{ "@id": "urn:uuid:fe0da98c-d6a6-4d59-9da9-3b8c45490d26", "role": "Document Creator", "author": "https://tuxcare.com", "version": 15, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-10-29T20:14:21.512222+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:05:19.418788+00:00", "status_notes": "Vulnerability CVE-2021-45115 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2021-45115" }, "action_statement": "Vulnerability CVE-2021-45115 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:05:19.418788+00:00", "status_notes": "Vulnerability CVE-2021-45116 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2021-45116" }, "action_statement": "Vulnerability CVE-2021-45116 affects version 3.2.25.post3+tuxcare of django." }, { "status": "not_affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-29T19:05:47.206663+00:00", "status_notes": "Vulnerability CVE-2021-45452 does not affect version 3.2.25.post3+tuxcare of django. not_affected \u2014 The target (Django 3.2.25) is not affected by CVE-2021-45452. The upstream fix from Django 3.2.11 (commit 8d2f7cff76) was already present in the release that TuxCare onboarded. All three fix components are present in django/core/files/storage.py: (1) backslash normalization before path validation in get_available_name() and generate_filename(), (2) relative path enforcement via os.path.relpath(...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2021-45452" }, "impact_statement": "not_affected \u2014 The target (Django 3.2.25) is not affected by CVE-2021-45452. The upstream fix from Django 3.2.11 (commit 8d2f7cff76) was already present in the release that TuxCare onboarded. All three fix components are present in django/core/files/storage.py: (1) backslash normalization before path validation in get_available_name() and generate_filename(), (2) relative path enforcement via os.path.relpath(..." }, { "status": "not_affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-29T19:54:52.451047+00:00", "status_notes": "Vulnerability CVE-2022-22818 does not affect version 3.2.25.post3+tuxcare of django. not_affected \u2014 The target Django 3.2.25.post12+tuxcare is NOT affected by CVE-2022-22818. The vulnerability (unescaped output in the {% debug %} template tag leading to XSS) was fixed in upstream Django 3.2.12. The target version 3.2.25 already contains the complete fix from commit 1a1e8278c4, which HTML-escapes all debug output via the escape() function. This fix was authored by upstream Django developers an...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2022-22818" }, "impact_statement": "not_affected \u2014 The target Django 3.2.25.post12+tuxcare is NOT affected by CVE-2022-22818. The vulnerability (unescaped output in the {% debug %} template tag leading to XSS) was fixed in upstream Django 3.2.12. The target version 3.2.25 already contains the complete fix from commit 1a1e8278c4, which HTML-escapes all debug output via the escape() function. This fix was authored by upstream Django developers an..." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:06:21.253116+00:00", "status_notes": "Vulnerability CVE-2022-23833 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2022-23833" }, "action_statement": "Vulnerability CVE-2022-23833 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:06:21.253116+00:00", "status_notes": "Vulnerability CVE-2022-28346 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2022-28346" }, "action_statement": "Vulnerability CVE-2022-28346 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:06:21.253116+00:00", "status_notes": "Vulnerability CVE-2022-28347 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2022-28347" }, "action_statement": "Vulnerability CVE-2022-28347 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:08:06.540752+00:00", "status_notes": "Vulnerability CVE-2022-34265 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2022-34265" }, "action_statement": "Vulnerability CVE-2022-34265 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:08:06.540752+00:00", "status_notes": "Vulnerability CVE-2022-36359 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2022-36359" }, "action_statement": "Vulnerability CVE-2022-36359 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:07:12.211534+00:00", "status_notes": "Vulnerability CVE-2022-41323 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2022-41323" }, "action_statement": "Vulnerability CVE-2022-41323 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:08:06.540752+00:00", "status_notes": "Vulnerability CVE-2023-23969 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2023-23969" }, "action_statement": "Vulnerability CVE-2023-23969 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:05:19.418788+00:00", "status_notes": "Vulnerability CVE-2023-24580 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2023-24580" }, "action_statement": "Vulnerability CVE-2023-24580 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:07:12.211534+00:00", "status_notes": "Vulnerability CVE-2023-31047 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2023-31047" }, "action_statement": "Vulnerability CVE-2023-31047 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:06:21.253116+00:00", "status_notes": "Vulnerability CVE-2023-36053 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2023-36053" }, "action_statement": "Vulnerability CVE-2023-36053 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:23:04.118629+00:00", "status_notes": "Vulnerability CVE-2023-41164 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2023-41164" }, "action_statement": "Vulnerability CVE-2023-41164 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:23:04.118629+00:00", "status_notes": "Vulnerability CVE-2023-43665 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2023-43665" }, "action_statement": "Vulnerability CVE-2023-43665 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:23:04.118629+00:00", "status_notes": "Vulnerability CVE-2023-46695 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2023-46695" }, "action_statement": "Vulnerability CVE-2023-46695 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:09:04.720419+00:00", "status_notes": "Vulnerability CVE-2024-24680 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2024-24680" }, "action_statement": "Vulnerability CVE-2024-24680 affects version 3.2.25.post3+tuxcare of django." }, { "status": "not_affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-29T20:14:21.512222+00:00", "status_notes": "Vulnerability CVE-2024-27351 does not affect version 3.2.25.post3+tuxcare of django. not_affected \u2014 CVE-2024-27351 is not present in Django 3.2.25.post12+tuxcare. The vulnerable regular expression pattern that caused catastrophic backtracking has been replaced by a secure WordsRegex class implementation. This fix was authored by upstream Django maintainer Shai Berger (shai@platonix.com) in commit 072963e4c4d0b3a7a8c5412bc0c7d27d1a9c3521 and was included in the upstream Django 3.2.25 release b...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2024-27351" }, "impact_statement": "not_affected \u2014 CVE-2024-27351 is not present in Django 3.2.25.post12+tuxcare. The vulnerable regular expression pattern that caused catastrophic backtracking has been replaced by a secure WordsRegex class implementation. This fix was authored by upstream Django maintainer Shai Berger (shai@platonix.com) in commit 072963e4c4d0b3a7a8c5412bc0c7d27d1a9c3521 and was included in the upstream Django 3.2.25 release b..." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:05:19.418788+00:00", "status_notes": "Vulnerability CVE-2024-38875 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2024-38875" }, "action_statement": "Vulnerability CVE-2024-38875 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:06:21.253116+00:00", "status_notes": "Vulnerability CVE-2024-39329 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2024-39329" }, "action_statement": "Vulnerability CVE-2024-39329 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:08:06.540752+00:00", "status_notes": "Vulnerability CVE-2024-39330 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2024-39330" }, "action_statement": "Vulnerability CVE-2024-39330 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:07:12.211534+00:00", "status_notes": "Vulnerability CVE-2024-39614 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2024-39614" }, "action_statement": "Vulnerability CVE-2024-39614 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:07:12.211534+00:00", "status_notes": "Vulnerability CVE-2024-41989 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2024-41989" }, "action_statement": "Vulnerability CVE-2024-41989 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:05:19.418788+00:00", "status_notes": "Vulnerability CVE-2024-41990 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2024-41990" }, "action_statement": "Vulnerability CVE-2024-41990 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:08:06.540752+00:00", "status_notes": "Vulnerability CVE-2024-41991 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2024-41991" }, "action_statement": "Vulnerability CVE-2024-41991 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:05:19.418788+00:00", "status_notes": "Vulnerability CVE-2024-42005 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2024-42005" }, "action_statement": "Vulnerability CVE-2024-42005 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:05:19.418788+00:00", "status_notes": "Vulnerability CVE-2024-45230 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2024-45230" }, "action_statement": "Vulnerability CVE-2024-45230 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-45231 affects version 3.2.25.post3+tuxcare of django, and is fixed in 3.2.25.post4+tuxcare.", "vulnerability": { "name": "CVE-2024-45231" }, "action_statement": "Vulnerability CVE-2024-45231 affects version 3.2.25.post3+tuxcare of django, and is fixed in 3.2.25.post4+tuxcare." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:08:06.540752+00:00", "status_notes": "Vulnerability CVE-2024-53907 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2024-53907" }, "action_statement": "Vulnerability CVE-2024-53907 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:08:06.540752+00:00", "status_notes": "Vulnerability CVE-2024-53908 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2024-53908" }, "action_statement": "Vulnerability CVE-2024-53908 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:06:21.253116+00:00", "status_notes": "Vulnerability CVE-2024-56374 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2024-56374" }, "action_statement": "Vulnerability CVE-2024-56374 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:05:19.418788+00:00", "status_notes": "Vulnerability CVE-2025-13372 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2025-13372" }, "action_statement": "Vulnerability CVE-2025-13372 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:07:12.211534+00:00", "status_notes": "Vulnerability CVE-2025-13473 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2025-13473" }, "action_statement": "Vulnerability CVE-2025-13473 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:05:19.418788+00:00", "status_notes": "Vulnerability CVE-2025-14550 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2025-14550" }, "action_statement": "Vulnerability CVE-2025-14550 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:08:06.540752+00:00", "status_notes": "Vulnerability CVE-2025-26699 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2025-26699" }, "action_statement": "Vulnerability CVE-2025-26699 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:06:21.253116+00:00", "status_notes": "Vulnerability CVE-2025-27556 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2025-27556" }, "action_statement": "Vulnerability CVE-2025-27556 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:09:04.720419+00:00", "status_notes": "Vulnerability CVE-2025-32873 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2025-32873" }, "action_statement": "Vulnerability CVE-2025-32873 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-48432 affects version 3.2.25.post3+tuxcare of django, and is fixed in 3.2.25.post5+tuxcare.", "vulnerability": { "name": "CVE-2025-48432" }, "action_statement": "Vulnerability CVE-2025-48432 affects version 3.2.25.post3+tuxcare of django, and is fixed in 3.2.25.post5+tuxcare." }, { "status": "fixed", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-57833 is fixed in version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2025-57833" } }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:08:06.540752+00:00", "status_notes": "Vulnerability CVE-2025-59681 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2025-59681" }, "action_statement": "Vulnerability CVE-2025-59681 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:06:21.253116+00:00", "status_notes": "Vulnerability CVE-2025-59682 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2025-59682" }, "action_statement": "Vulnerability CVE-2025-59682 affects version 3.2.25.post3+tuxcare of django." }, { "status": "fixed", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-64458 is fixed in version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2025-64458" } }, { "status": "fixed", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-64459 is fixed in version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2025-64459" } }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:05:19.418788+00:00", "status_notes": "Vulnerability CVE-2025-64460 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2025-64460" }, "action_statement": "Vulnerability CVE-2025-64460 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:06:21.253116+00:00", "status_notes": "Vulnerability CVE-2026-1207 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2026-1207" }, "action_statement": "Vulnerability CVE-2026-1207 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:08:06.540752+00:00", "status_notes": "Vulnerability CVE-2026-1285 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2026-1285" }, "action_statement": "Vulnerability CVE-2026-1285 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:08:06.540752+00:00", "status_notes": "Vulnerability CVE-2026-1287 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2026-1287" }, "action_statement": "Vulnerability CVE-2026-1287 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:09:04.720419+00:00", "status_notes": "Vulnerability CVE-2026-1312 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2026-1312" }, "action_statement": "Vulnerability CVE-2026-1312 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-07T11:08:00.189086+00:00", "status_notes": "Vulnerability CVE-2026-15307 affects version 3.2.25.post3+tuxcare of django, and is fixed in 3.2.25.post9+tuxcare.", "vulnerability": { "name": "CVE-2026-15307" }, "action_statement": "Vulnerability CVE-2026-15307 affects version 3.2.25.post3+tuxcare of django, and is fixed in 3.2.25.post9+tuxcare." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-07T11:08:00.189086+00:00", "status_notes": "Vulnerability CVE-2026-15830 affects version 3.2.25.post3+tuxcare of django, and is fixed in 3.2.25.post9+tuxcare.", "vulnerability": { "name": "CVE-2026-15830" }, "action_statement": "Vulnerability CVE-2026-15830 affects version 3.2.25.post3+tuxcare of django, and is fixed in 3.2.25.post9+tuxcare." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:06:21.253116+00:00", "status_notes": "Vulnerability CVE-2026-25673 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2026-25673" }, "action_statement": "Vulnerability CVE-2026-25673 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:09:04.720419+00:00", "status_notes": "Vulnerability CVE-2026-25674 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2026-25674" }, "action_statement": "Vulnerability CVE-2026-25674 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:07:12.211534+00:00", "status_notes": "Vulnerability CVE-2026-33033 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2026-33033" }, "action_statement": "Vulnerability CVE-2026-33033 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:05:19.418788+00:00", "status_notes": "Vulnerability CVE-2026-33034 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2026-33034" }, "action_statement": "Vulnerability CVE-2026-33034 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:09:04.720419+00:00", "status_notes": "Vulnerability CVE-2026-3902 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2026-3902" }, "action_statement": "Vulnerability CVE-2026-3902 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:08:06.540752+00:00", "status_notes": "Vulnerability CVE-2026-4277 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2026-4277" }, "action_statement": "Vulnerability CVE-2026-4277 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-28T19:06:21.253116+00:00", "status_notes": "Vulnerability CVE-2026-4292 affects version 3.2.25.post3+tuxcare of django.", "vulnerability": { "name": "CVE-2026-4292" }, "action_statement": "Vulnerability CVE-2026-4292 affects version 3.2.25.post3+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-08T06:59:00.131978+00:00", "status_notes": "Vulnerability CVE-2026-48587 affects version 3.2.25.post3+tuxcare of django, and is fixed in 3.2.25.post10+tuxcare.", "vulnerability": { "name": "CVE-2026-48587" }, "action_statement": "Vulnerability CVE-2026-48587 affects version 3.2.25.post3+tuxcare of django, and is fixed in 3.2.25.post10+tuxcare." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-48588 affects version 3.2.25.post3+tuxcare of django, and is fixed in 3.2.25.post7+tuxcare.", "vulnerability": { "name": "CVE-2026-48588" }, "action_statement": "Vulnerability CVE-2026-48588 affects version 3.2.25.post3+tuxcare of django, and is fixed in 3.2.25.post7+tuxcare." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-01T05:23:00.306633+00:00", "status_notes": "Vulnerability CVE-2026-53877 affects version 3.2.25.post3+tuxcare of django, and is fixed in 3.2.25.post8+tuxcare.", "vulnerability": { "name": "CVE-2026-53877" }, "action_statement": "Vulnerability CVE-2026-53877 affects version 3.2.25.post3+tuxcare of django, and is fixed in 3.2.25.post8+tuxcare." }, { "status": "not_affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-53878 does not affect version 3.2.25.post3+tuxcare of django. not_affected \u2014 Django 3.2.25 is not affected by CVE-2026-53878. The CVE concerns `DomainNameValidator` (introduced in Django 5.x/6.x) which does not prohibit newlines in domain names. Django 3.2.25 lacks this class entirely. The existing domain validators (`_simple_domain_name_validator` in sites/models.py, `EmailValidator.validate_domain_part()` in core/validators.py) already prohibit newlines either explici...", "vulnerability": { "name": "CVE-2026-53878" }, "impact_statement": "not_affected \u2014 Django 3.2.25 is not affected by CVE-2026-53878. The CVE concerns `DomainNameValidator` (introduced in Django 5.x/6.x) which does not prohibit newlines in domain names. Django 3.2.25 lacks this class entirely. The existing domain validators (`_simple_domain_name_validator` in sites/models.py, `EmailValidator.validate_domain_part()` in core/validators.py) already prohibit newlines either explici..." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-10-01T05:23:00.306633+00:00", "status_notes": "Vulnerability CVE-2026-6873 affects version 3.2.25.post3+tuxcare of django, and is fixed in 3.2.25.post8+tuxcare.", "vulnerability": { "name": "CVE-2026-6873" }, "action_statement": "Vulnerability CVE-2026-6873 affects version 3.2.25.post3+tuxcare of django, and is fixed in 3.2.25.post8+tuxcare." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@3.2.25.post3+tuxcare", "identifiers": { "purl": "pkg:pypi/django@3.2.25.post3+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-8404 affects version 3.2.25.post3+tuxcare of django, and is fixed in 3.2.25.post7+tuxcare.", "vulnerability": { "name": "CVE-2026-8404" }, "action_statement": "Vulnerability CVE-2026-8404 affects version 3.2.25.post3+tuxcare of django, and is fixed in 3.2.25.post7+tuxcare." } ] }