{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:4d029869-ed1f-5326-aa89-153b4e921e65", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@5.0.post15+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@5.0.post15+tuxcare", "version": "5.0.post15+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@5.0", "type": "library", "version": "5.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2007-0404", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:df95255a-3ab0-5155-b65d-0b537b089307", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0404 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2007-0405", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:8f640b21-13e2-551b-b596-8abdfc884b79", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0405 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2007-5712", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:bcdd7da6-b85d-5647-8292-55abed9be7e5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-5712 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2008-2302", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:efcc90f5-8f93-5db0-aeb7-2014c310cb32", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-2302 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2008-3909", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:22bbf397-5dea-523d-bc24-dc0cec44da39", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-3909 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2009-2659", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:b97460e9-4899-54d6-b12f-8513cefa0c04", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-2659 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2009-3695", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:21fba0a0-6d8f-50d7-b055-653ccf151b09", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-3695 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2010-3082", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:05497885-5603-564d-ac61-5c384a4892a7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-3082 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2010-4534", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:b96d15a2-6342-5e36-ba3d-a5f3b6b29e66", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4534 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2010-4535", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:368e99f5-540d-5f5f-9d64-ecb68c89e2fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4535 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2011-0696", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:ace8699f-5c18-5d69-abfd-3c539e00ea5f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0696 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2011-0697", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:985050f2-6ef0-52d7-8741-ad9f56fc89e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0697 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2011-0698", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:31dcc156-5011-5d8e-a958-9fadf48ddf29", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0698 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2011-4136", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:bdcb320a-e62f-5be8-898c-a2dc14c786ac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4136 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2011-4137", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:16859585-de83-53fa-8eb2-4ed00d3649a0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4137 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2011-4138", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:7602d51d-0e9d-5116-9eac-cee964f6021b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4138 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2011-4139", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:ce5edb15-fde3-5348-88e5-8d3be33b2e31", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4139 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2011-4140", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:69113d14-4f90-5f9b-88af-5fabd637d9b8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4140 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2012-3442", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:0953fd72-4a95-5bf8-98f2-753689c764ad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3442 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2012-3443", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:8f33b7a4-ba37-5473-80b5-9483416cd181", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3443 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2012-3444", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:b5fa6c6b-3cb2-5f4f-a044-823e22d6a7f6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3444 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2012-4520", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:400402cf-e689-5543-b217-5dbbbf9d11bc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-4520 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2013-0305", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:bc25b789-5fda-50e0-856c-397ea1c22466", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0305 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2013-0306", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:d6ef00b5-e003-521f-89e1-0e58a42ff475", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0306 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2013-1443", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:b441aa91-9d8d-5b5c-a554-dcdf32c7b3cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1443 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2013-1664", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:0eb5049e-5db1-54d5-9240-c30b31ef677c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1664 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2013-1665", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:67a7b580-df96-5da8-85ad-5572511c7e04", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1665 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2013-4249", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:1ca2b3a0-3850-5404-800c-f29a31e13734", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4249 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2013-4315", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:6b9d9c21-eaa7-5c4f-ae72-e7839d0c1b9b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4315 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2013-6044", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:c1c94179-6836-5364-aa20-c45d3f96290a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6044 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2014-0472", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:8a9cfbb9-289a-5a34-8fe0-f0c909c60450", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0472 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2014-0473", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:b7e0a5a4-dda4-5b82-8ee2-7155686136de", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0473 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2014-0474", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:b36380b5-ef9d-5439-8be5-3f167fb0aa72", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0474 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2014-0480", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:75620301-506e-58d0-b79e-ae802a5d2087", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0480 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2014-0481", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:bc16f501-50dd-594b-8850-0d575c6a4a90", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0481 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2014-0482", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:aa0ee118-e803-5009-b3d9-d48d443e26a6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0482 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2014-0483", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:d7605611-c55c-57d1-a331-89b11903bb2f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0483 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2014-1418", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:4ccca8af-f47e-5019-921f-50edaac990ba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-1418 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2014-3730", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:08792736-d8a1-508e-8c8a-a1bfc9569b56", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3730 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2015-0219", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:cf22b55b-f4e2-5d06-b061-9e89338a7377", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0219 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2015-0220", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:67aaf556-fde7-5e2c-97f1-9d03694a187c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0220 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2015-0221", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:6d490462-c0f0-5602-8ec9-6d26a86f4edb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0221 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2015-0222", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:37a23a9c-faee-58cd-b8de-b150d3f87a97", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0222 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2015-2241", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:519273bc-cdaa-51a8-88cf-864bbb30d521", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2241 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2015-2316", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:45026f45-2370-5968-a6b9-8ff592645c4b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2316 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2015-2317", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:3216bb75-9098-526f-b04b-eead8f0103d7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2317 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2015-3982", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:b592f071-f6a7-5834-a18d-464c0f605a5b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3982 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2015-5143", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:a925b19a-a256-51e1-bf0c-845406dd5fd2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5143 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2015-5144", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:1e8701d1-f006-5926-8220-474f0bc1a962", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5144 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2015-5145", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:4b12f5d1-c964-5e49-b490-11f9bde95882", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5145 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2015-5963", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:7224d47e-91a6-5c12-8d2d-41a2e12faf64", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5963 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2015-5964", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:6aaa6de9-4970-5b0e-9dab-9a82e27a4770", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5964 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2015-8213", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:a1afef0d-7efa-5388-b131-13bb95381b38", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8213 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2016-2048", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:d5708155-70ac-5b57-8dbb-96b4c2a436cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2048 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2016-2512", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:300b6c80-38d8-510b-93a0-1550f1b73df2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2512 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2016-2513", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:959ed8cb-d4c1-555a-a157-91c17ab0989c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2513 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2016-6186", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:32ab8077-85df-5900-9fb6-9fa68ccc792b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6186 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2016-7401", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:c2cef442-f122-54c0-9da7-fa7faac3ea1e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-7401 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2016-9013", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:cde686e7-2b6a-53a0-90d4-4299afd62239", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9013 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2016-9014", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:06367a77-7e94-5f91-ad1b-c829e69a6dcf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9014 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2017-12794", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:7ba12f75-507e-5593-bb34-51c2714e4bf1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12794 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2017-7233", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:3fac0caf-cf00-506e-8b15-404aecc98b4c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7233 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2017-7234", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:658ff05e-5620-57f1-8924-cbf1ce779ed8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7234 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2018-14574", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:c441ee4b-2701-5109-b511-7f4f451bddae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-14574 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2018-16984", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:063ccbaf-1bce-5515-bc8e-7947d65d251b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-16984 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2018-6188", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:e54a9507-d33d-5c97-9e7b-a497dd87a306", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-6188 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2018-7536", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:f07c751d-8c8e-54ff-9189-e66d598ab24d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7536 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2018-7537", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:6524f72c-1d65-5361-9d85-354034ff1035", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7537 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2019-11358", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:8f4c8bb9-a575-5647-8dcf-f14a3c74e60b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-11358 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2019-12308", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:0b2396e2-a99e-5b3b-a61f-4da852ff42dc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12308 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2019-12781", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:2609f050-13f9-51c6-939e-033708980f7e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12781 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2019-14232", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:2e522010-5668-5770-bdb2-0eb29274aa0a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14232 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2019-14233", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:676ea53b-817b-5347-b99d-a3f711d0ba49", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14233 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2019-14234", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:199a0840-ea05-5c9f-a272-b8d0c6f384c9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14234 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2019-14235", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:45104d61-2deb-51bf-b38e-c028aa2f5df2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14235 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2019-19118", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:8fdb927b-12ef-519a-b75e-f1a1a7c14398", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19118 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2019-19844", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:65263b76-e590-5275-9f68-a4b8e4543f67", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19844 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2019-3498", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:7483edff-4b13-51c4-a13b-269e021cc081", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-3498 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2019-6975", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:c2df129b-ba07-5522-8a24-66e4f57741f2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-6975 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2020-13254", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:67643751-cff9-5673-b628-ebe7c705e175", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13254 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2020-13596", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:fa1a2968-15a7-57a1-b0a1-058a2574584b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13596 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2020-24583", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:a101f27a-0bd1-5e02-b902-6f70b2d20bc7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24583 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2020-24584", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:e6ba19ed-0116-557d-8724-774aedd4a753", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24584 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2020-7471", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:7eaf3b7a-5afd-5cff-96f6-4ae10fbbb2e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7471 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2020-9402", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:db9704ab-ea6e-50ce-81a4-cd6b54d91525", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-9402 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2021-28658", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:aabbecb9-27bf-58e5-982d-ecf3bc7b0cad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28658 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2021-31542", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:d8172248-7417-524f-a665-807c6deb0e61", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-31542 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2021-32052", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:9eee1fba-3f2a-5c88-8797-57dcaf8f624d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-32052 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2021-3281", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:d8c80485-87f6-5f15-96cf-7fd2286009a8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3281 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2021-33203", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:a9a1f07a-6a3f-517e-8672-0be3a563a59d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33203 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2021-33571", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:6e0aa01d-232a-53db-9a5f-793e52c6e24b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33571 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2021-35042", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:25730e13-5245-5798-9a4b-5df775a51bc1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-35042 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2021-44420", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:da20eee8-9cbb-5c6f-8e1e-ce1ddc1a93b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-44420 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:8a807423-61e9-5729-bd6b-7bc598ba3dbb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45115 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:4e364579-5622-5a03-87e6-2af048c1546f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45116 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:bdc2b408-b2bf-572f-9f98-e6259d2f5b7e", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-45452 does not affect version 5.0.post15+tuxcare of django. not_affected \u2014 CVE-2021-45452 (directory traversal in Storage.save()) is NOT present in Django 5.0.0.post20+tuxcare. The upstream fix (commit 6d343d01c5 by Florian Apolloner) shipped in Django 5.0.0 and predates all TuxCare commits in this branch. All defense mechanisms are present: backslash normalization (base.py:75,116), path traversal detection (base.py:77-80,119-122), relative path enforcement (filesyste...", "justification": "code_not_present" } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:97feb9a8-55e9-5524-8690-ef0a0bdc6a32", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22818 does not affect version 5.0.post15+tuxcare of django. not_affected \u2014 The target Django 5.0 repository is NOT AFFECTED by CVE-2022-22818. The vulnerability (XSS via unescaped output in the {% debug %} template tag) was fixed by Django upstream in commit 394517f078 on 2022-01-02, three years before this Django 5.0 release. The fix\u2014which wraps pformat() output with HTML entity encoding via escape() and blocks output when DEBUG=False\u2014is present at django/template/de...", "justification": "code_not_present" } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:62092e2a-5fdf-5724-98fa-10b303a540ba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-23833 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:60052eb2-85c2-5545-bb50-034e2c943c11", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28346 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:2205f455-45b4-52bb-9c04-d8d92f46ca86", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28347 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:1d7c97a9-c059-579f-99d2-9f200e120ea5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-34265 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:0cf2245e-bf40-54e7-a515-60958b16690a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36359 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:3743fe92-1370-5b99-ab75-41889db026c8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-41323 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:b6d55c64-baaa-5c6f-8504-272dec526fd1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-23969 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:dedb62fd-b8a9-54c6-af5b-a77eeccf32e9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-24580 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:e58bd6e0-6938-5289-bd8c-546f31d37741", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31047 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:67055e6e-2c8d-5717-bd93-74f7b0f26e4f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36053 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:6e0b927c-9971-5661-ba6b-3caac063b082", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:6222d94f-44b7-5c2b-b383-e46d1d21b432", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-43665 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:efded0bf-0ee7-5b97-9712-b6a3f1d1f88d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46695 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:34853051-4a02-54f1-b11c-4b9227fa5d08", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24680 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:7fc3c7f2-582c-50d2-83b0-53995ebc53f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:7b0f6a08-9f5b-5738-80f9-a99d44f7b8e0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:6df2d0f7-4088-5dee-af72-40a210544741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:fa8e2a46-6270-5d4f-9880-ad5de14ca837", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:07212900-165c-52b0-9ec0-cef6c6f4b686", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:1924df8b-1745-5f4e-b174-ff46d9d7672e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41989 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:c03edc13-2de8-5e40-b8c9-7a8b5169c7a1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41990 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:68464b24-866c-5e38-a30a-5f9d7d503b84", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41991 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:3a48c0c5-cf51-540f-bca3-e9b9ff23bd50", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-42005 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:527cdac5-50f2-5333-acec-2c7d6ce24089", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45230 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:77629ec3-2845-5a51-98a8-5387f86a999d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:fab17661-05d6-5f10-b4e6-8c3315cb3109", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53907 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:ada44b6d-c81a-5ff1-9a2b-e4875ec96b57", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:c27dff68-1344-5843-9c8f-145881fb1ef2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56374 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:3ca666a2-6ac9-5ece-860a-ce1587d041c0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13372 affects version 5.0.post15+tuxcare of django, and is fixed in 5.0.post17+tuxcare." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:1c244209-3718-52f3-8773-8cc4611608e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:eead2434-3958-5fcc-a38e-b51917b01be6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-14550 affects version 5.0.post15+tuxcare of django, and is fixed in 5.0.post17+tuxcare." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:d51b8300-1861-537f-931a-dbadb5fa7a77", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-26699 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:99677b4a-4b10-5713-8e50-5895781bf3eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-27556 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:6f9b6166-ca9f-55c5-b3c9-bf5d1ce1ab14", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32873 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:aff8cdae-6a7f-5296-bb25-7192ac1a8490", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:24af6f62-6de9-5744-b01e-77c0d93d267c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:7a6f1e8b-9ab1-57a7-812c-745310884508", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59681 is already fixed in version 5.0.post15+tuxcare of django. CVE-2025-59681 already fixed on tuxcare-current/5.0 by 9f60b363dd, released in 5.0.post10+tuxcare; alias 'x#' rejected on 5.0.post21 from Nexus." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:ca4fa733-44b0-5b47-8334-ca8b4f4e85a0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59682 affects version 5.0.post15+tuxcare of django, and is fixed in 5.0.post21+tuxcare." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:f7620641-97ca-50c7-b985-9b3d984a9c54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:7dffb6b9-1879-5249-a5c7-51cd1a4b1550", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:08edc75a-183b-55a2-a9d1-0d1066b114f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2026-108147", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:32535240-972a-5e29-b94a-d293146bf532", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-108147 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2026-111211", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:50080ba4-e9b1-51a9-bd72-d5a41232b231", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111211 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2026-111362", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:7e0a0c6c-1105-53ff-b9aa-f57ae7a227df", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111362 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2026-113593", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:a2fe562c-3d25-5f7d-844f-facb54d360e0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113593 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2026-113733", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:e8621479-8a57-5fd2-9ee0-055942eaafac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113733 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2026-114582", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:b273dd75-8db4-5d42-b682-e151850502c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-114582 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:0379757e-03d3-574d-be4f-cdfd76881e4b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:64d58917-bb9c-51af-a7f9-c33dea2dd83b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1285 affects version 5.0.post15+tuxcare of django, and is fixed in 5.0.post17+tuxcare." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:fa974b8b-cee2-5284-a5c5-7389197980dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:c3dc3944-e14d-5aab-a966-afed7ae0c88d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:eb763f6c-5850-5592-88be-c4a27c415899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-15307 affects version 5.0.post15+tuxcare of django, and is fixed in 5.0.post16+tuxcare." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:67288870-2602-56f8-9276-aa83e3cea287", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-15830 affects version 5.0.post15+tuxcare of django, and is fixed in 5.0.post16+tuxcare." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:6be3e53a-a510-57f7-bb01-e769974f9e72", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25673 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:e7d3febb-f4b3-5f09-82b6-7015f2a31d57", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25674 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:2939aff0-2d6b-5f16-a600-9dd5b416c7ac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33033 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:2f1630d6-94a7-593d-85ec-68a031daf3ac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2026-35192", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:33bb86cc-4bfd-54bf-b85c-31d8ae48b167", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35192 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2026-35193", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:78036d65-3be6-542b-9094-32a49d487f42", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35193 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:f35ecaab-d37b-5c88-b7fa-f61259f21c86", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-3902 affects version 5.0.post15+tuxcare of django, and is fixed in 5.0.post22+tuxcare." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:6c49bf5a-ab03-5c19-8658-f7766e2a93d1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4277 affects version 5.0.post15+tuxcare of django, and is fixed in 5.0.post22+tuxcare." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:aad2ac2f-4e5b-5267-ae36-39605ac73c5d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4292 affects version 5.0.post15+tuxcare of django, and is fixed in 5.0.post22+tuxcare." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:692ad389-f53e-5a6a-9e77-b4139db7f7ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:fd60b8fe-8324-53be-9de6-90c79d3d4502", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:70a312d9-79a9-5eeb-b344-5ecb096f7819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:99c22e25-5dc1-581d-a5f3-dbbb5225ae15", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 5.0.post15+tuxcare of django. not_affected \u2014 Django 5.0 does not contain the vulnerable DomainNameValidator class. This validator was introduced in Django 5.1 (commit 4971a9afe5). Since the specific component affected by CVE-2026-53878 does not exist in this version, Django 5.0 cannot be affected by this vulnerability. Additionally, all domain validators present in Django 5.0 (_simple_domain_name_validator, EmailValidator, URLValidator) a...", "justification": "code_not_present" } }, { "id": "CVE-2026-5766", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:72b2e6cb-f51f-586c-9444-a8bde1278681", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-5766 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:4dc6588c-3ede-5ad2-bbb1-1f34fcaff5c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2026-6907", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:54c737f6-2fe6-552d-baed-5bd729c8d95e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6907 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2026-7666", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:1ec39d75-21ad-5eda-898b-996eae80fd23", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-7666 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:b0ec4b94-325f-5127-a192-76effef12c60", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 5.0.post15+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ] }