{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a12fc42e-50dd-5032-a898-fd1f75b96c7f", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@5.0.post22+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@5.0.post22+tuxcare", "version": "5.0.post22+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@5.0", "type": "library", "version": "5.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2007-0404", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:496bd1ef-7bfa-5efc-8e1b-b371184119b3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0404 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2007-0405", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:b9097e65-2068-5f7f-b70c-6783d3075de5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-0405 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2007-5712", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:d2159255-a3ba-5a5d-b1ec-f9087d728a64", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-5712 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2008-2302", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:f7b092bb-15a6-5440-b14d-a062a6659306", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-2302 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2008-3909", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:a68b514e-43ed-5861-827a-c55cdfebe50b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-3909 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2009-2659", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:8efb73d7-1ebe-5bc5-a92a-f034e4a9a144", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-2659 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2009-3695", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:a455a3fd-9424-5220-ad1c-c720add17d5f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-3695 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2010-3082", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:52f73d5f-0822-5e0e-8e74-077a1b7b8222", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-3082 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2010-4534", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:26d91b05-4c42-5824-94ec-38cbf84d1987", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4534 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2010-4535", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:2c20bb59-1844-5400-9110-5896174b60be", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2010-4535 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2011-0696", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:450edfcc-cf83-5cab-9369-3f7877ecdba3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0696 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2011-0697", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:40ef86f7-0ccb-5840-9d2f-1e85412af707", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0697 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2011-0698", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:2094371a-e552-557b-9b0e-0fd4fc42fdc0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-0698 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2011-4136", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:39c45ee3-243a-52eb-8aee-607c8f1d1df0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4136 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2011-4137", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:f8a65979-cb4b-55c1-b5d0-80f699247f37", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4137 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2011-4138", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:15d14796-9df9-58dd-bbae-acb61221785d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4138 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2011-4139", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:840ebe55-0d8c-544f-8d6b-5f0d070823a5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4139 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2011-4140", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:e39d1858-8831-5a7c-80f1-234dabd50776", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4140 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2012-3442", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:77425afa-21e9-5e2f-8d25-36fd6444b81b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3442 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2012-3443", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:6b9140fe-f285-5dba-8042-d2a9d1c1cd23", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3443 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2012-3444", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:53212967-b7b7-5c30-b22f-927c16a4cfca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-3444 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2012-4520", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:0798bec5-39ed-5179-a3a9-506f3ee5c96d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-4520 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2013-0305", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:a92198b8-9691-50ca-8ec7-266dea391179", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0305 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2013-0306", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:da7cddc2-6aa4-5126-94e7-604b7d2d7d52", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-0306 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2013-1443", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:d286fc00-3565-59a1-b6a1-0612ff1a0cf9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1443 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2013-1664", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:c78b1a70-a9a4-57ad-bcf0-3d2e9c29f193", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1664 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2013-1665", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:3c39ef0c-1ea8-5c9d-9bb4-474c227cee78", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1665 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2013-4249", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:eb601a15-ea59-5857-9000-6d4c7fb748af", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4249 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2013-4315", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:de2a0617-16b6-534c-8602-fb3a5b2c1623", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4315 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2013-6044", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:4bb2b64b-8a19-525d-a691-154265bd814f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6044 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2014-0472", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:54c3a631-35a3-5621-be95-9c88854ee06a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0472 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2014-0473", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:f0faeb48-62c5-5aaf-b633-2ab7671aeb1e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0473 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2014-0474", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:eec856b1-3afc-539d-8878-48deb7c55f8b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0474 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2014-0480", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:c5d9402e-d38d-52d2-84b4-bd1db85b61c7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0480 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2014-0481", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:80542c38-b2ac-57c0-9177-ed7759c96f3d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0481 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2014-0482", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:0ebde212-48b6-5e52-ade3-9b67f426af51", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0482 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2014-0483", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:88571686-da60-56fa-838c-11639b500bbf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0483 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2014-1418", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:91a32e99-30ab-596e-a8a0-dddb2dc828b2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-1418 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2014-3730", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:4508ae22-d465-5745-b791-183bc278c41c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3730 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2015-0219", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:58e91a22-0e12-5d1f-b206-e791e58d97b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0219 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2015-0220", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:5508f30c-b6b8-5761-b421-3e9b8d58435e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0220 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2015-0221", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:a630cadf-6e34-549b-a028-3ffb2d46eb72", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0221 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2015-0222", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:fead4b7e-d3e8-5f17-8d9b-20a610af4da5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0222 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2015-2241", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:ff9e6624-29d2-5a71-992e-246490ea76fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2241 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2015-2316", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:a890b36d-0cbb-5d9e-8efe-54cd592d207b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2316 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2015-2317", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:faf6c47f-ccca-513a-ac84-3897b1537d46", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2317 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2015-3982", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:264082c9-6775-5f23-8889-7e7c0e481eb4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3982 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2015-5143", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:d8eca7b3-cc05-5afb-b7fc-0b426c5e77d9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5143 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2015-5144", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:8763448b-43bb-5776-9505-5838230d0857", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5144 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2015-5145", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:4c6f0719-95ed-560b-a99c-9fb93273cea5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5145 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2015-5963", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:c428df22-279e-5318-bebb-e69561fccdab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5963 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2015-5964", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:85b01cb5-b0c1-52b1-8d07-8c363a5e4e56", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5964 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2015-8213", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:762de37b-c515-57dc-8e2e-c53bd83290ae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8213 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2016-2048", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:c9dc1a68-a518-5e10-a0d3-816bb29fecef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2048 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2016-2512", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:e23f8174-734b-58a6-a80c-c25bbee4bedf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2512 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2016-2513", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:f9eeb7f2-e635-5312-a7a1-b8c78c1ca7d9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-2513 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2016-6186", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:1a464bf1-6c58-57a8-a73a-df9dc6cf072e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6186 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2016-7401", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:1b2be478-a57d-5f2f-9ebc-3f544ffa6215", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-7401 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2016-9013", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:27825e7c-f2ef-559b-be1c-eb9722df9fef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9013 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2016-9014", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:36e0bcc2-58fe-5211-9c70-696c74aa9ec2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9014 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2017-12794", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:e32e668e-1ed1-5b26-a0c4-5666ddbb9329", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12794 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2017-7233", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:14ffde5f-08f8-59fa-a70c-ee0c15fe5d65", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7233 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2017-7234", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:73630ad9-ebf2-5177-8949-e955db5c9782", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7234 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2018-14574", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:c6a5d113-3417-56d0-a671-33198fc5463c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-14574 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2018-16984", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:08f1c23c-54a0-5a94-8afd-e00aed687c43", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-16984 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2018-6188", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:7dcfe0a4-9797-5f3e-b18c-13f6e3ca24ca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-6188 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2018-7536", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:99e9d639-592f-521c-bd15-cd748f361157", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7536 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2018-7537", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:eb0d6a3c-18b9-5250-86b6-77a702d864ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-7537 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2019-11358", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:580dbb7a-2deb-5ece-8b8b-c1f415b4068a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-11358 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2019-12308", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:043785ee-e6aa-5835-9d48-00e41d690ee1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12308 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2019-12781", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:5a1610a0-3f51-5db2-8de9-3213f06c7e86", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-12781 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2019-14232", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:39130446-66b7-50a7-b581-f0f5471aa532", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14232 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2019-14233", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:4c641ef5-0ac4-5eef-b049-66276b1201a7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14233 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2019-14234", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:89974ceb-302b-5155-a122-6d510e071e7c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14234 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2019-14235", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:701e93f5-fccb-53c0-b99c-3f38326c87a3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14235 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2019-19118", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:3f4bf4d7-f3b8-5067-981f-9dcfcb4ae854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19118 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2019-19844", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:e0190771-b487-5960-a445-77bbed1e3eb3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19844 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2019-3498", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:f72838cc-0bcb-5b06-a506-50b0b21d1991", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-3498 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2019-6975", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:cf447da5-a59e-5e9e-b922-1dc99c778c50", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-6975 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2020-13254", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:6bb27212-7411-5489-9c52-c40059f430b8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13254 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2020-13596", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:14b2267d-0777-5be4-a4b9-06decc10e665", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13596 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2020-24583", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:49aba770-48c4-54fa-9286-ca2f332def2c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24583 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2020-24584", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:1a8c048d-b406-599a-b2a1-2b29192f6ce8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-24584 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2020-7471", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:83ddcc00-cac2-5566-967e-f71c3e2ebb28", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7471 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2020-9402", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:a0b80d70-af94-583a-815f-a9685e665fda", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-9402 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2021-28658", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:ceb8f363-16a2-5d29-8b04-7ce2597631d7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28658 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2021-31542", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:d047282a-35f6-58c1-b44c-462efe17cfcd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-31542 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2021-32052", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:4ad66ca4-c57e-5f25-bf10-43a8445b72e9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-32052 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2021-3281", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:697b4cae-8566-5362-b2c5-ba1c205c8953", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3281 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2021-33203", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:9a3d4d14-83ac-5f7d-95f2-97ec6785cbbc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33203 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2021-33571", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:af609f94-4e25-5e73-a907-2565f352db54", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-33571 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2021-35042", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:1e0c4637-5f50-51f6-845c-488bc11ee35f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-35042 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2021-44420", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:12f24312-ab98-5ab6-b40f-6b707039d93b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-44420 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:617f0357-c0b3-5905-834e-2c3ab99b549d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45115 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:add98532-33e3-5a35-bd6a-a32513dc003e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45116 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:93eb250c-66f8-5acc-a966-c6f935a78d94", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-45452 does not affect version 5.0.post22+tuxcare of django. not_affected \u2014 CVE-2021-45452 (directory traversal in Storage.save()) is NOT present in Django 5.0.0.post20+tuxcare. The upstream fix (commit 6d343d01c5 by Florian Apolloner) shipped in Django 5.0.0 and predates all TuxCare commits in this branch. All defense mechanisms are present: backslash normalization (base.py:75,116), path traversal detection (base.py:77-80,119-122), relative path enforcement (filesyste...", "justification": "code_not_present" } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:30905c13-1c07-5e48-989c-9e32dc96d85c", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22818 does not affect version 5.0.post22+tuxcare of django. not_affected \u2014 The target Django 5.0 repository is NOT AFFECTED by CVE-2022-22818. The vulnerability (XSS via unescaped output in the {% debug %} template tag) was fixed by Django upstream in commit 394517f078 on 2022-01-02, three years before this Django 5.0 release. The fix\u2014which wraps pformat() output with HTML entity encoding via escape() and blocks output when DEBUG=False\u2014is present at django/template/de...", "justification": "code_not_present" } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:1b643f50-171a-580e-841c-2b58beef4131", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-23833 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:6c35fd80-b5a2-531f-9dd4-c1a52abce597", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28346 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:d6ee23f3-81d6-5091-bc0c-7e63cb2ce324", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28347 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:618a8601-f2b7-5350-b6f6-e13454dea949", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-34265 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:c71330a3-cd56-5d69-ab7d-14f9716fd17f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36359 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:e41bac62-358a-51f8-9c7e-68d372999339", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-41323 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:8a43ebd7-684a-5066-b991-d01f6238f684", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-23969 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:42e9a461-1c39-5497-819b-277f2d790437", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-24580 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:20b982cb-5183-51c9-b143-53d7d88d878b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31047 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:270a66b0-c88f-5df5-b2a7-80362f991c3b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36053 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:e245f6ed-182a-52eb-a9df-5e69297aaece", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:7a4e0be4-31f2-54eb-84ca-908d375b2258", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-43665 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:764e4163-f4a2-5245-9a6c-e2e711ada755", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46695 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:c5921317-a307-525a-aa3a-2e1fb3c78afb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24680 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:10ed891b-ade3-5218-a148-74644e8ac6b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:013a63d2-86ca-54b5-b830-b9640e005352", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:8fb2090a-9072-5e0e-8bcd-4da4807ef28c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:0f8b2e8e-cf8f-5695-ab9c-a85d094d56ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:49b652dc-eafc-5206-a438-3016b080e577", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:adb7c772-9472-57bc-a8d3-ff2d6e96b753", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41989 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:55fa7aa5-13f4-559e-b96a-9d6f6589206b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41990 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:9129c192-d902-5629-8636-f46070644dbc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41991 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:428be8cc-d075-5f72-874f-1e2cbe14ed05", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-42005 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:5edad0ef-a4ce-5074-aa1e-4d65404a6084", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45230 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:d7e37383-a081-5b00-b2b1-acc3193958b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:1b5064a3-c96f-5d5a-bdaa-7565bae2ecea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53907 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:abc42ddb-749c-5c15-91ee-bf6316f5717b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:7a3149b7-34a1-5e61-95f1-4d19588d683c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56374 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:8d3a1250-1413-5a25-bbce-c3311b00d04e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:56bf4aeb-9277-5393-8a87-046e04d1070a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:b35624e3-cc61-55db-a2b3-67ad3cadecb0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:65afb1a6-a6ef-5171-a9a8-e807dac398a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-26699 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:9407d31b-bbd5-585c-a921-a9a9e7f50d73", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-27556 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:cda0e232-cfef-5cd9-a86d-cd5f4d380a80", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32873 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:842f1d4b-2a7e-5b4d-98ee-4957ccff32f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:1756453a-735d-5ec6-8b84-0eb94e34c486", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:2c479cba-5598-54a1-b421-94ecce8295eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59681 is already fixed in version 5.0.post22+tuxcare of django. CVE-2025-59681 already fixed on tuxcare-current/5.0 by 9f60b363dd, released in 5.0.post10+tuxcare; alias 'x#' rejected on 5.0.post21 from Nexus." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:4608946b-e5eb-57c0-a594-9ecc82374007", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59682 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:8bb879b0-0c10-51fc-97ad-09034d80f492", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:42e94337-87b8-5e56-ac09-4d36386fdec4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:dea09b27-23e5-5565-b5b9-75570519eff1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2026-108147", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:1e90b738-b759-582d-adbc-ae78aeb78c56", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-108147 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2026-111211", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:ac718cf1-753c-5708-9bfa-46dcbf9c242f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111211 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2026-111362", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:db148a84-2099-547b-99bb-a7a6ff2a66c5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111362 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2026-113593", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:d1e53139-19c9-58b1-9386-485a0a6c5e9f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113593 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2026-113733", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:f2f8e9aa-4608-5386-9592-bf841f46074f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113733 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2026-114582", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:6f9119b1-8319-5312-81dc-9f9dec3d6a4e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-114582 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:c681d0df-357c-549c-b0a6-af5e8b24206b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:f45989c8-9aca-5b64-82ba-345c21cde787", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:9a0ada05-aacd-56ed-877b-b0af500630d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:3fa97ed6-e051-5801-b7ee-2a1f41c1292d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:0538d5ec-ec9e-53a1-9cba-2e0be74bb0e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15307 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:9cc923cb-3c92-5bfc-8d1f-f66fc87d97f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15830 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:dfd63f70-31f9-51e1-aeed-fb292558d7e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25673 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:20e42a43-2c28-5cea-bc41-6b511323095f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25674 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:297358fc-1034-5e76-9efa-6952f227bbb5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33033 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:71817ab6-42b0-5885-baa8-16aa64ef33fe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2026-35192", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:2da0b60b-19c8-5a7f-9b27-c59e2c6b98d2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35192 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2026-35193", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:aed7621a-912e-5e35-a022-7af98a6592ed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-35193 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:5ccb5e1a-af5d-52a7-ab7e-30ab26d9d57a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-3902 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:93aeb8c6-44b0-5cfb-855c-eb65744dcd07", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-4277 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:c78342ac-f956-5eaf-8e1f-17e18e6969ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-4292 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:b01470c6-72f8-5440-8879-fef842c0fa23", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:67106833-39cd-508d-8921-943475bc1125", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:4112f984-65ac-5e96-9364-22a387cccde3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:32242c3b-0013-51ed-9664-b1aeb8b84bb6", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 5.0.post22+tuxcare of django. not_affected \u2014 Django 5.0 does not contain the vulnerable DomainNameValidator class. This validator was introduced in Django 5.1 (commit 4971a9afe5). Since the specific component affected by CVE-2026-53878 does not exist in this version, Django 5.0 cannot be affected by this vulnerability. Additionally, all domain validators present in Django 5.0 (_simple_domain_name_validator, EmailValidator, URLValidator) a...", "justification": "code_not_present" } }, { "id": "CVE-2026-5766", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:d2463d03-d1d9-5bff-87d2-addaab297d82", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-5766 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:f2c033b8-2237-5b18-83b0-82d2b40dd306", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2026-6907", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:bb820cfd-38a3-5798-a393-f3fba145fc0a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6907 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2026-7666", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:3339a642-a85c-55be-8ce5-3e2cabb41d7a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-7666 affects version 5.0.post22+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:0845e795-f0e4-593d-933c-461f9ae527be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 5.0.post22+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@5.0.post22+tuxcare" } ] }