{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:45ad9ffb-f57b-5dd5-ae44-633d9fa27508", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@5.0.post20+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@5.0.post20+tuxcare", "version": "5.0.post20+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@5.0", "type": "library", "version": "5.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2007-0404", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:3ded2c39-c150-5b19-8caa-e0c1f0398b44", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0404 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2007-0405", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:e5186847-daba-545f-8164-a061810df5f2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0405 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2007-5712", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:2bef7820-fc26-5aa3-b234-74c3f30c27c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-5712 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2008-2302", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:66b6b474-6dcd-54b2-b361-f10139ddbced", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-2302 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2008-3909", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:dcebe8bf-1e08-5b42-8f90-eb9e33d266cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-3909 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2009-2659", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:e6253305-69fd-52db-a514-2ff0dd0ef39a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-2659 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2009-3695", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:6cb883bc-1b87-5d4c-a4c5-f7ee065ad74c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-3695 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2010-3082", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:a7f74139-fc64-57db-a28a-2933a26c2293", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-3082 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2010-4534", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:0fcb3f77-16d8-534c-9ffd-de5a3aea0e34", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4534 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2010-4535", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:363fbc04-b7f7-5c9d-b505-d3282e66f188", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4535 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2011-0696", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:fa382d0c-9d0f-55d8-a81b-5061914372c6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0696 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2011-0697", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:c5fa1557-96a6-53e3-b56f-9790d9fd82af", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0697 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2011-0698", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:4e92395f-7335-5955-98a1-012c1b3e873c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0698 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2011-4136", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:9a1f01cf-d458-5a7e-bbac-a7c1dc5ff6ad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4136 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2011-4137", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:05fd1f1d-5e17-572c-80fc-fc21914fd0e8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4137 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2011-4138", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:02dc98a3-e119-54c1-909c-205aacd8aaf1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4138 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2011-4139", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:dd0e4867-1e3f-51ed-8420-a33360f9b9f1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4139 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2011-4140", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:05ea6f41-af0d-59f8-b8a2-936c1499b763", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4140 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2012-3442", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:b3a5bd64-cc72-5c6a-8e10-cdcf7336ecdd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3442 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2012-3443", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:9c586ecb-fc8e-5f6e-9bf5-4f39cfcbbe77", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3443 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2012-3444", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:048bce39-d7b0-590d-9c75-6803f0c87d1e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3444 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2012-4520", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:dcf305ae-ea3e-5877-ba2e-944a711651f0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-4520 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2013-0305", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:251bc529-ecf9-5d75-af16-f155e15727e3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0305 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2013-0306", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:61e0de9d-a9c8-5a82-be05-977c3dca6dfa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0306 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2013-1443", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:55934426-1cd9-521a-94c3-38815e968322", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1443 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2013-1664", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:69df3ae1-f511-54cc-8c2e-de124187148a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1664 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2013-1665", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:24adfdd6-1e8a-5730-9d04-9a5f89233ac5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1665 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2013-4249", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:ba2a76df-154e-5d0f-8be3-5a5264374161", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4249 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2013-4315", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:e99709e0-788d-5c94-a055-61608aebbf39", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4315 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2013-6044", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:1aed9c67-d272-5e10-ba3b-b50abd8b2112", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6044 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2014-0472", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:382b20ed-939d-5bd3-b201-bb19754b5747", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0472 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2014-0473", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:5bfe2a1f-ec1d-516a-8195-c7d16c626299", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0473 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2014-0474", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:108555e4-4ea7-54b6-bf92-3c8f32649b4e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0474 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2014-0480", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:3e86d85f-ff25-574a-945c-303ccecf6e81", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0480 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2014-0481", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:894dbef5-1fba-5945-9218-d6b7af3471ec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0481 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2014-0482", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:628ac4c5-67b3-5d1c-b249-cba4fe9693e1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0482 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2014-0483", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:12951170-96a3-5455-9277-aa68ba63d1b2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0483 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2014-1418", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:2bcceb63-df9c-5fcf-9e34-6f49458f2d5e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-1418 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2014-3730", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:1ba0081a-0b56-5642-9379-07221007f118", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3730 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2015-0219", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:28c014f2-8cc8-50c7-b751-a18a586befbb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0219 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2015-0220", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:4c368296-c752-5b5a-8755-a90d5cb26caf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0220 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2015-0221", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:36afb3b1-073e-5a1a-abde-3cad39868b18", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0221 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2015-0222", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:21804d27-c29b-562c-8557-e9a88f356a36", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0222 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2015-2241", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:19433009-8849-596a-8778-ec738429853b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2241 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2015-2316", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:f93b995c-1dd9-536e-b2ab-0e3381fde45c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2316 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2015-2317", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:d7dba1df-5ef0-50b5-bf09-1c47f232b4b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2317 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2015-3982", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:25ce2f44-8bf3-5647-a841-c6ffcf491689", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3982 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2015-5143", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:524e3936-f207-578c-bbbd-7552a099f483", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5143 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2015-5144", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:25f76c45-b4aa-540b-acc0-0127cc4745f0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5144 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2015-5145", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:558abd92-bf1a-56f8-847c-3b0a9c556a69", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5145 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2015-5963", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:21d59d43-a8f5-5398-9d19-7455439a1874", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5963 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2015-5964", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:691368aa-1f7c-50d9-b5f8-2fc815ee2f40", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5964 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2015-8213", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:90dd4f52-a197-575a-bff2-c3347f93c7f0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8213 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2016-2048", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:2a8288a0-825b-570f-8dd1-5ef13426e94c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2048 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2016-2512", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:d47a9f2b-a405-5794-aa6d-0e7272afe34b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2512 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2016-2513", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:8f1aba0f-bab1-5828-88d2-888a42881447", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2513 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2016-6186", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:ffbb8b1d-eaff-5ca2-beb0-29c60a9167a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6186 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2016-7401", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:5927d50b-2d4f-595a-8e8c-0463226d4acb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-7401 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2016-9013", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:e51e1a6d-d8d9-54f8-b4fc-21442bc76209", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9013 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2016-9014", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:b36d6f04-721d-5307-a49f-17221fa63867", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9014 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2017-12794", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:d06c4fa3-6cf8-5f45-8f00-875e96cca835", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12794 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2017-7233", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:66e0059c-e121-5685-8ba6-f1ec3482dba4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7233 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2017-7234", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:3ae0e085-4652-5a26-ab3f-53aac1c95a12", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7234 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2018-14574", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:fbe44139-3576-54be-ac8e-68a7c746eee6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-14574 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2018-16984", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:7259cb04-5871-5774-b02d-29072b3c98ac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-16984 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2018-6188", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:d0c053c8-2ef2-5279-878d-adb7a94a8d66", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-6188 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2018-7536", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:7591af6d-be28-5ab8-8ddf-2b724ee97ce2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7536 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2018-7537", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:8cf209ea-3e91-5ede-a80b-a63e62439766", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7537 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2019-11358", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:a863ba55-fbbd-58fe-80ca-c789bff9c4a8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-11358 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2019-12308", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:02950325-f699-5403-8ae0-fa4df9b7ae0b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12308 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2019-12781", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:a8714326-b827-52fd-a47d-54cf62bc1271", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12781 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2019-14232", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:f3c5219a-94c8-5301-9e54-18982d6bb3a6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14232 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2019-14233", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:dd876e8b-6c07-576c-ba18-abc43a1c49d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14233 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2019-14234", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:c30e9098-6574-597c-8b89-ac2b78cd91b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14234 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2019-14235", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:298e60f2-742e-568f-a88b-084367144bd1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14235 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2019-19118", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:eb51efdc-c2bc-5583-8a50-db2c1b161f11", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19118 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2019-19844", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:32135e4f-64ff-5b5b-b988-6c06badcec46", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19844 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2019-3498", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:19677d2a-dfd1-54bf-aecf-c6d90c995f10", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-3498 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2019-6975", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:17c57cfa-34a1-510c-b108-8f50f85dd956", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-6975 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2020-13254", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:ddd43678-64f5-53a4-9e7a-7c166d564e13", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13254 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2020-13596", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:136cc83a-0a8c-5490-b4b3-def400f5d3bd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13596 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2020-24583", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:52e5e37d-51fd-564a-968e-ee35ee929b5a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24583 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2020-24584", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:3caaec58-f2ed-57c4-a961-c2abf9a16263", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24584 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2020-7471", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:39463c18-40c3-5408-ac13-28dd796dc87f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7471 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2020-9402", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:e07217b4-d35e-5969-9e26-0415f428a20b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-9402 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2021-28658", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:801f0753-5694-5994-9e36-0458c8bb0e7a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28658 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2021-31542", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:ee074a96-4ef1-558d-870a-34c6a505adc0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-31542 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2021-32052", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:5b9a2d45-38e6-5439-aeab-7ed9e629d1b5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-32052 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2021-3281", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:c8e6e74c-f5d2-595f-84ca-55d675e5412f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3281 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2021-33203", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:582a8759-8cce-5b14-8cfa-f8e43573818d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33203 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2021-33571", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:5382d520-beeb-5a57-80c7-be2599173cc9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33571 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2021-35042", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:df4c1a3d-01ae-5f43-a3a4-3e6e384bda75", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-35042 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2021-44420", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:a87c98dc-d54f-5f63-8a39-029ccb004e32", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-44420 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:4923d933-4a5b-560a-8cf0-4e3b7bf736ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45115 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:87d8ab7a-50f2-5681-ad50-e32192f367b0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45116 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:000efe13-5f91-5dff-9584-0e0ee016dde0", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-45452 does not affect version 5.0.post20+tuxcare of django. not_affected \u2014 CVE-2021-45452 (directory traversal in Storage.save()) is NOT present in Django 5.0.0.post20+tuxcare. The upstream fix (commit 6d343d01c5 by Florian Apolloner) shipped in Django 5.0.0 and predates all TuxCare commits in this branch. All defense mechanisms are present: backslash normalization (base.py:75,116), path traversal detection (base.py:77-80,119-122), relative path enforcement (filesyste...", "justification": "code_not_present" } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:55e5257b-816d-56d3-bd7e-8840afdff098", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22818 does not affect version 5.0.post20+tuxcare of django. not_affected \u2014 The target Django 5.0 repository is NOT AFFECTED by CVE-2022-22818. The vulnerability (XSS via unescaped output in the {% debug %} template tag) was fixed by Django upstream in commit 394517f078 on 2022-01-02, three years before this Django 5.0 release. The fix\u2014which wraps pformat() output with HTML entity encoding via escape() and blocks output when DEBUG=False\u2014is present at django/template/de...", "justification": "code_not_present" } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:b9309ffb-7bd5-5e83-aab0-4cb4bff1a95d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-23833 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:affac9ad-346c-5a87-8784-1d2072d0ec9d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28346 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:8e243264-6b81-55e2-863d-00bffe17134d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28347 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:a15bb702-2292-5f61-8b08-6740640154ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-34265 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:d54d75e0-f4e4-55d8-8223-977751cc24ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36359 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:e4c1aeef-8cb0-587a-ad5a-c70da8f0282b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-41323 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:76de0b72-74fe-5dd1-9289-c369ca4d5117", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-23969 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:f055f6a1-7729-5caa-b5c7-99097946de83", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-24580 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:6078aaff-3bc9-51e6-9308-b257943a43ed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31047 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:afc531a5-7303-562c-8c7e-e101a9618bc2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36053 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:5e322891-1b19-56ae-85f2-b3775a385ea9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:10cdb04e-92f1-5ddf-9107-2f9218a06399", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-43665 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:512afa22-79b7-5fb0-b134-4577a46bb391", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46695 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:e61ccae5-353f-5ce8-87ba-ac11343415f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24680 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:fe623763-3ce5-5283-b2a5-34ea6af29a43", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:2fd9176a-ec33-5edf-bcfd-fc5ca4aadde0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:aee2d1a8-20a1-5bf1-bc69-e2e6fb3abfe3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:efaa673d-1c95-555d-a540-5008c2d9a91c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:0e4362f0-5241-543d-af0d-dbf49eeabfd4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:8f71575b-5615-5afe-a3a7-739bcc7b617c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41989 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:7844f9cf-8ce9-5223-8a29-f3f1ccb4d32a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41990 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:fbd9dc26-3477-5258-80f4-e48db1f67014", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41991 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:a58268a7-9495-5833-ac21-0f2871af96d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-42005 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:45194f19-891f-580b-bfb3-809c7aa9e4b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45230 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:367420f1-d5f5-525a-a34b-df8c57160815", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:e9a67428-b28b-5580-a6d2-05a24c9590e8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53907 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:545c99cb-fdd8-51d9-b865-d548fd771860", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:777b4343-3de6-5865-9101-76c58b796d85", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56374 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:bf4ce3b0-2c19-5d0d-977c-37e1007f4cd9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:5e322469-4125-563c-ac6b-e4c9c6999561", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:81093718-e9ff-5f5d-9b6a-5d2fe0e2bf52", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:c8ae0ef1-4f30-53ea-a58d-cade75835ee5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-26699 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:fe157765-b0ea-533f-adec-22f7070265d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-27556 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:be0bfb99-6f78-5cfb-8033-433d428310c6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32873 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:3b951360-004d-528e-9c99-bf5de2f63fa1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:32301a9e-e4bf-5cd8-9953-8ee44a4e1e5a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:82f768b0-b5a4-5857-8297-53717e344028", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59681 is already fixed in version 5.0.post20+tuxcare of django. CVE-2025-59681 already fixed on tuxcare-current/5.0 by 9f60b363dd, released in 5.0.post10+tuxcare; alias 'x#' rejected on 5.0.post21 from Nexus." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:0424984e-9553-577b-aab7-a2fb9ca7cf11", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59682 affects version 5.0.post20+tuxcare of django, and is fixed in 5.0.post21+tuxcare." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:a5738553-7574-5f4e-b0b4-26360def4c2b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:8661dc56-8d7c-51f4-a7c9-ba9db8bcf233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:c50c0ce3-f64b-5131-b2d3-a4117f6fbc4c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-108147", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:3ea7e928-670b-5103-8c3e-8019737f832f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-108147 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-111211", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:92c2f1fd-37e5-5b4d-bc0e-22555996e9e5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111211 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-111362", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:23dff075-e601-5589-b139-9749b5dc2527", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111362 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-113593", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:4499a90f-1b56-55c4-8129-ec85f126d77e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113593 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-113733", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:7abb6f2b-28d2-5b67-881f-367e64c1d39c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113733 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-114582", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:8050afb1-4eec-5308-ae25-a9ea852f4cd5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-114582 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:0b63b2e7-b1f0-5d30-bfde-de61a2b2053a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:ffbb09b7-ed08-5aaa-81c3-2a7b9b5404fd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:4d8701c6-a99c-551e-8ea5-f4b648a015e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:d494bff5-da86-5225-8648-76effbb851b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:f7b3e6d0-4457-5405-a05d-41fe3d1fd321", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15307 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:f4429150-fde1-5c9f-b176-d0ead391bdd2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15830 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:bd9f68e1-eefc-5695-8483-f05d86dd857b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25673 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:52337242-4101-5661-a4af-735eecc18917", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25674 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:f952e29a-c161-50d2-bf65-0a8d6a97bbae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33033 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:d836bd26-258f-5fae-b5ff-cfad4ee68999", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-35192", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:52b42d7e-54fb-5e39-82ad-c8f0a3ee112b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35192 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-35193", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:db59d6d6-4804-5f0e-a337-6ea96b8f1609", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35193 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:e92030a9-eba1-56a7-8c5d-c51f3a18e5ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-3902 affects version 5.0.post20+tuxcare of django, and is fixed in 5.0.post22+tuxcare." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:f70afc0f-9da4-5c62-90c0-f648e01f7e21", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4277 affects version 5.0.post20+tuxcare of django, and is fixed in 5.0.post22+tuxcare." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:37486839-fbd8-5ee1-88f7-ac578e99faee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4292 affects version 5.0.post20+tuxcare of django, and is fixed in 5.0.post22+tuxcare." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:af52c4e2-f596-59df-bb2e-35fd76fa03ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:5ef16fd4-f83a-59eb-a2ff-3135ef366dd4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:50583139-ff54-5b96-9cea-afc97c240e29", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:ca392ee2-abab-5a6d-938a-6c837fc25527", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 5.0.post20+tuxcare of django. not_affected \u2014 Django 5.0 does not contain the vulnerable DomainNameValidator class. This validator was introduced in Django 5.1 (commit 4971a9afe5). Since the specific component affected by CVE-2026-53878 does not exist in this version, Django 5.0 cannot be affected by this vulnerability. Additionally, all domain validators present in Django 5.0 (_simple_domain_name_validator, EmailValidator, URLValidator) a...", "justification": "code_not_present" } }, { "id": "CVE-2026-5766", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:cb1c4b94-a308-5bff-9cfd-0d4b51c87060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-5766 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:0fb06693-1c39-5896-affe-e670920e1248", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-6907", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:ba10d1e5-e340-54e0-a63b-da2cad1df0a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6907 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-7666", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:3d40f14c-d86c-5ecb-b170-1c2b05c6231c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-7666 affects version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:43ce952d-502e-58fd-ba7a-c9015bcf1f5f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 5.0.post20+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ] }