{
  "@id": "urn:uuid:da9d7d02-c49d-4494-9284-8aa452c8855b",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 14,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-29T19:58:08.504070+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-28T19:05:19.418788+00:00",
      "status_notes": "Vulnerability CVE-2021-45115 affects version 4.2.post8+tuxcare of django.",
      "vulnerability": {
        "name": "CVE-2021-45115"
      },
      "action_statement": "Vulnerability CVE-2021-45115 affects version 4.2.post8+tuxcare of django."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-28T19:05:19.418788+00:00",
      "status_notes": "Vulnerability CVE-2021-45116 affects version 4.2.post8+tuxcare of django.",
      "vulnerability": {
        "name": "CVE-2021-45116"
      },
      "action_statement": "Vulnerability CVE-2021-45116 affects version 4.2.post8+tuxcare of django."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-29T19:13:00.100912+00:00",
      "status_notes": "Vulnerability CVE-2021-45452 does not affect version 4.2.post8+tuxcare of django. not_affected \u2014 Django 4.2.0 is not affected by CVE-2021-45452. The vulnerability was fixed in the upstream Django release before version 4.2.0 was published. All security defenses from the patch (backslash normalization, path traversal detection, post-save validation, and relative path enforcement) are present in the target codebase. The fix was authored by upstream Django maintainers and shipped in the base ...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2021-45452"
      },
      "impact_statement": "not_affected \u2014 Django 4.2.0 is not affected by CVE-2021-45452. The vulnerability was fixed in the upstream Django release before version 4.2.0 was published. All security defenses from the patch (backslash normalization, path traversal detection, post-save validation, and relative path enforcement) are present in the target codebase. The fix was authored by upstream Django maintainers and shipped in the base ..."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-29T19:58:08.504070+00:00",
      "status_notes": "Vulnerability CVE-2022-22818 does not affect version 4.2.post8+tuxcare of django. not_affected \u2014 Django 4.2 is not affected by CVE-2022-22818. The vulnerability in the `{% debug %}` template tag (unescaped output leading to XSS) was fixed in upstream Django before the 4.2 release. The fix commit 394517f07886495efcf79f95c7ee402a9437bd68 by Markus Holtermann is present in HEAD and predates all TuxCare work on this branch. The target code properly escapes all pformat() output and includes a D...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2022-22818"
      },
      "impact_statement": "not_affected \u2014 Django 4.2 is not affected by CVE-2022-22818. The vulnerability in the `{% debug %}` template tag (unescaped output leading to XSS) was fixed in upstream Django before the 4.2 release. The fix commit 394517f07886495efcf79f95c7ee402a9437bd68 by Markus Holtermann is present in HEAD and predates all TuxCare work on this branch. The target code properly escapes all pformat() output and includes a D..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-28T19:07:12.211534+00:00",
      "status_notes": "Vulnerability CVE-2022-23833 affects version 4.2.post8+tuxcare of django.",
      "vulnerability": {
        "name": "CVE-2022-23833"
      },
      "action_statement": "Vulnerability CVE-2022-23833 affects version 4.2.post8+tuxcare of django."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-28T19:06:21.253116+00:00",
      "status_notes": "Vulnerability CVE-2022-28346 affects version 4.2.post8+tuxcare of django.",
      "vulnerability": {
        "name": "CVE-2022-28346"
      },
      "action_statement": "Vulnerability CVE-2022-28346 affects version 4.2.post8+tuxcare of django."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-28T19:07:12.211534+00:00",
      "status_notes": "Vulnerability CVE-2022-28347 affects version 4.2.post8+tuxcare of django.",
      "vulnerability": {
        "name": "CVE-2022-28347"
      },
      "action_statement": "Vulnerability CVE-2022-28347 affects version 4.2.post8+tuxcare of django."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-28T19:08:06.540752+00:00",
      "status_notes": "Vulnerability CVE-2022-34265 affects version 4.2.post8+tuxcare of django.",
      "vulnerability": {
        "name": "CVE-2022-34265"
      },
      "action_statement": "Vulnerability CVE-2022-34265 affects version 4.2.post8+tuxcare of django."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-28T19:08:06.540752+00:00",
      "status_notes": "Vulnerability CVE-2022-36359 affects version 4.2.post8+tuxcare of django.",
      "vulnerability": {
        "name": "CVE-2022-36359"
      },
      "action_statement": "Vulnerability CVE-2022-36359 affects version 4.2.post8+tuxcare of django."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-28T19:07:12.211534+00:00",
      "status_notes": "Vulnerability CVE-2022-41323 affects version 4.2.post8+tuxcare of django.",
      "vulnerability": {
        "name": "CVE-2022-41323"
      },
      "action_statement": "Vulnerability CVE-2022-41323 affects version 4.2.post8+tuxcare of django."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-28T19:08:06.540752+00:00",
      "status_notes": "Vulnerability CVE-2023-23969 affects version 4.2.post8+tuxcare of django.",
      "vulnerability": {
        "name": "CVE-2023-23969"
      },
      "action_statement": "Vulnerability CVE-2023-23969 affects version 4.2.post8+tuxcare of django."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-28T19:05:19.418788+00:00",
      "status_notes": "Vulnerability CVE-2023-24580 affects version 4.2.post8+tuxcare of django.",
      "vulnerability": {
        "name": "CVE-2023-24580"
      },
      "action_statement": "Vulnerability CVE-2023-24580 affects version 4.2.post8+tuxcare of django."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-19T06:59:00.113234+00:00",
      "status_notes": "Vulnerability CVE-2023-31047 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare.",
      "vulnerability": {
        "name": "CVE-2023-31047"
      },
      "action_statement": "Vulnerability CVE-2023-31047 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-19T06:59:00.113234+00:00",
      "status_notes": "Vulnerability CVE-2023-36053 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare.",
      "vulnerability": {
        "name": "CVE-2023-36053"
      },
      "action_statement": "Vulnerability CVE-2023-36053 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-19T06:59:00.113234+00:00",
      "status_notes": "Vulnerability CVE-2023-41164 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare.",
      "vulnerability": {
        "name": "CVE-2023-41164"
      },
      "action_statement": "Vulnerability CVE-2023-41164 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-19T06:59:00.113234+00:00",
      "status_notes": "Vulnerability CVE-2023-43665 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare.",
      "vulnerability": {
        "name": "CVE-2023-43665"
      },
      "action_statement": "Vulnerability CVE-2023-43665 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-19T06:59:00.113234+00:00",
      "status_notes": "Vulnerability CVE-2023-46695 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare.",
      "vulnerability": {
        "name": "CVE-2023-46695"
      },
      "action_statement": "Vulnerability CVE-2023-46695 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-19T06:59:00.113234+00:00",
      "status_notes": "Vulnerability CVE-2024-24680 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare.",
      "vulnerability": {
        "name": "CVE-2024-24680"
      },
      "action_statement": "Vulnerability CVE-2024-24680 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-19T06:59:00.113234+00:00",
      "status_notes": "Vulnerability CVE-2024-27351 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare.",
      "vulnerability": {
        "name": "CVE-2024-27351"
      },
      "action_statement": "Vulnerability CVE-2024-27351 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-19T06:59:00.113234+00:00",
      "status_notes": "Vulnerability CVE-2024-38875 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare.",
      "vulnerability": {
        "name": "CVE-2024-38875"
      },
      "action_statement": "Vulnerability CVE-2024-38875 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-19T06:59:00.113234+00:00",
      "status_notes": "Vulnerability CVE-2024-39329 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare.",
      "vulnerability": {
        "name": "CVE-2024-39329"
      },
      "action_statement": "Vulnerability CVE-2024-39329 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-19T06:59:00.113234+00:00",
      "status_notes": "Vulnerability CVE-2024-39330 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare.",
      "vulnerability": {
        "name": "CVE-2024-39330"
      },
      "action_statement": "Vulnerability CVE-2024-39330 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-19T06:59:00.113234+00:00",
      "status_notes": "Vulnerability CVE-2024-39614 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare.",
      "vulnerability": {
        "name": "CVE-2024-39614"
      },
      "action_statement": "Vulnerability CVE-2024-39614 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-19T06:59:00.113234+00:00",
      "status_notes": "Vulnerability CVE-2024-41989 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare.",
      "vulnerability": {
        "name": "CVE-2024-41989"
      },
      "action_statement": "Vulnerability CVE-2024-41989 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-19T08:08:00.236952+00:00",
      "status_notes": "Vulnerability CVE-2024-41990 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post18+tuxcare.",
      "vulnerability": {
        "name": "CVE-2024-41990"
      },
      "action_statement": "Vulnerability CVE-2024-41990 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post18+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-19T06:59:00.113234+00:00",
      "status_notes": "Vulnerability CVE-2024-41991 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare.",
      "vulnerability": {
        "name": "CVE-2024-41991"
      },
      "action_statement": "Vulnerability CVE-2024-41991 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-19T06:59:00.113234+00:00",
      "status_notes": "Vulnerability CVE-2024-42005 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare.",
      "vulnerability": {
        "name": "CVE-2024-42005"
      },
      "action_statement": "Vulnerability CVE-2024-42005 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-19T08:08:00.236952+00:00",
      "status_notes": "Vulnerability CVE-2024-45230 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post18+tuxcare.",
      "vulnerability": {
        "name": "CVE-2024-45230"
      },
      "action_statement": "Vulnerability CVE-2024-45230 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post18+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-19T06:59:00.113234+00:00",
      "status_notes": "Vulnerability CVE-2024-45231 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare.",
      "vulnerability": {
        "name": "CVE-2024-45231"
      },
      "action_statement": "Vulnerability CVE-2024-45231 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-19T06:59:00.113234+00:00",
      "status_notes": "Vulnerability CVE-2024-53907 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare.",
      "vulnerability": {
        "name": "CVE-2024-53907"
      },
      "action_statement": "Vulnerability CVE-2024-53907 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-19T06:59:00.113234+00:00",
      "status_notes": "Vulnerability CVE-2024-53908 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare.",
      "vulnerability": {
        "name": "CVE-2024-53908"
      },
      "action_statement": "Vulnerability CVE-2024-53908 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-19T06:59:00.113234+00:00",
      "status_notes": "Vulnerability CVE-2024-56374 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare.",
      "vulnerability": {
        "name": "CVE-2024-56374"
      },
      "action_statement": "Vulnerability CVE-2024-56374 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-13372 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post9+tuxcare.",
      "vulnerability": {
        "name": "CVE-2025-13372"
      },
      "action_statement": "Vulnerability CVE-2025-13372 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post9+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-13473 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post9+tuxcare.",
      "vulnerability": {
        "name": "CVE-2025-13473"
      },
      "action_statement": "Vulnerability CVE-2025-13473 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post9+tuxcare."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-14550 is fixed in version 4.2.post8+tuxcare of django.",
      "vulnerability": {
        "name": "CVE-2025-14550"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-19T06:59:00.113234+00:00",
      "status_notes": "Vulnerability CVE-2025-26699 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare.",
      "vulnerability": {
        "name": "CVE-2025-26699"
      },
      "action_statement": "Vulnerability CVE-2025-26699 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-28T19:06:21.253116+00:00",
      "status_notes": "Vulnerability CVE-2025-27556 affects version 4.2.post8+tuxcare of django.",
      "vulnerability": {
        "name": "CVE-2025-27556"
      },
      "action_statement": "Vulnerability CVE-2025-27556 affects version 4.2.post8+tuxcare of django."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-19T06:59:00.113234+00:00",
      "status_notes": "Vulnerability CVE-2025-32873 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare.",
      "vulnerability": {
        "name": "CVE-2025-32873"
      },
      "action_statement": "Vulnerability CVE-2025-32873 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post17+tuxcare."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-48432 is fixed in version 4.2.post8+tuxcare of django.",
      "vulnerability": {
        "name": "CVE-2025-48432"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-57833 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post12+tuxcare.",
      "vulnerability": {
        "name": "CVE-2025-57833"
      },
      "action_statement": "Vulnerability CVE-2025-57833 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post12+tuxcare."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-59681 is fixed in version 4.2.post8+tuxcare of django.",
      "vulnerability": {
        "name": "CVE-2025-59681"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-59682 is fixed in version 4.2.post8+tuxcare of django.",
      "vulnerability": {
        "name": "CVE-2025-59682"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-64458 is fixed in version 4.2.post8+tuxcare of django.",
      "vulnerability": {
        "name": "CVE-2025-64458"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-64459 is fixed in version 4.2.post8+tuxcare of django.",
      "vulnerability": {
        "name": "CVE-2025-64459"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-64460 is fixed in version 4.2.post8+tuxcare of django.",
      "vulnerability": {
        "name": "CVE-2025-64460"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-1207 is fixed in version 4.2.post8+tuxcare of django.",
      "vulnerability": {
        "name": "CVE-2026-1207"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-1285 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post9+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-1285"
      },
      "action_statement": "Vulnerability CVE-2026-1285 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post9+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-1287 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post10+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-1287"
      },
      "action_statement": "Vulnerability CVE-2026-1287 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post10+tuxcare."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-1312 is fixed in version 4.2.post8+tuxcare of django.",
      "vulnerability": {
        "name": "CVE-2026-1312"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-07T10:48:00.634805+00:00",
      "status_notes": "Vulnerability CVE-2026-15307 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post14+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-15307"
      },
      "action_statement": "Vulnerability CVE-2026-15307 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post14+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-07T10:48:00.634805+00:00",
      "status_notes": "Vulnerability CVE-2026-15830 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post14+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-15830"
      },
      "action_statement": "Vulnerability CVE-2026-15830 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post14+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-25673 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post9+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-25673"
      },
      "action_statement": "Vulnerability CVE-2026-25673 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post9+tuxcare."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-25674 is fixed in version 4.2.post8+tuxcare of django.",
      "vulnerability": {
        "name": "CVE-2026-25674"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-33033 is fixed in version 4.2.post8+tuxcare of django.",
      "vulnerability": {
        "name": "CVE-2026-33033"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-33034 is fixed in version 4.2.post8+tuxcare of django.",
      "vulnerability": {
        "name": "CVE-2026-33034"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-3902 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post9+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-3902"
      },
      "action_statement": "Vulnerability CVE-2026-3902 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post9+tuxcare."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-4277 is fixed in version 4.2.post8+tuxcare of django.",
      "vulnerability": {
        "name": "CVE-2026-4277"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-4292 is fixed in version 4.2.post8+tuxcare of django.",
      "vulnerability": {
        "name": "CVE-2026-4292"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-48587 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post12+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-48587"
      },
      "action_statement": "Vulnerability CVE-2026-48587 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post12+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-48588 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post11+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-48588"
      },
      "action_statement": "Vulnerability CVE-2026-48588 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post11+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-29T07:42:00.149028+00:00",
      "status_notes": "Vulnerability CVE-2026-53877 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post13+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-53877"
      },
      "action_statement": "Vulnerability CVE-2026-53877 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post13+tuxcare."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-53878 does not affect version 4.2.post8+tuxcare of django. not_affected \u2014 Django 4.2.0 is not affected by CVE-2026-53878. The vulnerable component `DomainNameValidator` does not exist in this version (it was introduced in Django 5.1). All existing domain validation mechanisms in Django 4.2.0 already prohibit newlines: URLValidator explicitly checks for newlines in `unsafe_chars`, EmailValidator uses regex that doesn't match newlines, and _simple_domain_name_validator...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-53878"
      },
      "impact_statement": "not_affected \u2014 Django 4.2.0 is not affected by CVE-2026-53878. The vulnerable component `DomainNameValidator` does not exist in this version (it was introduced in Django 5.1). All existing domain validation mechanisms in Django 4.2.0 already prohibit newlines: URLValidator explicitly checks for newlines in `unsafe_chars`, EmailValidator uses regex that doesn't match newlines, and _simple_domain_name_validator..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-29T07:42:00.149028+00:00",
      "status_notes": "Vulnerability CVE-2026-6873 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post13+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-6873"
      },
      "action_statement": "Vulnerability CVE-2026-6873 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post13+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/django@4.2.post8+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/django@4.2.post8+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-8404 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post11+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-8404"
      },
      "action_statement": "Vulnerability CVE-2026-8404 affects version 4.2.post8+tuxcare of django, and is fixed in 4.2.post11+tuxcare."
    }
  ]
}