{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:d0cae1ce-7abd-5abd-8e89-a1aefb9dce30", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@5.0.post19+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@5.0.post19+tuxcare", "version": "5.0.post19+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@5.0", "type": "library", "version": "5.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2007-0404", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:a9d62e7e-276b-560a-b618-233abacfd353", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0404 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2007-0405", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:c223be5a-d393-537e-a03c-39e201075736", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0405 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2007-5712", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:056061fe-0620-5781-a49e-2f1d799e5e58", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-5712 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2008-2302", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:ff738adf-ec20-5735-814d-3a53d4351b56", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-2302 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2008-3909", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:f9457920-0c59-546a-bdee-7eccb887254f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-3909 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2009-2659", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:befff5cd-b23c-54eb-9c56-34872d172aa8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-2659 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2009-3695", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:245bee83-5995-59ad-ac07-ddeea41819eb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-3695 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2010-3082", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:d1584e11-1c96-51a0-9710-1acd5909017b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-3082 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2010-4534", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:eccaa001-d6ff-53cd-a312-ba217581bd81", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4534 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2010-4535", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:7cafdc59-ae95-56a1-8a48-3633bce04378", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4535 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2011-0696", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:59578cdd-a1fa-5742-a7f0-3f2b5be66138", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0696 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2011-0697", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:a3cbf443-d16d-5aad-92ef-b9c2f6b9edb0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0697 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2011-0698", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:03e9de4f-ddc6-5bd5-97fb-b45cc489f28e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0698 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2011-4136", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:ce1be67f-9e43-58cf-8ee0-1c2259b2a263", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4136 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2011-4137", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:da6f1689-d7e5-5628-ae2f-39b475bdf4cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4137 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2011-4138", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:9c84b401-f658-5f8b-a1d8-a08332d19b19", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4138 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2011-4139", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:616e39a7-1fc1-5109-a8f5-62caeb6e45b6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4139 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2011-4140", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:8851eb1e-0fea-5f19-9b9e-d8927770e948", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4140 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2012-3442", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:bc1d6932-c57a-530c-9dad-669012ec05d8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3442 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2012-3443", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:6aabdb76-0112-52e4-b31e-f85eaedd2c51", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3443 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2012-3444", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:a5a5ff3d-c8ab-5477-8a95-bfede83d7cf6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3444 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2012-4520", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:55fb1d16-2166-5053-b554-98183468d61f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-4520 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2013-0305", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:b667205a-316a-5e04-9841-ec8fbafab8aa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0305 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2013-0306", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:95af6fad-1b50-5e53-9842-a323e50d0fdb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0306 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2013-1443", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:d860b778-1c66-54d9-9794-bb1ebaf3f7da", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1443 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2013-1664", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:c4db549c-aca5-5088-9a9c-79f86712e897", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1664 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2013-1665", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:82bf0084-c2f2-51f7-b00b-a40eedf5986f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1665 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2013-4249", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:5a10461f-64b2-5b75-b839-1a286ecf4c1d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4249 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2013-4315", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:37c8dd7c-a77b-5b92-8407-726981588809", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4315 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2013-6044", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:a8c787e4-971d-5f79-8e8e-1d4710f01742", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6044 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2014-0472", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:9d229029-23ad-5f0b-ab97-1206bd6f2430", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0472 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2014-0473", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:db9d9785-d297-5cdd-a4fb-e5d5d0b50790", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0473 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2014-0474", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:d8e89477-7d85-56b0-a5f8-c46ad2b1e05b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0474 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2014-0480", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:47a70929-d9c7-5e54-83f9-68f57cfd72f1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0480 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2014-0481", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:7ae13529-a877-5d29-b968-1156481bd93c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0481 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2014-0482", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:66bd14cf-c021-5426-bf92-cdd347e0e1fb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0482 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2014-0483", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:a60513da-8d16-5616-bb4b-f14c0854bd6a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0483 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2014-1418", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:4faae035-3e21-521e-871c-f5ea281eecc6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-1418 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2014-3730", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:c64fc8a9-7375-57d7-907b-6f84477d1b1f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3730 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2015-0219", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:661de98c-6e97-53ab-9b51-d87b3320d50c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0219 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2015-0220", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:ecd41704-2c5f-5906-a740-7fb49d203d64", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0220 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2015-0221", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:742b9a37-86b3-5455-a730-dcd2e694f012", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0221 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2015-0222", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:bd7c6d2e-f896-5c93-911b-1a4e8219e37e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0222 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2015-2241", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:6cabae65-c0eb-5a72-bccd-7eb8c3da9567", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2241 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2015-2316", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:94b67a54-3a99-50bd-a26d-68842d9a20ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2316 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2015-2317", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:5f9b74ff-5384-519c-b7d6-73a59d83066d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2317 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2015-3982", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:95c90a9c-63cd-5482-ae85-a7f7122c9b98", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3982 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2015-5143", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:6382e7f8-2c1a-5aa2-b757-ced336bc8571", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5143 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2015-5144", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:c1108caa-104d-5d3d-9f49-bb24618c5219", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5144 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2015-5145", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:c32c96ad-66de-585b-963e-7ddddb61fea3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5145 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2015-5963", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:2e8de7ca-6389-5e70-8227-1e5fb6f50f08", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5963 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2015-5964", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:6d14626f-f5b7-5518-b557-679042ed901d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5964 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2015-8213", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:892ed581-e923-5822-b397-cc464bce9e0a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8213 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2016-2048", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:bdb75235-6baf-5cb7-85ed-70bc97b20876", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2048 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2016-2512", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:4b16a80b-4bb7-5ff2-826c-4cea0c6c741e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2512 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2016-2513", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:6dc370dd-cfec-5e09-bc75-9ac793202994", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2513 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2016-6186", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:a0565e6f-71ae-5566-a4f9-d10ee3bfa20d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6186 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2016-7401", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:ebdb4b5e-5255-5ec6-87b6-739ea0a95933", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-7401 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2016-9013", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:5bf46b67-3be1-5e0f-ab2f-94eee01448d4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9013 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2016-9014", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:1a585d07-1f27-59e1-a781-74c1059766fc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9014 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2017-12794", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:03469258-a3c0-5a2b-a5e8-d6b2a18e9c99", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12794 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2017-7233", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:32a7f8d6-fa48-592f-aefb-3a32021262a6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7233 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2017-7234", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:533e4a0e-f82a-5616-8a98-505499d4a7aa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7234 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2018-14574", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:793780b1-945d-573e-8546-7a0b3a16b4d2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-14574 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2018-16984", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:53c66586-aeff-5a3a-a504-49186be8679e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-16984 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2018-6188", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:473f0566-e197-5d7b-a9b7-c2b5c04453c0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-6188 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2018-7536", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:3a73e490-b2b3-5fc8-aece-7e3007894f60", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7536 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2018-7537", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:b7fcbe83-11ce-50fa-9656-b5696a711e2b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7537 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2019-11358", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:bc27e9bf-2e3e-5ab0-a3a8-c40680f27898", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-11358 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2019-12308", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:4d5b38c5-6af0-5de4-927b-b81e5b972720", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12308 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2019-12781", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:49bdca3a-fb77-5e44-bee7-ffe0f1bca6bf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12781 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2019-14232", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:42e2d683-cc81-572d-874d-b1d9910ea3f0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14232 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2019-14233", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:d52d28e4-2326-5cd6-b769-eb0701d9ae0f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14233 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2019-14234", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:7be040ad-dfda-5cc8-b846-7be45a50e4df", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14234 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2019-14235", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:d2aa37a4-7e5b-5a61-92b2-30ad22d8532c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14235 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2019-19118", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:89a66f83-ebf9-53ae-90d5-1605bbb32533", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19118 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2019-19844", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:c4332921-e0b9-569e-a18f-0c17a2f0f6a5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19844 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2019-3498", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:ddae0030-5a78-57f8-b5ba-cb89486f14c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-3498 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2019-6975", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:745c93ba-5f87-5786-95ab-886934a48193", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-6975 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2020-13254", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:47dfea9f-fb41-5eb7-8833-5596576ca93f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13254 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2020-13596", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:3a79ffc1-5638-5c3b-9afa-03a3ecf3231d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13596 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2020-24583", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:4c998d36-756c-5063-9e94-90c5a3aa222c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24583 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2020-24584", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:5971d450-a312-56d5-ba29-fb33ad70946f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24584 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2020-7471", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:e4a577b4-3791-518c-8269-4d3174c1540b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7471 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2020-9402", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:1151201d-d00d-5e83-85de-bb9c38c5e886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-9402 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2021-28658", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:c8e463b2-de78-5a95-baac-edfbb03a6b3b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28658 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2021-31542", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:85d4b19e-7962-555d-aa32-0e25d95944bd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-31542 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2021-32052", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:e22f19f8-abb5-5951-a958-421bacc26501", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-32052 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2021-3281", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:26939641-23dd-5166-a4bb-42b5b5e61e86", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3281 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2021-33203", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:bbfba4ab-34f7-53a6-9e74-1189be218653", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33203 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2021-33571", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:86bf8593-2c3d-5866-81e3-f0b7ee5d37ec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33571 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2021-35042", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:0fcbeb56-5a37-52c4-8d32-a451e2f4f53e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-35042 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2021-44420", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:a05671f5-0ad4-57b2-9e2a-d6fa18b17c41", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-44420 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:00fb94ec-97e6-51ce-831f-acab1e77d075", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45115 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:03d7765c-32a7-5789-a1a1-99fdec4b9361", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45116 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:5c9bf045-da57-5d9a-a9cc-d1af1609cd91", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-45452 does not affect version 5.0.post19+tuxcare of django. not_affected \u2014 CVE-2021-45452 (directory traversal in Storage.save()) is NOT present in Django 5.0.0.post20+tuxcare. The upstream fix (commit 6d343d01c5 by Florian Apolloner) shipped in Django 5.0.0 and predates all TuxCare commits in this branch. All defense mechanisms are present: backslash normalization (base.py:75,116), path traversal detection (base.py:77-80,119-122), relative path enforcement (filesyste...", "justification": "code_not_present" } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:f75880d1-195d-5681-b64d-bf71cc6c9396", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22818 does not affect version 5.0.post19+tuxcare of django. not_affected \u2014 The target Django 5.0 repository is NOT AFFECTED by CVE-2022-22818. The vulnerability (XSS via unescaped output in the {% debug %} template tag) was fixed by Django upstream in commit 394517f078 on 2022-01-02, three years before this Django 5.0 release. The fix\u2014which wraps pformat() output with HTML entity encoding via escape() and blocks output when DEBUG=False\u2014is present at django/template/de...", "justification": "code_not_present" } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:b417adc9-1e8b-584f-b006-5a9c6cc0d4bf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-23833 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:0c2cef80-bf61-580d-97e9-a5c5bbb25910", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28346 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:e5ffae2c-766d-5429-8d4b-b9ef687c9284", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28347 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:d24beb9f-e8c5-55d9-84f1-a347281eea2f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-34265 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:fcbf092d-fc1b-5833-ad2e-3abf6066aff9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36359 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:5fc945f3-65d9-518f-a298-c3dc70871ace", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-41323 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:8c2c76c6-bab8-59c1-9958-49b3f42216fb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-23969 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:711f113e-2d8e-5d51-8b9f-1e6f71422fef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-24580 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:bec13534-08f1-5475-9e80-aec221b449b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31047 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:fa2ec551-cfb6-5333-9a20-568699eca27a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36053 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:0e0cb88a-d840-5ba8-8e0b-374784cee8d8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:29e0e59a-01c8-5673-8102-3fb6d14319cf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-43665 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:1d279719-bea7-5a06-9805-04877aea03b1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46695 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:704e600c-b52e-507d-a72b-9c07f2fe2e9b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24680 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:271e26ea-6520-51df-a724-88eabeb5a285", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:7264ad41-bc6b-5e9e-bbc0-c80fedc703de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:9bd4b859-7253-587e-92b9-fc433fe54f7d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:87a35ca0-00da-597a-b8c0-b39c27dbc3be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:b3a15feb-93f0-5024-98e7-2932db507952", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:9cd4585b-7f73-53d7-8b0a-72b2dfbd547d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41989 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:51314af3-b517-58e5-83d4-2cf2be9541a1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41990 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:8ad42332-eb18-5fbf-a077-f07a621335fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41991 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:2f123341-2cb5-50e5-b422-d6f162b1baf0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-42005 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:bf099696-fc31-56e3-913d-d170cd6d34ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45230 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:6c85019a-7f16-5e4e-9e96-526a419f7dd1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:8486b16e-dad6-5c1d-94a1-96f8b6dfe442", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53907 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:e6726c90-b2da-59c6-9a97-987f8ab826c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:3dadfd5a-4a2c-570d-9c84-b033eb9da88a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56374 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:51635038-d0e5-5308-b1fe-2a648609b350", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:af304f24-6cc5-5840-ad94-cb0e69a1d19b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:9f6d097e-0d09-5a1d-8182-7d234d981122", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:f14a5edd-3c68-5f5b-aae8-8b31d8237de4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-26699 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:57dbf418-07b3-5774-a0bd-5bb09cf81e63", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-27556 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:2f3f6fb6-7ee2-51a1-9cee-05a384642000", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32873 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:ef865912-50f9-5a02-8f35-3e10fbd87736", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:2d321ee2-fc3d-54d4-be2f-deac68bc8c4f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:9bb743aa-c9c7-5793-88c0-f1dfbcba614c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59681 is already fixed in version 5.0.post19+tuxcare of django. CVE-2025-59681 already fixed on tuxcare-current/5.0 by 9f60b363dd, released in 5.0.post10+tuxcare; alias 'x#' rejected on 5.0.post21 from Nexus." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:88bd9946-8d2f-5d45-847c-a4258700d712", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59682 affects version 5.0.post19+tuxcare of django, and is fixed in 5.0.post21+tuxcare." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:a9f5a673-9500-5c71-80ee-728080cc7e3d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:ef6d3ee1-6cd7-53bc-87a2-980e76fe7987", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:8ff843d6-aad7-5e1b-9bff-0ac77aabdf57", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-108147", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:1c4130d3-6e8b-5a44-bdfc-e0a03a0c4f98", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-108147 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-111211", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:bbaeea0b-160b-59b3-9c3a-b3ac1d6e8b3a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111211 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-111362", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:ecac70d7-5b26-5b47-b171-8996f2ebf3bb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111362 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-113593", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:1af04bc0-727d-5d65-b7ca-de2f1818a786", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113593 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-113733", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:091d1b49-c841-589c-be6e-12a193160c61", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113733 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-114582", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:68f0c980-d181-591c-b74a-6eb2df2c458c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-114582 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:e9c57f9a-c7a3-5031-9ffb-066d7b949dd2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:387734fe-a263-561e-af96-49ed7b60b389", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:65f0a95e-206d-5d15-a253-38ca6dfecebc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:cb6c9b19-7b58-5be6-9cb4-139eba8738db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:8e1e7c2f-af7e-56e3-bf87-9e6493dad8d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15307 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:39ea483d-3a1f-5e84-bdd5-f7b342f642fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15830 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:e3d5b243-13df-5c40-bbd6-29ac88fb8e40", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25673 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:b6761fe1-0bc7-57e4-b2e5-15ebb37d1876", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25674 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:a0dff74f-af1b-552f-8f54-bcf5c3d5309e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33033 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:07b38232-5d93-5e43-935a-9ada67311885", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-35192", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:abe49d89-8a2f-525f-93be-2ebb0088ce0a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35192 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-35193", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:a7718643-a166-512c-a9bb-4d9336bb7525", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35193 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:373fbc3c-6a63-5086-966a-366ce454bb4d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-3902 affects version 5.0.post19+tuxcare of django, and is fixed in 5.0.post22+tuxcare." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:59b72777-df76-5ec8-a782-2bb43a87be96", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4277 affects version 5.0.post19+tuxcare of django, and is fixed in 5.0.post22+tuxcare." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:0532b93f-b7f6-536d-a37f-e4e57ea64cf8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4292 affects version 5.0.post19+tuxcare of django, and is fixed in 5.0.post22+tuxcare." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:3b74da79-4b66-58f8-b6ee-12f24ad607c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:122cebf1-81de-54a4-9ac5-44ee2d2dffb3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:285ea963-c424-5959-8730-d6f4b842210a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:45686b5f-4fe5-5f19-85cd-ca5819769b15", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 5.0.post19+tuxcare of django. not_affected \u2014 Django 5.0 does not contain the vulnerable DomainNameValidator class. This validator was introduced in Django 5.1 (commit 4971a9afe5). Since the specific component affected by CVE-2026-53878 does not exist in this version, Django 5.0 cannot be affected by this vulnerability. Additionally, all domain validators present in Django 5.0 (_simple_domain_name_validator, EmailValidator, URLValidator) a...", "justification": "code_not_present" } }, { "id": "CVE-2026-5766", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:4ba234bb-038a-50eb-a5cc-33f8e91b2908", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-5766 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:962e4e49-9c94-5ae8-9f28-02fee2cd912b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-6907", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:70c2d8ee-310c-5e59-82b0-940ac5ae29fc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6907 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-7666", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:04fe1cc8-3d58-51d4-a5c1-24b6a5834e73", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-7666 affects version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:a3ba6d4d-df2a-518f-aa50-d18c7839e6d5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 5.0.post19+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ] }