{ "@id": "urn:uuid:1f4360f1-7646-4359-a96e-cb9079cb6c44", "role": "Document Creator", "author": "https://tuxcare.com", "version": 5, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-09-30T23:34:00.080502+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2021-45115 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post4+tuxcare.", "vulnerability": { "name": "CVE-2021-45115" }, "action_statement": "Vulnerability CVE-2021-45115 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post4+tuxcare." }, { "status": "fixed", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2021-45116 is fixed in version 4.0.post2+tuxcare of django.", "vulnerability": { "name": "CVE-2021-45116" } }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2021-45452 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post4+tuxcare.", "vulnerability": { "name": "CVE-2021-45452" }, "action_statement": "Vulnerability CVE-2021-45452 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post4+tuxcare." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2022-22818 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post5+tuxcare.", "vulnerability": { "name": "CVE-2022-22818" }, "action_statement": "Vulnerability CVE-2022-22818 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post5+tuxcare." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2022-23833 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post6+tuxcare.", "vulnerability": { "name": "CVE-2022-23833" }, "action_statement": "Vulnerability CVE-2022-23833 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post6+tuxcare." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2022-28346 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post4+tuxcare.", "vulnerability": { "name": "CVE-2022-28346" }, "action_statement": "Vulnerability CVE-2022-28346 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post4+tuxcare." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2022-28347 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post3+tuxcare.", "vulnerability": { "name": "CVE-2022-28347" }, "action_statement": "Vulnerability CVE-2022-28347 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post3+tuxcare." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2022-34265 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post3+tuxcare.", "vulnerability": { "name": "CVE-2022-34265" }, "action_statement": "Vulnerability CVE-2022-34265 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post3+tuxcare." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2022-36359 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post3+tuxcare.", "vulnerability": { "name": "CVE-2022-36359" }, "action_statement": "Vulnerability CVE-2022-36359 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post3+tuxcare." }, { "status": "fixed", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2022-41323 is fixed in version 4.0.post2+tuxcare of django.", "vulnerability": { "name": "CVE-2022-41323" } }, { "status": "fixed", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2023-23969 is fixed in version 4.0.post2+tuxcare of django.", "vulnerability": { "name": "CVE-2023-23969" } }, { "status": "fixed", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2023-24580 is fixed in version 4.0.post2+tuxcare of django.", "vulnerability": { "name": "CVE-2023-24580" } }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2023-31047 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post8+tuxcare.", "vulnerability": { "name": "CVE-2023-31047" }, "action_statement": "Vulnerability CVE-2023-31047 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post8+tuxcare." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2023-36053 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post9+tuxcare.", "vulnerability": { "name": "CVE-2023-36053" }, "action_statement": "Vulnerability CVE-2023-36053 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post9+tuxcare." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2023-43665 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post7+tuxcare.", "vulnerability": { "name": "CVE-2023-43665" }, "action_statement": "Vulnerability CVE-2023-43665 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post7+tuxcare." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2023-46695 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post15+tuxcare.", "vulnerability": { "name": "CVE-2023-46695" }, "action_statement": "Vulnerability CVE-2023-46695 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post15+tuxcare." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-45231 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post17+tuxcare.", "vulnerability": { "name": "CVE-2024-45231" }, "action_statement": "Vulnerability CVE-2024-45231 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post17+tuxcare." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-13372 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post16+tuxcare.", "vulnerability": { "name": "CVE-2025-13372" }, "action_statement": "Vulnerability CVE-2025-13372 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post16+tuxcare." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-13473 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post18+tuxcare.", "vulnerability": { "name": "CVE-2025-13473" }, "action_statement": "Vulnerability CVE-2025-13473 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post18+tuxcare." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-14550 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post12+tuxcare.", "vulnerability": { "name": "CVE-2025-14550" }, "action_statement": "Vulnerability CVE-2025-14550 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post12+tuxcare." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-48432 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post15+tuxcare.", "vulnerability": { "name": "CVE-2025-48432" }, "action_statement": "Vulnerability CVE-2025-48432 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post15+tuxcare." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-25T12:33:00.867807+00:00", "status_notes": "Vulnerability CVE-2025-57833 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post21+tuxcare.", "vulnerability": { "name": "CVE-2025-57833" }, "action_statement": "Vulnerability CVE-2025-57833 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post21+tuxcare." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-64458 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post13+tuxcare.", "vulnerability": { "name": "CVE-2025-64458" }, "action_statement": "Vulnerability CVE-2025-64458 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post13+tuxcare." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-64459 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post14+tuxcare.", "vulnerability": { "name": "CVE-2025-64459" }, "action_statement": "Vulnerability CVE-2025-64459 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post14+tuxcare." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-64460 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post11+tuxcare.", "vulnerability": { "name": "CVE-2025-64460" }, "action_statement": "Vulnerability CVE-2025-64460 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post11+tuxcare." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-1207 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post10+tuxcare.", "vulnerability": { "name": "CVE-2026-1207" }, "action_statement": "Vulnerability CVE-2026-1207 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post10+tuxcare." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-1285 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post18+tuxcare.", "vulnerability": { "name": "CVE-2026-1285" }, "action_statement": "Vulnerability CVE-2026-1285 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post18+tuxcare." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-1287 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post17+tuxcare.", "vulnerability": { "name": "CVE-2026-1287" }, "action_statement": "Vulnerability CVE-2026-1287 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post17+tuxcare." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-1312 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post12+tuxcare.", "vulnerability": { "name": "CVE-2026-1312" }, "action_statement": "Vulnerability CVE-2026-1312 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post12+tuxcare." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-30T23:34:00.080502+00:00", "status_notes": "Vulnerability CVE-2026-15307 affects version 4.0.post2+tuxcare of django.", "vulnerability": { "name": "CVE-2026-15307" }, "action_statement": "Vulnerability CVE-2026-15307 affects version 4.0.post2+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-30T20:24:00.091047+00:00", "status_notes": "Vulnerability CVE-2026-15830 affects version 4.0.post2+tuxcare of django.", "vulnerability": { "name": "CVE-2026-15830" }, "action_statement": "Vulnerability CVE-2026-15830 affects version 4.0.post2+tuxcare of django." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-48587 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post20+tuxcare.", "vulnerability": { "name": "CVE-2026-48587" }, "action_statement": "Vulnerability CVE-2026-48587 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post20+tuxcare." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-48588 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post18+tuxcare.", "vulnerability": { "name": "CVE-2026-48588" }, "action_statement": "Vulnerability CVE-2026-48588 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post18+tuxcare." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-30T05:57:00.104085+00:00", "status_notes": "Vulnerability CVE-2026-53877 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post22+tuxcare.", "vulnerability": { "name": "CVE-2026-53877" }, "action_statement": "Vulnerability CVE-2026-53877 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post22+tuxcare." }, { "status": "not_affected", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-53878 does not affect version 4.0.post2+tuxcare of django. not_affected \u2014 Django 4.0 is not affected by CVE-2026-53878. The vulnerable component DomainNameValidator does not exist in this version (it was introduced in Django 5.1). All domain validation in Django 4.0 is performed by EmailValidator, URLValidator, and _simple_domain_name_validator, which properly reject domain names containing newline characters through various mechanisms (regex anchors, explicit unsafe...", "vulnerability": { "name": "CVE-2026-53878" }, "impact_statement": "not_affected \u2014 Django 4.0 is not affected by CVE-2026-53878. The vulnerable component DomainNameValidator does not exist in this version (it was introduced in Django 5.1). All domain validation in Django 4.0 is performed by EmailValidator, URLValidator, and _simple_domain_name_validator, which properly reject domain names containing newline characters through various mechanisms (regex anchors, explicit unsafe..." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-30T05:57:00.104085+00:00", "status_notes": "Vulnerability CVE-2026-6873 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post22+tuxcare.", "vulnerability": { "name": "CVE-2026-6873" }, "action_statement": "Vulnerability CVE-2026-6873 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post22+tuxcare." }, { "status": "affected", "products": [ { "@id": "pkg:pypi/django@4.0.post2+tuxcare", "identifiers": { "purl": "pkg:pypi/django@4.0.post2+tuxcare" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-8404 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post18+tuxcare.", "vulnerability": { "name": "CVE-2026-8404" }, "action_statement": "Vulnerability CVE-2026-8404 affects version 4.0.post2+tuxcare of django, and is fixed in 4.0.post18+tuxcare." } ] }