{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b4b2bd11-77e4-55d9-8aff-09b6f4340f78", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@5.0.2.post10+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@5.0.2.post10+tuxcare", "version": "5.0.2.post10+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@5.0.2", "type": "library", "version": "5.0.2" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2007-0404", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:fdf3128a-ea0c-5fb6-8acb-56de48b43850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0404 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2007-0405", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:b86aec57-098b-5038-83c1-70acbf95a89e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0405 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2007-5712", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:29bd2a96-422b-51fd-a92f-5842b8d99ae4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-5712 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2008-2302", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:cbc9061f-596a-5e00-bb5c-79437edbd16f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-2302 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2008-3909", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:e60e8520-3e07-556b-bc2c-e4c51ed94493", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-3909 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2009-2659", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:771f5ef6-1c61-5490-9864-2402b02ed99a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-2659 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2009-3695", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:2ec128f2-1f91-5ffb-a508-9639032a11f9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-3695 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2010-3082", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:f034db7f-ae44-5747-a670-8351342663ac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-3082 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2010-4534", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:4300dc70-ca27-5ab9-b3f9-12d3f6ebe510", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4534 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2010-4535", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:37fd3e4e-2e00-527b-814e-1f3395ebb506", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4535 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2011-0696", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:e5c1c79c-beb9-5389-a293-10d82c55fc3e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0696 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2011-0697", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:ca447ed3-295c-5bfa-8f24-f09c33e43f9b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0697 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2011-0698", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:e441bb4d-6aca-50ff-9aef-36215c095bfa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0698 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2011-4136", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:a17f2144-19f2-5266-933a-e21f7ff694bc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4136 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2011-4137", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:8e4ad078-7d93-5f66-8142-6d7a42c35786", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4137 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2011-4138", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:2d2a67ff-fd2c-55ea-8faf-4dc83f808d2d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4138 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2011-4139", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:ab314215-d47e-591e-b3ba-60419df62cbe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4139 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2011-4140", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:4c38336d-37e3-50d3-8b21-e9d5dc98cbc9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4140 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2012-3442", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:30883158-a37d-5bdb-b9ec-9c5db2932e27", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3442 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2012-3443", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:2200ea68-a880-50bb-aa31-ed5c8e5e564b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3443 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2012-3444", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:f3a676d3-23da-5226-adc9-14dc85d1ddd7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3444 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2012-4520", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:6f14cb97-5c8a-5512-af4d-bd01f72e8324", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-4520 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2013-0305", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:d3f2d166-e2de-5864-97de-c37f1cf19566", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0305 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2013-0306", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:31918a09-19e8-551b-9658-04bfe088aeda", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0306 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2013-1443", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:609ef4dc-1f69-5e1b-8ce5-3d03ac8a4eae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1443 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2013-1664", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:9a65e971-8f36-5b34-9720-d5c9483dba62", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1664 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2013-1665", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:00426166-e8e8-57a8-9a14-4a84f39996f3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1665 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2013-4249", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:7218843b-5a82-5cf6-b210-2a098d603cd9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4249 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2013-4315", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:14274905-c4f9-50a6-a8d8-88b42c80dc92", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4315 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2013-6044", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:4e119857-5c53-5091-b8ee-5f686e713da4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6044 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2014-0472", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:8d1f2ab1-4d83-519f-9abd-86d629a3004d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0472 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2014-0473", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:2cb6aa2d-6132-5a6c-a6b8-e9dc9742add5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0473 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2014-0474", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:7e7b25e7-1067-5f5e-b24a-ebccb128e51f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0474 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2014-0480", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:8ada01b3-fc8e-5471-a214-655e286c0501", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0480 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2014-0481", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:e22e91e7-b0ec-529a-aeee-0946a1a48ce1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0481 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2014-0482", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:71fa4a93-b43f-5c16-815c-39e3131705f0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0482 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2014-0483", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:77cf61cf-27a6-52ec-8e8c-08a5d0f22a58", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0483 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2014-1418", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:8ea1dd1c-369a-529b-aecd-4a1432440e0c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-1418 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2014-3730", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:d556f0fa-3ec8-5cff-b3aa-cf40f41dcb20", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3730 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2015-0219", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:b790e100-4c38-5434-8be4-ad0e3bae0bfa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0219 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2015-0220", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:41f6c176-6748-55df-8ee3-c86a5f433f14", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0220 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2015-0221", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:f78744e7-5454-5d46-b1c3-c75e4cdb68b3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0221 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2015-0222", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:16d9942a-5a6f-5ef1-a384-bc8bce389ec8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0222 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2015-2241", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:131f41e8-cdff-52bb-a92f-5800799b7d11", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2241 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2015-2316", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:95adb90c-277a-5a72-a203-7c9a6f5eefc3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2316 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2015-2317", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:1dfa4fbe-fcf4-591c-8dc1-e4d36f63f44a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2317 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2015-3982", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:6417932f-dc1b-5dae-ae45-4ca7d0984290", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3982 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2015-5143", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:661b50c9-3ea4-57f2-9533-20513ec4cc80", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5143 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2015-5144", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:3c953c44-577b-5da2-aa8a-709d056cdae5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5144 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2015-5145", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:7188b0d4-a02a-5a2d-a737-99adb4a3f14f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5145 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2015-5963", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:1566f28c-3a7f-53e2-90ed-03cd8305ba5f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5963 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2015-5964", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:0299dbec-f117-5b81-86e5-4fd63aefddcb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5964 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2015-8213", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:10bbe6ea-ca7c-551b-bf43-c0d473257649", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8213 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2016-2048", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:4c79680b-6cdc-538f-ad2a-3dc46189d399", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2048 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2016-2512", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:ea1b9eaf-17b2-5d68-88d6-249576fd249a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2512 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2016-2513", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:a8629ee2-acdc-5fae-9844-24c0ddeb4d13", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2513 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2016-6186", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:464d908a-45db-55fe-8f4e-3fbfc93ea1c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6186 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2016-7401", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:31d533e2-4a1e-51e6-9120-57dbb752aad5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-7401 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2016-9013", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:17ab87e4-58e3-5cf6-9341-81bb8315c6ca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9013 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2016-9014", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:8ead9ffe-886d-5955-a540-866c73aa7b7f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9014 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2017-12794", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:02e3d30e-b8e1-5195-b122-d78a84152d1f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12794 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2017-7233", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:6eee489e-0fdc-52dd-a476-5fc919fe200f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7233 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2017-7234", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:6236e079-cccc-5f9d-9716-e3ad9fe40ea2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7234 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2018-14574", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:58e94358-80cb-5395-9367-83ba272d9231", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-14574 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2018-16984", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:db71ab58-d220-5c66-9e3d-508a0c76c7ec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-16984 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2018-6188", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:b8c0744c-6951-5cc0-a38a-e6d4bd55bbb3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-6188 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2018-7536", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:2010f858-85c7-5a4f-96a1-f59bac68e720", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7536 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2018-7537", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:1648a12b-de66-5315-a0a5-f6342858563a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7537 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2019-11358", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:1d71f1cb-e0ef-5003-be3f-723b4c932b14", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-11358 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2019-12308", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:7ac9f527-bbd1-563c-953a-7709f58be210", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12308 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2019-12781", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:4d8c15ae-8ed5-5892-a8ab-36f5e483760b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12781 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2019-14232", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:538b9010-8ebf-51a3-a8ae-bf27e96e7ee9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14232 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2019-14233", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:41dcdbc6-c92f-558e-b954-ca1145e406c1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14233 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2019-14234", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:cbfc7396-434d-52ec-a9d5-7f3d7e8f942b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14234 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2019-14235", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:23945ed9-f9d6-5b10-98ea-e52b851e418c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14235 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2019-19118", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:182412f9-8092-5097-b72f-13417b7de14d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19118 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2019-19844", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:7c4fc7c7-94fb-540e-9c00-cede43d331b3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19844 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2019-3498", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:0822a96d-208c-583c-a2b6-f587d1398c02", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-3498 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2019-6975", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:8b617768-f2c1-5335-9cd7-b4e78e9194f1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-6975 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2020-13254", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:a18cf944-3d8d-5368-bde9-2bb25918c85e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13254 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2020-13596", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:9a506361-c5dc-5831-a8a5-f9d923cb7986", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13596 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2020-24583", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:fbfd7560-4899-5b6f-9544-f47c3ad8162c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24583 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2020-24584", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:cf4a2c50-5bdb-5ad1-9acb-c3b080681a2c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24584 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2020-7471", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:3e6a8614-d70c-5492-aa25-ec530660c3d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7471 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2020-9402", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:89bb2b15-b059-5e24-83e1-f88232effabd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-9402 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2021-28658", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:b5d87179-6955-5adf-a608-f240372037c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28658 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2021-31542", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:25db392d-27d3-5110-964d-00c3e4f3cb89", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-31542 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2021-32052", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:27628f59-047a-500e-9cda-e81604d1f12b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-32052 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2021-3281", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:e0315c5b-b212-5947-b09c-4377911a37b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3281 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2021-33203", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:1e65cb60-0178-5693-8a9f-b88214bec39d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33203 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2021-33571", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:540dc8c4-f669-5442-a0fd-e319a91fc973", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33571 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2021-35042", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:5eef323d-338a-5f69-a95d-29495d9b721a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-35042 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2021-44420", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:3e104c0d-1a68-51a2-a179-55c0837bb725", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-44420 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:f8ad7939-11e5-56b9-a436-18425cc5e3a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45115 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:db9135f2-9d2f-5903-acf2-e888ec82d4c7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45116 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:8898ec98-7256-5715-adbe-c98ad163cd96", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-45452 does not affect version 5.0.2.post10+tuxcare of django. not_affected \u2014 Django 5.0.2 is NOT affected by CVE-2021-45452. The directory traversal vulnerability in Storage.save() was fixed by upstream Django in version 4.0.1 (January 2022), over 2 years before Django 5.0.2 was released (February 2024). All required defenses are present in the target: backslash normalization, path traversal detection via \"..\" checks, os.path.relpath() to ensure relative paths, and trip...", "justification": "code_not_present" } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:e9923ace-e7f7-5060-8c36-364dcbeded3e", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22818 does not affect version 5.0.2.post10+tuxcare of django. not_affected \u2014 Target Django 5.0.2 is not affected by CVE-2022-22818. The vulnerability (unescaped HTML output in {% debug %} template tag leading to XSS) is not present because the upstream Django fix was already included in the 5.0.2 release. The DebugNode.render() method contains both security measures: (1) early return when DEBUG=False, and (2) HTML escaping via escape() on all pformat outputs. CVE affect...", "justification": "code_not_present" } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:11d9b850-a2c7-56ac-8edd-b40cc62fedae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-23833 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:0327af3d-c2d0-5554-865a-dd1a09142f3d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28346 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:f87f0f2c-f15f-5882-ad2d-b0fcdded576d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28347 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:a4dd9751-99bf-5e7f-8969-51906dd93f3d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-34265 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:aaa9ba7e-77f6-5f08-8b05-d813b915fc46", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36359 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:a3ebd753-88d9-548b-b776-84dbe793813c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-41323 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:a01d49fa-9791-5b46-9de8-00d23f102c07", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-23969 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:720d773a-0015-5fb1-b80e-0322c2b8294c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-24580 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:cbafcc24-4ee7-52e7-ae7c-401ddb4237cf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31047 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:45010e1c-c56b-5613-8e89-6f16185b892e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36053 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:7f3403fd-2286-5eb1-8522-1eaf242a1c64", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:b02ca052-e9bc-5f37-9217-ef4af1c55d3d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-43665 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:1f2c1dd6-b5dc-58b7-bfdb-101c6137a99f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46695 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:797a4eff-d6f8-5c8f-a6d3-ac00cadb0f7a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-24680 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:cf5faf8f-e253-5f84-85e2-398cda9df503", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:ac548313-268a-5ac1-a5bd-545d7a18494f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:a5265f6d-34a2-5961-bc7b-042c4e754a6a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:62cfeca9-56a5-54bd-bd8e-4ce1ed7f93a8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:770edf6d-ba81-5062-84e4-79847fe4b9e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:cee2c45b-967b-56f0-897a-5c95c23d1831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41989 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:456b0b87-7de2-59d0-a754-d4fa16ec2d1b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-41990 does not affect version 5.0.2.post10+tuxcare of django. not_affected \u2014 Django 5.0.2 uses the original simple trim_punctuation implementation that lacks the vulnerable code pattern. CVE-2024-41990's DoS vulnerability was introduced by the CVE-2024-38875 fix (commit d666457453, June 2024) which replaced the simple implementation with a complex CountsDict-based one containing repeated rfind('&') calls. The target version predates this architectural change and therefo...", "justification": "code_not_present" } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:3559b098-1bba-54a9-bdf5-bac9ee08eb05", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41991 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:4378ec01-9594-5cce-bb56-a2ada0677efb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-42005 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:663f2784-20a9-5ac2-9e83-37392bb7c2ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45230 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:abb2ab22-8d93-5a10-968d-89ad21034367", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:129f6fac-ea07-5b29-9fa7-4da09334a38f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53907 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:9c4f9b50-ee51-550a-978e-c89b175ed8a1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:90f064fb-3e77-53c3-9f2b-4da11f5e94c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56374 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:668924ad-2718-5670-8635-06ea746c9247", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:a6f8eb84-c853-5a15-bc14-b9e1c8e0832a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:7a754669-9109-5b12-bd65-009898ce1dbb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:bb9f41f4-599b-5dad-85db-640f5776dca8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-26699 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:e042c187-d97d-557b-beda-8bdc36042c18", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-27556 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:f964b20d-bec7-58ce-8f8b-ff9454eea50b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32873 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:18f71eec-0f0c-55df-97cb-3370bbc6bb2e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:be43dfa8-466b-5213-8f07-a54bc0665f09", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:60be5166-ea66-5400-ade2-bd226a006c6d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59681 is already fixed in version 5.0.2.post10+tuxcare of django. CVE-2025-59681 already fixed on tuxcare-current/5.0.2 by 96d64ebe98, released in 5.0.2.post7+tuxcare; FORBIDDEN_ALIAS_PATTERN matches upstream stable/4.2.x; alias 'x#' rejected on 5.0.2.post16 from Nexus." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:34806294-60b3-52d4-bc98-e2e1c98e0dc4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59682 affects version 5.0.2.post10+tuxcare of django, and is fixed in 5.0.2.post15+tuxcare." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:4b3412bc-b493-57f1-81a0-476405a1ab2f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:b444d097-8ce8-5b89-9fb4-cdf7488acb25", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:d60b372c-dd0c-50d7-815c-fa101fd83cc7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-108147", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:b1a9581c-0400-5b72-908a-cacbc88ea78d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-108147 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-111211", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:20c9bb1f-d0fb-5d52-ac15-120447702f54", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111211 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-111362", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:6a47aa2d-efb5-50e5-9815-2c28e7c592c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111362 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-113593", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:a1b8cd3b-74d9-5f7d-9341-7381df405473", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113593 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-113733", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:0a45c0ad-1807-519a-a794-6a57f6b94ec3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113733 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-114582", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:30b635ed-0241-5a5a-bcee-e51858f23ae8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-114582 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:d08965ea-f78b-528e-a08f-88269b05efa7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:177d28b9-e8e7-524a-9334-62e5de875b55", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1285 affects version 5.0.2.post10+tuxcare of django, and is fixed in 5.0.2.post12+tuxcare." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:b2fa6cdf-136e-5d65-8188-ac506de7ebf0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:8963f888-b56c-5e5b-8f1e-a64c40581fde", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:952e745f-0358-5004-a20d-bc36afe08b1e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-15307 affects version 5.0.2.post10+tuxcare of django, and is fixed in 5.0.2.post11+tuxcare." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:aef900ff-bd61-5aa0-871d-844d171a01c6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-15830 affects version 5.0.2.post10+tuxcare of django, and is fixed in 5.0.2.post11+tuxcare." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:6ba823f5-6a44-56eb-bf7f-8ac3237613d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25673 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:c9edf391-1385-5958-852b-1d04a124ef0f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25674 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:d7544972-3990-58c4-818e-a91421f5a07c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33033 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:c90ff897-3e9a-5c8a-9015-31302ee23bc6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-35192", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:15190e27-851e-5e39-8ed8-4ac7095eb25d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35192 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-35193", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:b00366cf-c465-5925-a181-71a33c8d38f9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35193 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:4cc2bd80-c0d1-53af-9766-9c770ca3b700", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-3902 affects version 5.0.2.post10+tuxcare of django, and is fixed in 5.0.2.post16+tuxcare." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:14802a78-e748-5e68-8dc4-766469089da5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4277 affects version 5.0.2.post10+tuxcare of django, and is fixed in 5.0.2.post16+tuxcare." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:2164326f-016f-57ff-9264-ee60e15ccef4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4292 affects version 5.0.2.post10+tuxcare of django, and is fixed in 5.0.2.post16+tuxcare." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:9ff5df71-27d8-5559-8e75-488bbed50df3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:65d46b09-0619-5993-8637-5242b6a74f76", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:e0a17e61-f62a-5645-99c8-a5edeca24e40", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:3a29dec3-92d1-58b3-bb77-a7c0e593f40e", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 5.0.2.post10+tuxcare of django. not_affected \u2014 Django 5.0.2 is not affected by CVE-2026-53878. The vulnerable code (DomainNameValidator class) does not exist in this version - it was introduced in Django 5.1. Django 5.0.2 uses _simple_domain_name_validator which already validates against newlines via string.whitespace.", "justification": "code_not_present" } }, { "id": "CVE-2026-5766", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:2e6d3dea-5043-5a95-aa42-fe3da4304fc4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-5766 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:8f64b36f-245b-5837-b2e5-33f8ecd6cca5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-6907", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:4f4ce995-5049-506d-8b16-342725498300", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6907 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-7666", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:c07b0930-e775-58d0-b484-aeb218e8f37d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-7666 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:7d3182e0-64bc-547d-ba72-475eb70b0625", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 5.0.2.post10+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ] }