{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:451f32ff-f843-591b-844b-f23a88393b4b", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@4.0.post28+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@4.0.post28+tuxcare", "version": "4.0.post28+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@4.0", "type": "library", "version": "4.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2007-0404", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:67ffd06d-10f2-5496-a989-740496b33b05", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0404 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2007-0405", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:a2b9365b-0b92-5126-bc69-7f75124a6bf2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0405 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2007-5712", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:48e70ae8-9ec2-52f8-8662-83b487f56f6e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-5712 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2008-2302", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:3ae4aa78-62cb-566c-81b9-f44eb35aad19", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-2302 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2008-3909", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:6a823775-c3a6-5cb7-b0fb-1d2d959ed6b3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-3909 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2009-2659", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:88444bb8-9cd5-5a4e-a34e-286057759cf1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-2659 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2009-3695", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:a9e13ddb-a3ec-52da-aaf9-268bc9def223", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-3695 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2010-3082", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:c81fdabe-1044-5fee-bdf7-45c600b2b1cb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-3082 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2010-4534", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:151336b5-f433-5c1c-8dbe-757a71a5cefc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4534 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2010-4535", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:431477c0-6507-586a-bcfb-f71b7597e2bd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4535 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2011-0696", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:bef7f4d1-fcb9-5f2c-8265-22ed1d4a6d21", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0696 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2011-0697", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:948c1d8d-200f-5765-9dec-e016ff34b0b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0697 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2011-0698", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:d96014da-e8f4-5e38-8af4-359fcfc2930b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0698 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2011-4136", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:72eafdd9-8af8-566f-9cd6-1135d8d97816", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4136 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2011-4137", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:f31a47e1-6af7-5efc-abe0-022055cb35bf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4137 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2011-4138", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:e9495832-c60d-57be-ae25-64c122479e58", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4138 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2011-4139", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:6599c97e-b83e-56a9-a556-92f6e2372532", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4139 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2011-4140", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:449c2ad4-ed77-523d-92fa-fc0e59e22e74", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4140 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2012-3442", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:9f21bd71-d802-5c17-a0d7-252af54f8412", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3442 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2012-3443", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:f0b25ee6-a8dd-56c1-aacb-18a8d9a54ca6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3443 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2012-3444", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:22ceb424-f6a5-58f4-b7b4-a4e8fe074f33", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3444 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2012-4520", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:f21a8c11-c5b7-5938-91e5-0c568b721820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-4520 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2013-0305", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:3a046cef-4e46-55f5-a198-fbf04c1608ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0305 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2013-0306", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:adf619fc-8a7f-5f7b-9b30-1408f02b283e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0306 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2013-1443", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:b0a1b128-52b7-5c4e-9d5e-bc724062d0f9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1443 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2013-1664", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:bed8310b-1c5d-5d57-8f2b-bf6aa60eaaca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1664 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2013-1665", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:b4e39346-42a0-54c4-984a-d17f65904781", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1665 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2013-4249", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:42126296-f7bb-531d-a83d-a89c3059d6b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4249 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2013-4315", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:21906912-21b3-5426-8ae6-7ab3171cb547", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4315 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2013-6044", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:b81a6f86-bd61-5828-88d8-60358585b2f3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6044 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2014-0472", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:38ff1c6b-1b27-55f6-a3fc-6b041573e390", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0472 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2014-0473", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:cacca564-8b53-5413-b7db-69ef1ac3c86b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0473 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2014-0474", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:1ac45684-0e7f-55b8-be6b-c30a51186ec0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0474 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2014-0480", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:58472a40-0e70-511b-88a6-46106b919b86", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0480 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2014-0481", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:a566d612-dd56-5fc6-954e-c387347ef05d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0481 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2014-0482", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:06c3f855-9578-5b0b-8318-310e7711859f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0482 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2014-0483", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:cfb1f817-14b0-5c18-9e60-e7957d9948a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0483 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2014-1418", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:aee9f374-4617-5bbf-b4b9-90ce88afd23b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-1418 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2014-3730", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:29680cac-e606-5316-8e71-9fcd5668b9ac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3730 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2015-0219", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:b3994463-53e5-5475-b467-a7be1fd6de14", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0219 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2015-0220", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:85cd6d3c-6538-5896-a3a2-c3d4c0720ba0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0220 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2015-0221", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:fa6d6ac8-2ec9-5e4d-8813-dfe46d51794a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0221 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2015-0222", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:fb9a00f1-c377-5f54-a31d-5621dc2d9508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0222 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2015-2241", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:a96f062e-f2ef-553c-9f45-24c52f8d9f11", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2241 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2015-2316", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:4f525554-234d-53d8-8e56-b611f9cf05a1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2316 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2015-2317", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:01e7d956-fc07-55f2-8817-eace437736e6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2317 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2015-3982", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:12acbd25-93bb-522c-bba3-9fd1188d2818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3982 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2015-5143", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:272a3e05-668f-51b0-80d3-6a391a58eac4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5143 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2015-5144", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:e7dbd489-664d-5551-be44-56e8cb4a156d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5144 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2015-5145", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:8f5be7a8-7f67-563a-abc5-2dea41eb3497", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5145 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2015-5963", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:80e639c5-8089-57b6-b9ea-ac99b0d07d0b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5963 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2015-5964", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:63c1f26e-2e4d-56e8-8197-546f31780886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5964 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2015-8213", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:0832a53a-558d-5622-8557-b16aa639b46c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8213 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2016-2048", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:0c0283a1-2d08-5311-8b5a-7788fbcda1e9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2048 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2016-2512", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:c97ac98f-24e0-5708-9a72-f360938255be", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2512 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2016-2513", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:fd6f28c2-cbfc-5550-bda4-64df32ffcfba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2513 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2016-6186", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:b660202b-a80c-51cb-a1e6-473e7226f72e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6186 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2016-7401", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:477a401d-8b20-5a1f-9ec7-abf09d70c056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-7401 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2016-9013", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:abab4c96-e06c-5b57-b848-4bd325f6fc85", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9013 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2016-9014", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:62941b40-7ae1-5c96-adeb-1deee35b4393", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9014 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2017-12794", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:5c3e8547-1730-5ae4-9af1-c6faa2502308", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12794 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2017-7233", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:b4094f86-d3a3-55cc-bc0f-226c377a8170", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7233 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2017-7234", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:9311aee7-4085-5344-a123-38be348f3470", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7234 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2018-14574", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:7138b00f-8100-5912-b6fe-b65ae3fc4c7b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-14574 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2018-16984", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:d38204f4-3f2f-521f-ad8a-74bcd40869d1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-16984 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2018-6188", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:ebf93544-ce93-57e9-adce-7bd115faf03e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-6188 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2018-7536", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:c33f8c1d-5296-551e-932f-e6dc0f6d982e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7536 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2018-7537", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:ef7e8831-16ab-5f3a-883c-4b38fbe30a23", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7537 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2019-11358", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:c31958ee-a93a-58b7-8ae9-f67bc0bea3bd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-11358 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2019-12308", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:9c2f3bb4-e925-54b4-9b6e-19be7fc5cf80", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12308 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2019-12781", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:ef8a33d0-08c9-57b0-acd5-976693ada5f0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12781 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2019-14232", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:14efeb0e-e330-543f-a847-0f8b0a1eb9bf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14232 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2019-14233", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:c7deeeed-0aa0-5fcb-8592-5b03a941f716", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14233 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2019-14234", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:403cc2e3-75a9-5dae-9e98-aa14641cb1a3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14234 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2019-14235", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:52b4a47a-060a-503d-997f-15a195935a8a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14235 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2019-19118", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:d7d461a0-b63f-5f67-9053-48bd9f128eb6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19118 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2019-19844", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:dd060f5c-e457-56e7-b8ac-59c719274f6c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19844 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2019-3498", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:08b30ec7-75a1-53f9-92e9-660f17fc4325", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-3498 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2019-6975", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:590d6bbc-be24-5368-a6b1-5f7e60cdc934", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-6975 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2020-13254", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:127e17ec-9170-5081-b1e0-6040f790f8e0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13254 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2020-13596", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:3e1454de-123d-512e-89a7-70117bdaa004", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13596 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2020-24583", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:b77dde63-baa5-5529-945a-ae8db9e4b286", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24583 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2020-24584", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:fb675cfe-2f3c-5496-8451-3feb2518bf95", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24584 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2020-7471", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:1e80a025-f015-5778-b6b3-71ed0ef6e01b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7471 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2020-9402", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:c5377cac-2bc5-5878-8c6e-e48b9c197f2a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-9402 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2021-28658", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:e78db59a-70d4-5fed-8ad7-cd54f888c972", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28658 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2021-31542", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:1af3c83b-f1be-5e66-933f-731461c53534", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-31542 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2021-32052", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:62e74357-4374-5eb0-91f2-4988fb680616", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-32052 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2021-3281", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:8ac67bd0-ed71-5e7e-9743-fc7f3abfa9e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3281 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2021-33203", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:a9c5f326-8722-5dc6-8741-26de83d618ac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33203 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2021-33571", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:bfc0efe7-ea19-55a4-a007-b136dd9e220d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33571 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2021-35042", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:9b772a04-9811-5a46-af80-3b66613127c1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-35042 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2021-44420", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:e2049cdd-e7ba-5fba-b658-9b03ae2a9d65", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-44420 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:4e707992-cd34-5ca4-8aa6-7145e2279900", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45115 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:ca57d9ad-d98a-56e7-9f4b-8f8375515368", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45116 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:ad273725-5aee-54c6-8179-5cc96c1fe59d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45452 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:8ad3d6a9-2c57-580a-a5e0-89751b56e8b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22818 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:b26d65df-1ed0-5d33-8cf5-ffae49d004e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-23833 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:2dc779a5-763b-5226-88e3-6e3337b19666", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28346 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:d6b0aef9-96ec-55d0-bc12-1fdfbcd37e9e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28347 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:40c0b161-16f0-5496-a0fb-3d0393795e1a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-34265 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:64bf3c87-128a-5eb7-9288-90e3c36ff99a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-36359 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:3a4d82ef-5ecb-51c8-8e50-2fb8895d4d69", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41323 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:e099c434-85e8-575a-abba-f3b8e369924b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-23969 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:57d724d5-b4b0-5047-9067-19b1eb2ce282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-24580 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:f0d5ea75-60cb-57c5-a62e-5de177f1e34b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-31047 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:1e031251-27ed-5d20-b633-7d4a9a95dca9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-36053 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:e7e9213c-7a1f-5325-a67e-4ad50d9729e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-41164 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:da25ff24-e9c0-50c7-986a-bddf82f1fc45", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-43665 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:e907e5a1-7e32-5e29-9d17-e04a654bddec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-46695 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:d6fe7a01-2ebe-5d0e-8b9d-aad0f39d4db1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24680 is already fixed in version 4.0.post28+tuxcare of django. Already fixed on tuxcare-current/4.0 by bot commit b68a12db02 and released in 4.0.post27+tuxcare (verified by code reading, see PYELSCVE-3147)." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:7cc86c50-eb8b-548c-8d6f-c853822b75b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:b6144151-9f50-5d7e-a958-d4fdd02a7226", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:5aeb557f-20db-5181-955d-ebb5f0219522", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is already fixed in version 4.0.post28+tuxcare of django. CVE-2024-39329 already fixed on tuxcare-current/4.0 by 7a1768c267 (inside the CVE-2025-13473 backport), released in 4.0.post18+tuxcare; timing difference present on post17, gone on post27." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:eba45827-ffee-5b69-bd78-cfaa096f9298", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:951041ab-b4b2-5962-b6d3-d724e5007c20", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is already fixed in version 4.0.post28+tuxcare of django. Already fixed on tuxcare-current/4.0 by bot commit b68a12db02 and released in 4.0.post27+tuxcare (verified by code reading, see PYELSCVE-3147)." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:73c3565f-76a1-59ce-b145-68cde03d8619", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-41989 does not affect version 4.0.post28+tuxcare of django. Django 4.0 floatformat() turns string input into float(), a huge exponent becomes inf and the expensive Decimal path is not reached with attacker-supplied input. See PYELSCVE-3147 / django!67.", "justification": "code_not_reachable" } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:b57b0666-7590-5173-96b8-b9c0a4edda00", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41990 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:36b6ef23-51e4-547a-ba97-1a16f0be6b49", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41991 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:cb67bb98-1b0a-564f-a1b2-d44ed10987cb", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-42005 does not affect version 4.0.post28+tuxcare of django. Django 4.0: names passed to QuerySet.values()/values_list() never become SQL aliases on 4.0 (alias grouping arrived in 4.2, django 04518e310d); 8 query shapes: 3 injected on 4.2.14, 0 on 4.0.post27. See PYELSCVE-3147 / django!67.", "justification": "code_not_reachable" } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:18b04aa5-83ea-571d-9936-c3b9f8b86c9b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45230 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:61c07751-16aa-5063-9ad3-7e218d4d7c22", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:53644a0d-a5fb-5edd-b02d-a68b76370456", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53907 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:48049971-1d51-5489-9451-2319732683d2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:c67f9db3-7ce0-5835-9b23-c7ab6e712c66", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56374 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:a943e2b4-48c8-5cb0-ae31-a11cddd6ca0b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:eda5740b-8471-52cd-858d-cf47174272c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:b693d3a6-4728-5ae7-adae-0cdbbac70c64", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:7943f204-0dc3-5525-b16c-b2e67f8e2e1b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-26699 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:6589fde7-515b-5345-950d-e7899a6db65b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27556 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:6abfc408-b2b0-5cbc-9638-c29b075a778c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32873 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:525a2f98-e51e-581b-9996-d6300ee9db9a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:39de4081-71e1-5e03-aa69-9e18f467744b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:d1ce4c76-dcf3-5ce4-a200-7b5bd300f034", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59681 is already fixed in version 4.0.post28+tuxcare of django. CVE-2025-59681 already fixed on tuxcare-current/4.0 by fe5f66c68a, released in 4.0.post17+tuxcare; 4.0.post16 accepts 'injected_name#', post17/post27 reject it." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:4f3e6981-7c44-5869-92a0-410c68fb7c73", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59682 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:d7e79f0e-7cd7-5d9b-a248-55a43cebc285", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:05483620-02c7-5d6b-8788-4fdd543b222a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:e9b7b435-9dfb-5469-8399-83b31c32bfe2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2026-108147", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:dd2e72c4-fdc5-55a5-8aed-edd714b67758", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-108147 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2026-111211", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:3f6ac2bc-2db3-578b-b02d-8af67adc4e4d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111211 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2026-111362", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:98e2df6d-e7af-593b-be59-a0445d723da0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111362 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2026-113593", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:82e66d82-e766-5dfa-bd39-77cdb0683b00", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113593 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2026-113733", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:66b8fbe4-5ac6-50bf-8b5e-e8fd36ba72d7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113733 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2026-114582", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:02ac14ec-e8a7-540b-8e51-dcc38f9dd2cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-114582 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:249fc047-5f81-55b4-8e92-5d2a1bda7e4b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:183f81d5-d230-50d4-95ff-061754d7d56a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:eff4022d-9dec-5764-a7a9-2011fc566b95", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:869e2c96-e28d-59b6-95ab-f860017ab436", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:08252243-d5a6-591f-a612-2018b47ae9e0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15307 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:53f09a31-9928-5114-8a6b-72c08626e315", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15830 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:98f9f269-1adf-5ab0-9087-55d0df25280d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25673 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:d55070fa-13ca-5248-b798-030667970a48", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25674 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:a3de0119-87a8-525a-927d-f071af368916", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33033 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:30ad491e-9e02-5320-b26a-4b72d41e9c20", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2026-35192", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:b06295b5-ec96-5c6a-b6aa-47ad92edfd20", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35192 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2026-35193", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:3fc9df05-5e01-5894-a739-be08a3169e40", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35193 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:a9d6acda-722e-563a-b961-7e216fdbff69", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-3902 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:3942a579-77fa-5e3a-8255-6cdab971afcc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-4277 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:99f0f18e-f64f-5eb2-af14-62e6cdf814eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-4292 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:5aea92f2-b0b4-5b8d-b16b-4ab6f90bf2a9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:3bd763ee-aa6e-5c44-8426-8d929e210769", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:e78fa0d4-dbab-5a77-90d1-3efdca9c1f98", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:ad22c627-4138-5af6-9ac6-93cab72565a0", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 4.0.post28+tuxcare of django. not_affected \u2014 Django 4.0 is not affected by CVE-2026-53878. The vulnerable component DomainNameValidator does not exist in this version (it was introduced in Django 5.1). All domain validation in Django 4.0 is performed by EmailValidator, URLValidator, and _simple_domain_name_validator, which properly reject domain names containing newline characters through various mechanisms (regex anchors, explicit unsafe...", "justification": "protected_at_runtime" } }, { "id": "CVE-2026-5766", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:2d8d75b9-8b33-5d25-bcea-538c9bdf50ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-5766 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:5cbbb14f-586e-59f7-90fd-059a32da8283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2026-6907", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:9dfdc1d1-8920-57d9-8065-29c15f21651e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6907 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2026-7666", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:d93e59a0-9620-511a-9076-2d047ecdba63", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-7666 affects version 4.0.post28+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ], "bom-ref": "urn:uuid:dd6a2e9a-ec5a-5eaf-a651-c1be52d9a659", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 4.0.post28+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@4.0.post28+tuxcare" } ] }