 on 4.0.post27. See PYELSCVE-3147 / django!67.", "justification": "code_not_reachable" } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:11d46430-d602-54e8-b5ae-10fe588e186a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45230 affects version 4.0.post27+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:ccbdf460-c204-5e67-83a0-79307144bcca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:d5fe105e-3dec-56c2-8436-1a79fa347759", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53907 affects version 4.0.post27+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:da51fd12-53aa-5eb4-b48b-4c81b7c2e4d3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53908 affects version 4.0.post27+tuxcare of django, and is fixed in 4.0.post28+tuxcare." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:fe0c7569-aa06-517c-8119-b720fa87b0cf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56374 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:53bc9027-155e-5690-b47d-e3d814693770", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:bdb6be31-3e7a-518c-82f8-0bf88717a9e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:d76963eb-3324-5baf-a49b-c6cfc7fe2c61", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:e540421d-bebf-544f-b38f-d62c9cb15f80", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-26699 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:a3a07de1-15e7-5b2f-a42f-02914748ac23", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27556 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:f4bf3166-4510-5d70-b27c-a83d8deb97f3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32873 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:9de8f7ee-8e24-5261-80e6-4967dfa59c1d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:dd68f370-355a-5bc6-92df-681a147f5b00", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:3bc3729e-a972-5ba3-aa39-a4884473ae72", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59681 is already fixed in version 4.0.post27+tuxcare of django. CVE-2025-59681 already fixed on tuxcare-current/4.0 by fe5f66c68a, released in 4.0.post17+tuxcare; 4.0.post16 accepts 'injected_name#', post17/post27 reject it." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:c7e23a65-0d94-5db1-9f1e-f42f338015d4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59682 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:2a597d95-9275-54cb-bf9e-66a3530a9abb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:f7e3105f-7c1e-53c9-975e-99f91ef5949c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:47b1bdaa-3131-5a05-bdf4-453aa0598aaf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2026-108147", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:319626b7-3111-5144-8812-7386f5e9ee7e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-108147 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2026-111211", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:fa6ab5e8-2655-50ad-8765-83b1c0eaf4b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111211 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2026-111362", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:ab381175-f424-52e7-8b61-bf4e1cbc6422", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111362 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2026-113593", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:984eedbc-43a6-53f2-b7eb-6798ae724634", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113593 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2026-113733", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:4aa509a3-87e1-5780-b406-35ab0fe7310e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113733 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2026-114582", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:5349d7ba-61e8-5123-a58e-3444e7ab1685", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-114582 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:5a81ae20-8ffe-5015-b871-ef9430109d18", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:59c0601d-13a3-5846-868a-23e049fbed7e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:652273e1-feb2-536a-abef-e0106fc240a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:f6162a3c-e416-5179-bf63-58fb587f0551", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:4c9cec0f-4049-5a7d-8c0e-a770dd7b6c90", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15307 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:1c50a972-d936-5d99-864e-b9b938af6898", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15830 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:6bb322b3-3032-5e04-86e2-eb7e2006fa7e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25673 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:654be0bf-351a-5795-9664-602f67d735b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25674 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:9db9a346-273e-56c0-a623-82934e84cc38", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33033 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:5ac45f5a-c554-56b3-b95a-3ea1e747cf99", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2026-35192", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:17607b2c-7d88-588d-acaa-499a200227f2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35192 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2026-35193", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:f268fdb5-43d9-597b-9f7c-6cec89f48b41", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35193 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:5fbf30e3-50bc-5fde-bf36-aa16b47185b5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-3902 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:23732239-f3d4-5794-8b41-3f43321cd8e8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-4277 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:6d0bcea9-c1d6-59e6-8ad6-3f948b98c8bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-4292 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:cffcd579-37e0-5b36-9a8e-1fac08c1ee8b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:18107c6c-7a58-524b-a2ec-d1177eb22b79", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:95a52fb7-1fc1-5b28-af6a-11e21224eff2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:e2fd8157-531b-58c3-aa06-6c5db68ad0a9", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 4.0.post27+tuxcare of django. not_affected \u2014 Django 4.0 is not affected by CVE-2026-53878. The vulnerable component DomainNameValidator does not exist in this version (it was introduced in Django 5.1). All domain validation in Django 4.0 is performed by EmailValidator, URLValidator, and _simple_domain_name_validator, which properly reject domain names containing newline characters through various mechanisms (regex anchors, explicit unsafe...", "justification": "protected_at_runtime" } }, { "id": "CVE-2026-5766", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:9e7e1bc1-ffab-5742-a8b7-98582b5b9f9c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-5766 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:b93e73c5-422a-57f7-8dd1-e8571c64b2d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2026-6907", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:d6c60322-d62c-5555-9ce8-79e263300346", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6907 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2026-7666", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:14335606-0334-5464-b874-d07b64a294d6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-7666 affects version 4.0.post27+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ], "bom-ref": "urn:uuid:266f0dce-6d59-525e-af50-038ff2edf01d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 4.0.post27+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@4.0.post27+tuxcare" } ] }