{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e56fa290-6231-5b8d-924b-b6b86f33fe69", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@5.0.2.post16+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@5.0.2.post16+tuxcare", "version": "5.0.2.post16+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@5.0.2", "type": "library", "version": "5.0.2" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2007-0404", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:fc3f0000-10ef-594f-874b-d28a69772fc3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0404 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2007-0405", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:9b41925e-7a82-5497-b027-aab93a2da4d6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0405 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2007-5712", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:aadbf972-111f-5707-b89b-2281e332bb84", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-5712 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2008-2302", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:5229e953-964f-518d-9254-08ccb8a2aa4a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-2302 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2008-3909", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:2716d4c4-17f8-5f2f-b857-7d2c0f559b24", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-3909 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2009-2659", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:e34e50d9-f790-565c-aace-64d056a894bf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-2659 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2009-3695", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:229d05d6-3cd0-58e6-a526-5871630d6461", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-3695 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2010-3082", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:cc6bc5b5-536c-58a2-9c6d-372f5a13c04f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-3082 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2010-4534", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:8925b8a7-7e16-5e1a-a2e8-018e65470f29", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4534 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2010-4535", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:117eada3-59b4-5e8e-9cbc-9938a8f9b7e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4535 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2011-0696", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:8853d827-08bf-55ce-96dc-bc52eb2b252b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0696 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2011-0697", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:fba7c90b-876c-51fd-8cde-345cf8c9e9e7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0697 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2011-0698", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:fbfaa0f1-f85f-54bf-b8f9-cf0df3c067c2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0698 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2011-4136", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:e6239a4d-103f-509c-affa-7b92a2d7a8fd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4136 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2011-4137", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:c1a3ac09-f609-59b8-948a-2d64aec2ca66", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4137 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2011-4138", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:a3fe19ca-ba9a-5b8b-8388-a7d1c757f785", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4138 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2011-4139", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:770ee56e-617b-5923-960e-a981bf4a6073", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4139 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2011-4140", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:fe182f68-a6ac-5121-8567-2f08bb754dfb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4140 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2012-3442", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:5d675a31-0adb-5274-89ef-c629c3d639dc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3442 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2012-3443", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:c60fa7cd-ae93-5f70-82b6-bae606d70abf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3443 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2012-3444", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:8a03e41d-a14a-5888-b249-34ace56b5dc6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3444 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2012-4520", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:2d62f5d5-97d2-59f0-9055-315e6b456c53", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-4520 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2013-0305", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:3baa2fc6-3da2-58d1-82ef-fc9724a8b520", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0305 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2013-0306", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:687ca274-dc2b-56c8-8520-768922cbf2f8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0306 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2013-1443", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:c02a852d-1d18-5235-b09c-e59574d696df", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1443 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2013-1664", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:5af740a9-56d4-5792-8f53-fd8c7cff2f94", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1664 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2013-1665", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:3f4bf0b4-3dd9-5848-ab78-11fee1314628", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1665 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2013-4249", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:253d3145-6965-598f-a55e-c15ea5e5aff1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4249 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2013-4315", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:4ce315a9-afe1-5368-b423-7695d8f4ea06", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4315 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2013-6044", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:9cc1d58f-8803-5f35-8c6d-c2d7e370a38e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6044 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2014-0472", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:047c7872-8763-5ad2-b863-d0cb5bdcb147", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0472 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2014-0473", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:c65d6a68-1c71-5466-9770-0928bd55aaf3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0473 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2014-0474", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:d0d47f2f-9622-5376-9afb-b6e9b6cd8b11", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0474 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2014-0480", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:05c625de-d1cd-5b41-87c7-57e11aed2765", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0480 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2014-0481", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:5095cff8-8dba-53a9-aa89-0854524ec5ec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0481 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2014-0482", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:3cca34dc-4415-5dfa-8b36-e0462894d23d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0482 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2014-0483", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:d03a5af4-5549-5f1c-aada-abae78034a27", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0483 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2014-1418", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:ec29d6c5-ab6c-53e0-9468-dd5d692f8f75", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-1418 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2014-3730", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:a318e6f9-58de-599e-a152-152880bc4be6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3730 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2015-0219", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:49dd91bf-83d8-58f3-b1e6-5f9b5eb21949", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0219 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2015-0220", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:0f46a34b-c746-52db-b1be-b5865a823f73", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0220 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2015-0221", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:d00abb80-c60c-5f9d-8d54-a0dde98986d2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0221 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2015-0222", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:1240960e-1a4a-55c5-b97b-f871161de0f2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0222 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2015-2241", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:8826ff7a-2a18-5750-b5b2-bf7720bd1efc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2241 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2015-2316", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:399c9689-58ce-50a1-ab57-5b35b9c3a9aa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2316 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2015-2317", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:13532974-9b5e-511a-8cfa-34c0dbf0ebcd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2317 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2015-3982", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:49a25a28-c660-5023-9b58-03c1dd1b7a12", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3982 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2015-5143", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:0d7e13bc-ed93-5e22-93be-fd2b6ca13f5f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5143 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2015-5144", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:3ce454ed-06ce-5be9-9367-345fb1c59fa9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5144 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2015-5145", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:36a5e6e6-19b3-559f-8601-ddb09b952af0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5145 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2015-5963", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:fc8486b5-547c-5223-8f37-c5528bbdba2a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5963 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2015-5964", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:6ac6a293-bcfa-520b-b16a-4ecfd6989016", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5964 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2015-8213", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:d5641322-ee90-5ca2-97a5-356bbd5b9753", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8213 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2016-2048", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:b36c3c60-5c1b-5421-bc8e-af5182db5135", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2048 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2016-2512", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:69c16905-6dc9-53ba-9861-2fb8a83825cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2512 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2016-2513", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:f0ca96ed-c59c-5bd3-80c9-641d5c6f543f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2513 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2016-6186", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:d946f68d-ecd0-5bba-baf3-4e1e75d5417e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6186 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2016-7401", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:294213a2-2900-5343-b677-548a8989aa91", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-7401 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2016-9013", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:bbfe1469-239b-5ba1-877d-ed2df5969bbf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9013 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2016-9014", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:2925c48d-6f28-58a6-a6f0-31f91a1fc2fb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9014 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2017-12794", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:3cad4b97-f1a3-52f8-a75d-29a04a6bf0df", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12794 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2017-7233", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:515c870f-a0b4-567a-a6a1-66a42aacc032", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7233 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2017-7234", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:f55e7ad4-c4fe-58b1-afad-42f631e6796e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7234 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2018-14574", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:57f6b267-190b-5c1c-afdb-229eb3395424", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-14574 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2018-16984", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:4d892155-7355-59e6-8574-ebae2919e9cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-16984 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2018-6188", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:5e4c7560-5cc0-5209-a036-b767f1e58c53", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-6188 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2018-7536", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:f31487b9-55c6-5018-9986-18a73c5cec63", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7536 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2018-7537", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:de52e90e-3340-56b3-98a4-9e8f4f4fb3c8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7537 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2019-11358", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:68f245b4-fcfe-5736-b718-30156898f85b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-11358 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2019-12308", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:36398f3d-f785-5830-8c77-0447611772fd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12308 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2019-12781", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:96435cba-c68f-5586-888f-c55c769696a5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12781 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2019-14232", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:75404820-53fb-5b03-b1fc-18ab3177cb8a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14232 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2019-14233", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:d1157705-589c-52d1-8075-2f2f0f09efff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14233 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2019-14234", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:1cd4ba4a-0cd4-5f7c-896e-a0f791632251", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14234 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2019-14235", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:960fc9d3-060a-54fb-8610-c04286c4831f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14235 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2019-19118", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:edadbbe9-86ec-5611-ae44-f4a6d3af560b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19118 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2019-19844", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:d2eedba2-2a2d-5eeb-9bbb-f3ec9ef37eba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19844 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2019-3498", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:e8874efa-b68e-5553-9549-72020b8ab28e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-3498 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2019-6975", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:87289e0b-e1d6-53dd-b648-00a2f9314477", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-6975 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2020-13254", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:382a3596-0ba4-593f-b993-7a2e2af22cc3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13254 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2020-13596", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:edbb977f-bcf3-5054-987c-8ca47506cfbd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13596 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2020-24583", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:f039fd5f-c024-595f-ae09-b8a9c1d9aa63", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24583 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2020-24584", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:2711a014-d4be-5670-aca9-59b4c5e236c5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24584 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2020-7471", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:bfa8d56a-88b3-5733-902d-a490d239548d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7471 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2020-9402", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:58901e7a-c097-5869-86b8-423e5e219d38", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-9402 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2021-28658", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:d2ef10a2-1b47-5e00-be37-38e4ea72dd3d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28658 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2021-31542", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:f8a0508b-1add-5a6b-90ca-51071a4e08b6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-31542 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2021-32052", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:3311b4d6-2fd7-5586-a9c6-d0409b0827d1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-32052 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2021-3281", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:d0feee34-df20-5b1b-8340-095c33dcbdb8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3281 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2021-33203", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:bf1fa421-924f-50a8-acc7-ee5bfe47ab3f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33203 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2021-33571", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:1efcad01-fb4d-556c-9262-7cb20c023b73", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33571 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2021-35042", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:a85c10a3-7ee4-5d58-8a25-4868075fd502", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-35042 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2021-44420", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:6c673f45-d867-5d3c-836a-96f9ae3d0272", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-44420 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:ba669451-5b82-520f-9e77-cf8f9c9225f4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45115 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:4d51848c-f62e-50f2-9df0-28276df7cb63", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45116 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:0ef64ee3-9e91-50d0-9bea-fb57122745cc", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-45452 does not affect version 5.0.2.post16+tuxcare of django. not_affected \u2014 Django 5.0.2 is NOT affected by CVE-2021-45452. The directory traversal vulnerability in Storage.save() was fixed by upstream Django in version 4.0.1 (January 2022), over 2 years before Django 5.0.2 was released (February 2024). All required defenses are present in the target: backslash normalization, path traversal detection via \"..\" checks, os.path.relpath() to ensure relative paths, and trip...", "justification": "code_not_present" } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:5941de82-3239-50ca-b1fc-edfa1528cac2", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22818 does not affect version 5.0.2.post16+tuxcare of django. not_affected \u2014 Target Django 5.0.2 is not affected by CVE-2022-22818. The vulnerability (unescaped HTML output in {% debug %} template tag leading to XSS) is not present because the upstream Django fix was already included in the 5.0.2 release. The DebugNode.render() method contains both security measures: (1) early return when DEBUG=False, and (2) HTML escaping via escape() on all pformat outputs. CVE affect...", "justification": "code_not_present" } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:a71fc928-4aeb-55b6-8b2d-21234e6fb6e6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-23833 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:79c34bee-c509-594a-b2ee-75d948748ff5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28346 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:b91de959-3472-57a9-86d6-3515d66a6859", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28347 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:4a37e779-a285-5883-9e31-4a64889f8f49", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-34265 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:3c974b70-fe07-5254-99c2-0f432540ffe4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36359 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:99d83a84-1ac5-5986-b41b-464f50049721", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-41323 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:ffd4ce0d-b82e-58a0-9b09-6bb3b3968235", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-23969 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:09f8e4c2-d729-57d9-b89c-e001e2c8bd2e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-24580 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:654b8a1a-6eaf-5bfe-813e-d7ff625e2ece", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31047 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:791884fd-af57-530a-85f2-b55dc7ba35ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36053 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:5a277b88-126a-51ba-adc7-97e47c6a5566", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:ff4ba8de-5b96-5c72-ba5d-8787b7c2c737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-43665 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:add82607-b640-525c-af8f-f03e139b7cb2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46695 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:4e6dc1d6-aff6-5e11-95c5-b42fc4e010b0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-24680 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:c796d1ba-23cc-53cf-b3f9-a722f47054e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:163e119b-1ada-5c07-92f7-bfa66c7cea9b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:faf4a847-3975-5808-b692-b2eba57c39d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:0784af51-c53e-526f-9d15-f1b8c65dfbe8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:03ba9f80-bca2-5a95-a7be-3e24b87ac803", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:76cbebfb-97ea-562c-af62-953409087edc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41989 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:d19b483f-09f1-5f25-adea-1569cfffc00b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-41990 does not affect version 5.0.2.post16+tuxcare of django. not_affected \u2014 Django 5.0.2 uses the original simple trim_punctuation implementation that lacks the vulnerable code pattern. CVE-2024-41990's DoS vulnerability was introduced by the CVE-2024-38875 fix (commit d666457453, June 2024) which replaced the simple implementation with a complex CountsDict-based one containing repeated rfind('&') calls. The target version predates this architectural change and therefo...", "justification": "code_not_present" } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:560c9939-c650-5c89-bf0b-3bfe38691440", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41991 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:83206844-778f-59a3-af2f-4447ad218e3a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-42005 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:d72cecb7-136d-569a-a9e5-2eb8ce31fbdb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45230 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:aaba3a0d-7669-5001-a070-d9e3fdf3a375", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:dec87032-20a9-5bf8-b0d0-3451b17f3254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53907 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:21a8e81e-5a21-5f0e-8596-260a03d06d90", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:c6d03f1c-35ab-52bc-9525-00eadba25ca7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56374 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:891254ed-e906-550a-93f1-66c0350be297", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:aaa577bb-1fbb-554b-8762-3b7371f53e35", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:743ba834-6079-57dc-9f1e-a90c348285c3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:300ef577-8d51-54fb-abdd-d48b21199fa2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-26699 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:a44d16a6-55b8-5563-8f27-1a05dec70274", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-27556 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:87f75941-6689-542c-98bb-858a74ae5db0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32873 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:95eb2493-5cf2-5e02-99dc-aacda675cbf9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:3fb1eb2c-877e-5f51-9d8c-6c46b07521f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:edcf91eb-0166-529c-9dd4-61d64c5557b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59681 is already fixed in version 5.0.2.post16+tuxcare of django. CVE-2025-59681 already fixed on tuxcare-current/5.0.2 by 96d64ebe98, released in 5.0.2.post7+tuxcare; FORBIDDEN_ALIAS_PATTERN matches upstream stable/4.2.x; alias 'x#' rejected on 5.0.2.post16 from Nexus." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:cac2c6fd-3091-5020-870f-3d64679754d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59682 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:1c04f74d-5ebe-5a44-b77d-2392dc4451ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:b8869a54-58ee-5dfe-b495-1a1e61d36876", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:3fac091e-4d6a-54b4-8060-3fbc42969456", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2026-108147", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:1e9b8dae-a330-57e4-97e7-cbee18371669", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-108147 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2026-111211", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:0d1a27b7-fa20-519d-8be3-b0ad7e61869a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111211 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2026-111362", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:95212f38-a391-578c-a60f-737471d876fc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111362 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2026-113593", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:e14401db-ba7e-5f9b-af34-135ce722d61b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113593 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2026-113733", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:85466324-b70b-552a-95c8-95ee0d5fee7e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113733 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2026-114582", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:00937df0-a791-572f-b61d-b062c52e200c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-114582 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:31f2f97f-d389-55cb-9251-6955df6cd7ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:bcc627a0-55ca-5b6b-8069-9513e71936d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:4c437f19-7e05-5d7f-9cbf-4e668b149fe5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:425750cd-52e0-5abf-ae33-7e4b30e17282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:307c8cae-d3e7-5b6d-bc5e-3f2b44ba38e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15307 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:d884f5c9-cae1-506f-80ac-eac1f3aea53d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15830 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:cf3d832e-f093-5173-9d30-3a871a6b35d9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25673 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:3c409c5c-8784-5dff-b867-6ccd3d21c8a6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25674 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:68d61c99-9042-5cb8-b2d2-f6a54cdcc3ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33033 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:16299d93-f369-5268-82d6-f36d3bcc5529", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2026-35192", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:a1029097-3414-5fab-be63-a0be21f19eb6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35192 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2026-35193", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:266cdbf5-e223-5c2d-8f18-1af67bf35800", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35193 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:861f918b-cba0-548c-adac-f80022d1e42d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-3902 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:d0da55e0-5f34-5845-a151-77f0820a7cad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-4277 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:5d11b7af-8da4-5d60-86f7-171dfcedfb84", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-4292 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:ad3d554c-74f0-5157-ba97-ec9b29322daf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:db744940-699b-5470-a562-ee35ceee8df0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:d69149f2-d57f-5ae7-9192-53986edcc75f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:0fe5ede9-c5a1-58e0-8e46-16877d2627de", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 5.0.2.post16+tuxcare of django. not_affected \u2014 Django 5.0.2 is not affected by CVE-2026-53878. The vulnerable code (DomainNameValidator class) does not exist in this version - it was introduced in Django 5.1. Django 5.0.2 uses _simple_domain_name_validator which already validates against newlines via string.whitespace.", "justification": "code_not_present" } }, { "id": "CVE-2026-5766", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:d6587a45-93a8-55ee-b2c6-0eead79f3d13", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-5766 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:ed100671-6187-566c-9b93-d3f8ae319b6a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2026-6907", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:e572e29f-6b4f-5191-9c7f-ca4d5c4843ac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6907 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2026-7666", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:394e1f74-dc8b-5801-92cd-3db9451c4980", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-7666 affects version 5.0.2.post16+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ], "bom-ref": "urn:uuid:d6ec4754-85e0-576c-afcc-f2d32513d14e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 5.0.2.post16+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@5.0.2.post16+tuxcare" } ] }