{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e748e390-33f1-5618-8345-fdb837185f79", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@5.0.post16+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@5.0.post16+tuxcare", "version": "5.0.post16+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@5.0", "type": "library", "version": "5.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2007-0404", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:efaf27b0-6dc5-5ae1-8e1f-0cc96c9697c1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0404 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2007-0405", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:31c0909f-6f2e-5ce5-aece-8496e636df27", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0405 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2007-5712", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:8ffafd56-d843-5701-931c-750122baa9be", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-5712 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2008-2302", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:75ecb686-455b-5421-8fec-d50ccec5897a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-2302 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2008-3909", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:17430f41-174c-54fe-acc5-768952f4af10", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-3909 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2009-2659", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:9898dc5c-60b4-5043-9faa-7865857147db", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-2659 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2009-3695", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:158cb228-0740-5f1d-bde5-9f4c00ad04c7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-3695 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2010-3082", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:c1acbd2c-8268-548f-bdfc-d97c9f7d53fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-3082 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2010-4534", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:b7a8240b-a34b-52bd-b605-3aae788155b5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4534 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2010-4535", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:1eede5a6-37b7-53ab-b3b2-6547ea068722", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4535 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2011-0696", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:843c61b4-092a-5fcf-ae2a-648f9bd7a150", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0696 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2011-0697", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:b4931ede-48fa-5f6d-b489-79b7e91f16fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0697 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2011-0698", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:caa3bf56-8136-58ed-a865-cf3b528372a8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0698 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2011-4136", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:5e248287-9b0f-5bf8-b6f7-a6606b609c34", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4136 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2011-4137", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:1942ca47-caaf-5252-b76a-757ed61f9af1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4137 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2011-4138", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:8d552d9d-8619-5272-be30-5c1352bdc70f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4138 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2011-4139", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:b4bf686d-f7d5-5229-b732-fbaf1af53cc4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4139 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2011-4140", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:fcfc05f9-83d6-54c5-83f0-219a4df84ae6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4140 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2012-3442", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:bb84be60-5c39-5721-8cea-8ee77f6da4d6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3442 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2012-3443", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:348ed7bf-7266-5b8b-aa5b-1d6f27a67cb9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3443 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2012-3444", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:03e1c029-3879-5a12-b502-14997811a697", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3444 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2012-4520", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:546765b6-824e-5c6a-b2f2-335039454994", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-4520 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2013-0305", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:a6abfe63-8219-5aa6-b913-3ff193b6a74e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0305 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2013-0306", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:abeb912d-189e-5e16-9cba-53a9028322c6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0306 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2013-1443", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:3d75031d-8fe1-53a7-a678-1cb234516efe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1443 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2013-1664", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:9842fbe3-7330-58e0-8a16-54d9e26c867e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1664 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2013-1665", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:3fae55e6-6b77-5d49-aad7-a55c2c8a760d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1665 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2013-4249", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:a9e3d557-f5fc-53e2-b4a9-475907c4a73a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4249 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2013-4315", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:88d65a4e-6f57-5bc5-9149-bf8d301e7c21", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4315 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2013-6044", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:10603c90-2bdc-58f6-8ee7-78fa74a9fbca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6044 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2014-0472", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:560f65df-28d1-5896-bbf6-1d6bd545b744", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0472 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2014-0473", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:5e4e8510-b6eb-51ad-b5d4-ac66f3449e95", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0473 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2014-0474", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:0949c884-f322-58d3-b1f0-b093936f4f7a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0474 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2014-0480", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:6ac9826f-cc4e-5765-a09f-9e9bb8a2f1c0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0480 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2014-0481", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:a29b9cff-dea6-55d3-82d1-ac654af66451", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0481 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2014-0482", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:5031b2b7-7288-58fd-bd35-5360625514cb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0482 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2014-0483", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:110aad73-ce33-5618-81f0-6ed95c7a4bb7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0483 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2014-1418", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:9c35f9f6-2cf6-5afb-91ef-22ccab5641b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-1418 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2014-3730", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:ceed127a-8e9d-56c3-928f-245da01c841d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3730 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2015-0219", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:657bfebe-1a9d-5ba6-ba9e-2893e7d2f6dc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0219 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2015-0220", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:f368ca7d-ef68-5b95-931a-fe73787eeb40", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0220 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2015-0221", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:4fa777f1-dfad-57e4-9f2b-385a3aa3f772", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0221 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2015-0222", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:e7990372-f5a3-54b3-8113-4e6ef118f2f2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0222 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2015-2241", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:b034b8db-0657-5281-9ce4-68b38a01c042", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2241 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2015-2316", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:7ccbca83-a05d-5069-84e6-9df46ab52e74", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2316 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2015-2317", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:f745bac5-4591-5515-9bff-cd32a07a1f27", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2317 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2015-3982", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:7c34e5b0-c632-5e0e-8af8-50a07b00d024", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3982 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2015-5143", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:0498be8e-20dc-5be6-8dc7-1e05ed5c5f11", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5143 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2015-5144", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:c465fe8a-1bdb-5903-bd4e-b98285ac3d08", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5144 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2015-5145", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:63d4b625-c8f4-50d7-b170-bd7d575ad0b0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5145 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2015-5963", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:a9d10b42-be81-561c-9892-de9734bf9ed6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5963 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2015-5964", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:b7f7545b-f7a8-5058-b63b-0007736f7ebc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5964 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2015-8213", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:b6c241a5-f7f7-50ae-b4ce-ab28f3f419f9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8213 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2016-2048", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:a5133830-8a19-54e2-8976-aa9f2c8c6f49", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2048 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2016-2512", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:db5054a3-0513-56c2-996e-7edec7a009ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2512 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2016-2513", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:602082aa-7e3c-5c7e-8a2d-47f13bcfa71c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2513 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2016-6186", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:c41aab03-acb2-5dd6-b2a6-5fed73d55248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6186 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2016-7401", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:b36b100d-44b4-52c0-a5f9-7088f8e87843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-7401 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2016-9013", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:22892ea3-78e8-5796-b5f0-a6a9acfce629", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9013 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2016-9014", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:08a29375-5a99-593d-b94a-33d912f8164c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9014 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2017-12794", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:9977e480-cf61-5ea9-aa31-b539f01a51ab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12794 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2017-7233", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:ede8a290-ca17-5f46-86b2-475fb5e046d6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7233 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2017-7234", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:55cf779e-70e7-565c-a619-e8297d33a5c2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7234 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2018-14574", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:7721a8d1-7a52-5ea3-9338-fd0788893bf0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-14574 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2018-16984", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:03ba00d9-381f-58da-bc94-119e626b99b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-16984 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2018-6188", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:6507a48f-003c-5022-b9f9-5126674639a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-6188 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2018-7536", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:426e29e7-df7b-5c2a-ad9b-ee2704c56112", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7536 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2018-7537", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:9bcc31fd-4cc4-5868-98af-9f9b24a4605a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7537 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2019-11358", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:4135a7a3-9f46-5638-add5-63f7bd75d23b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-11358 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2019-12308", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:804b48eb-a2c0-580b-b3f5-833e6c21add8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12308 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2019-12781", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:e1578394-072e-5114-a91c-2d38e696b5fd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12781 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2019-14232", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:ea47551a-7e49-58a1-8c6e-f9e29b63b515", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14232 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2019-14233", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:27a9fbca-fe22-583b-a819-13826828ec77", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14233 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2019-14234", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:64a574fb-de6b-56f2-a9fa-8caf89345adc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14234 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2019-14235", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:8795efdb-f9ae-52ab-a543-a095ce2883b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14235 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2019-19118", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:8b524ec6-2d1a-5a4b-b93e-0808e10222d6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19118 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2019-19844", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:716e9a8f-036d-5e97-861f-363082fe9156", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19844 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2019-3498", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:f76e8964-a59e-5bcd-bd2c-46116c166078", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-3498 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2019-6975", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:79fe0f6b-0a3f-5fd7-8b30-e527c3147e2d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-6975 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2020-13254", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:b8c49869-178c-569d-84b3-70dc8fe8bbb3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13254 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2020-13596", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:2811b4a6-5009-5c6c-ac1f-bb9944cdcb18", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13596 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2020-24583", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:fdb476af-cc1f-591c-975b-d40ab7417411", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24583 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2020-24584", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:4d46db6e-1113-539a-9db3-afa4e17d51bd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24584 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2020-7471", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:6fd38a4a-2b01-5204-8335-77cd9d48e550", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7471 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2020-9402", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:fd19596e-6687-597c-a43d-9c2966c860eb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-9402 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2021-28658", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:633287a9-1eb7-521b-964a-26a461fffab5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28658 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2021-31542", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:a897c207-ac7e-518b-9f3b-aa560081816f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-31542 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2021-32052", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:7ba67ce6-f631-584a-86be-89e70c913c66", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-32052 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2021-3281", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:2f9a5ce6-7262-50c9-bc7a-8015b5badce8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3281 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2021-33203", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:f2a02470-b326-5b94-b355-9cb58e45c482", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33203 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2021-33571", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:0ea850ff-0e2b-5ba8-a0f5-e7fe38d0391d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33571 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2021-35042", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:b1bf05c8-82f4-570b-a6ce-8d746f4f2317", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-35042 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2021-44420", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:016076f0-e435-5c5c-9604-1e24a8ad39de", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-44420 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:1ea4abe4-cd0c-57c4-ab2a-d1462a496249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45115 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:72755ead-80e6-5b61-bd3e-b2c58c5faf3a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45116 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:f0174ab8-e140-5873-a628-415c4162f03f", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-45452 does not affect version 5.0.post16+tuxcare of django. not_affected \u2014 CVE-2021-45452 (directory traversal in Storage.save()) is NOT present in Django 5.0.0.post20+tuxcare. The upstream fix (commit 6d343d01c5 by Florian Apolloner) shipped in Django 5.0.0 and predates all TuxCare commits in this branch. All defense mechanisms are present: backslash normalization (base.py:75,116), path traversal detection (base.py:77-80,119-122), relative path enforcement (filesyste...", "justification": "code_not_present" } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:332d3f88-8e60-502f-a14b-fa46603a034b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22818 does not affect version 5.0.post16+tuxcare of django. not_affected \u2014 The target Django 5.0 repository is NOT AFFECTED by CVE-2022-22818. The vulnerability (XSS via unescaped output in the {% debug %} template tag) was fixed by Django upstream in commit 394517f078 on 2022-01-02, three years before this Django 5.0 release. The fix\u2014which wraps pformat() output with HTML entity encoding via escape() and blocks output when DEBUG=False\u2014is present at django/template/de...", "justification": "code_not_present" } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:1a715b21-0275-57eb-b849-8c0770197d61", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-23833 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:c21df288-064f-552d-adbe-27a09f9d8f25", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28346 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:1a328727-b957-59f5-9cd1-05af46110a0f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28347 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:ee0f5e1b-93b7-5b14-a1f6-d2119e9daabc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-34265 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:fc7fb8b8-572e-5c59-9f3d-27556f5b83e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36359 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:99127e6f-0e89-5824-97fb-16b2f99b4ae8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-41323 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:701c9a62-24cb-541e-a101-e88c5f78ff87", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-23969 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:416ae4c8-1137-5d28-838e-b3a89dfe7a3f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-24580 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:37361b9b-399f-5f01-8fdf-8b2cdea6eb7b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31047 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:62df019a-828b-5f08-9fa3-55eb08f7d652", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36053 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:c2ed035e-f085-5111-8a2c-dd193794a9df", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:f46229e4-f92e-5cda-9874-f389c59db542", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-43665 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:7c72dd64-ebc8-5076-ba9f-101d9dfa9c9f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46695 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:9584aa42-37db-54f6-9d9d-0766bd9b837d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24680 is fixed in version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:8898b441-fdd6-5c78-b77a-caa5e89ad52b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:bc82fc38-8d91-5949-aad3-002f14bb7cda", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:5a41fb48-d764-55ee-83d3-e83fd99e4a89", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is fixed in version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:1b540c2e-adfb-5478-b0ee-a4a27b17af12", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:9631f996-19a9-5c0c-8926-cf8a4b0fd972", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is fixed in version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:3d9275cb-2f5d-591e-9bb4-67b287c2f512", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41989 is fixed in version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:4228e76d-3de3-5e63-b786-f4942c25ad69", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41990 is fixed in version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:7385ef1d-9242-52bd-bf4e-fd3a24fa7ee2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41991 is fixed in version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:9e531ff3-d8c1-5483-8a09-2c4f4359396a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-42005 is fixed in version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:5185df5b-c95b-5157-8e1b-a12f4dc3845f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45230 is fixed in version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:15de8ffe-0065-5744-975c-25041839d58a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:fb7fb1fe-c3bf-5a5d-be7d-544a5875fc5b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53907 is fixed in version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:b8ae16ff-9a6e-5761-be0d-2553829760cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:dc3d65d2-4984-5c78-9f0d-3e49f209e2d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56374 is fixed in version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:f6240b89-79ba-5d90-ae0e-c5c463876c9f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13372 affects version 5.0.post16+tuxcare of django, and is fixed in 5.0.post17+tuxcare." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:be6c7ab1-b82e-5daf-bca6-c5930960bb45", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:fea8e69e-572e-537e-bcdb-00f38d861c58", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-14550 affects version 5.0.post16+tuxcare of django, and is fixed in 5.0.post17+tuxcare." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:5e40d208-9144-5ad6-87f1-430e50a139f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-26699 is fixed in version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:86396557-33e1-5fff-ad6b-2bcb76bd8155", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-27556 is fixed in version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:fc513cf9-5b54-58d4-91bd-7db226df52eb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32873 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:b0c222a9-9d0d-589d-bc84-272b700ef0e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:177600e6-09a6-52c5-8197-137ec162af3b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:dab22881-ec90-5251-be35-d8942fa7fd3a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59681 is already fixed in version 5.0.post16+tuxcare of django. CVE-2025-59681 already fixed on tuxcare-current/5.0 by 9f60b363dd, released in 5.0.post10+tuxcare; alias 'x#' rejected on 5.0.post21 from Nexus." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:ebce3dc5-4c27-5966-8fe0-335e09b895ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59682 affects version 5.0.post16+tuxcare of django, and is fixed in 5.0.post21+tuxcare." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:44f3fb3e-08a5-510d-a00c-840c5ad8ab1d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:e089f890-8688-56b4-b030-367c4877de6f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:7a9914fa-a2c6-5ac3-8639-e2af59627ceb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2026-108147", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:9f55e4c1-9b86-5679-a1b8-df80f566e448", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-108147 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2026-111211", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:5d1e4eb2-d23f-5676-81c1-c1168d8abfd2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111211 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2026-111362", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:e8fd8142-bf39-55a1-9694-8aefb98679d2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111362 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2026-113593", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:d0dbce89-1b99-5fdf-87cf-c7f99d509891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113593 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2026-113733", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:161568c8-489d-544d-9cbe-96a3c2f9462b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113733 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2026-114582", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:3abce8bc-f695-5f5e-a670-06c688551f86", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-114582 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:3a44ac15-e60b-5bc0-aa2d-64bc3a335410", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:5b1e7eff-5502-54e6-a382-3331560d3991", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1285 affects version 5.0.post16+tuxcare of django, and is fixed in 5.0.post17+tuxcare." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:32f95cb5-ec0f-5749-9529-b23c6e93b73a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:ffe8083f-8db9-5546-bffc-6aed8fe81c8b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:e3647b77-c4a2-58e3-989e-9f7e3bc755e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15307 is fixed in version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:6063ef3c-2b79-5aed-867a-27916c0fbe24", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15830 is fixed in version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:be41e298-e733-52cb-8d09-41d0dc25d471", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25673 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:a7b46306-6a4b-528b-9b19-d8d89c8fff8e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25674 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:96a7e5b3-f994-5b04-8290-d5be70bced37", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33033 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:e0352ee2-ca3e-597c-84a1-af96eb23ca30", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2026-35192", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:9b0cc519-8644-5f6c-9021-d3f88149133a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35192 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2026-35193", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:9d79dc45-8b43-5905-b9cb-a29f46470eb9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35193 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:d3e60f84-0f95-5989-97f8-04140e8e2e93", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-3902 affects version 5.0.post16+tuxcare of django, and is fixed in 5.0.post22+tuxcare." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:93cd00e5-5988-5aed-a1c3-561dfd83006c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4277 affects version 5.0.post16+tuxcare of django, and is fixed in 5.0.post22+tuxcare." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:858b5378-78e0-53aa-b488-37959b635b96", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4292 affects version 5.0.post16+tuxcare of django, and is fixed in 5.0.post22+tuxcare." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:8661f8fc-6d99-54c7-8154-799fa2e512bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:da0a71b9-fc4c-5ba0-924f-c88c57eecba5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:1f420f26-2bba-5641-abc1-97582cdf489f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:e08f1fd6-6ef5-5e34-a58c-0c5108af782c", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 5.0.post16+tuxcare of django. not_affected \u2014 Django 5.0 does not contain the vulnerable DomainNameValidator class. This validator was introduced in Django 5.1 (commit 4971a9afe5). Since the specific component affected by CVE-2026-53878 does not exist in this version, Django 5.0 cannot be affected by this vulnerability. Additionally, all domain validators present in Django 5.0 (_simple_domain_name_validator, EmailValidator, URLValidator) a...", "justification": "code_not_present" } }, { "id": "CVE-2026-5766", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:2790bf59-0a19-581a-9325-ca2a4fadfd6a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-5766 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:3e9a8532-a779-5685-a252-303bce20d6cf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2026-6907", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:3e3a52c4-4cd0-5791-8da2-9eb339992f63", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6907 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2026-7666", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:f2fe2efc-4958-5257-bba8-feaa01b3e20a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-7666 affects version 5.0.post16+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ], "bom-ref": "urn:uuid:ad2ffe70-201f-5d97-8fb8-25edaf8b3b54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 5.0.post16+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@5.0.post16+tuxcare" } ] }