{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:6a66d248-a1cb-52b2-b04f-1d7fe988475e", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:pypi/django@5.0.2.post6+tuxcare", "type": "library", "name": "django", "version": "5.0.2.post6+tuxcare", "purl": "pkg:pypi/django@5.0.2.post6+tuxcare" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:8937a88e-e37b-59c6-a2ba-41f763c9068a", "id": "CVE-2024-27351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 5.0.2.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:29310ba3-fef4-5f71-83f7-78bdc6166594", "id": "CVE-2024-38875", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 5.0.2.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:6fb970fa-0f74-5fa3-a6df-c45a292094d6", "id": "CVE-2024-39329", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is fixed in version 5.0.2.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:53b26e3d-5b23-5c98-b47d-26c3e372b0b3", "id": "CVE-2024-39330", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 5.0.2.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:5a5e933a-3dea-52f2-9b37-0293132a1f14", "id": "CVE-2024-39614", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is fixed in version 5.0.2.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:bfea76df-4d25-522b-ab0c-8d7eb6d3c001", "id": "CVE-2024-41989", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41989 is fixed in version 5.0.2.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:6a26aad7-03ea-53b9-97e0-eca9bbe30335", "id": "CVE-2024-41990", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-41990 does not affect version 5.0.2.post6+tuxcare of django. not_affected \u2014 Django 5.0.2 uses the original simple trim_punctuation implementation that lacks the vulnerable code pattern. CVE-2024-41990's DoS vulnerability was introduced by the CVE-2024-38875 fix (commit d666457453, June 2024) which replaced the simple implementation with a complex CountsDict-based one containing repeated rfind('&') calls. The target version predates this architectural change and therefo..." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:eedf7554-2d45-5a90-a13f-82a6b26dd07a", "id": "CVE-2024-41991", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41991 is fixed in version 5.0.2.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:dd9c2bfd-a055-57d2-833f-15616fc8bdaa", "id": "CVE-2024-42005", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-42005 is fixed in version 5.0.2.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:ca2ab2f2-94ce-534d-867f-d71b4d98fef2", "id": "CVE-2024-45230", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45230 is fixed in version 5.0.2.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:bce2ccb4-19ec-563c-a5d9-ea37bcad18cf", "id": "CVE-2024-45231", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45231 affects version 5.0.2.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:5b0aa383-29b9-56e1-aa67-8299a3e515f2", "id": "CVE-2024-53907", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53907 is fixed in version 5.0.2.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:9ca9207a-037c-5fc7-acb3-b04491b39c04", "id": "CVE-2024-53908", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 5.0.2.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:ec444f0d-2364-5b04-83be-ca8d071f5bf1", "id": "CVE-2024-56374", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56374 is fixed in version 5.0.2.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:51d31589-bb30-5e52-94fa-3dc894b40ca5", "id": "CVE-2025-13372", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13372 affects version 5.0.2.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:45dcf659-2701-5943-a62d-0eee0a16f58b", "id": "CVE-2025-13473", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13473 affects version 5.0.2.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:40f5fd16-2d62-5b23-bd6b-ef118a47fb7a", "id": "CVE-2025-14550", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-14550 affects version 5.0.2.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:4f4b6b4d-5f32-5d70-9d1c-8b0b5d93b88e", "id": "CVE-2025-26699", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-26699 is fixed in version 5.0.2.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:7940e02c-b394-5ce8-a9f4-d70d28ad47b1", "id": "CVE-2025-27556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-27556 is fixed in version 5.0.2.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:fb2af916-2577-5047-b946-3c165a8a0371", "id": "CVE-2025-48432", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-48432 affects version 5.0.2.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:e31ba827-7800-5376-b806-6f863ad26f68", "id": "CVE-2025-57833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-57833 affects version 5.0.2.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:9274306b-d9e1-5471-812c-976e9a1a5193", "id": "CVE-2025-64458", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 5.0.2.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:18fe68ee-48d4-5770-be08-462ff8561314", "id": "CVE-2025-64459", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 5.0.2.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:bf861628-b7c6-5722-8562-8d0a1e3af357", "id": "CVE-2025-64460", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 5.0.2.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:8ff1fc64-5842-50b2-b54b-cb1ba3bd1ca4", "id": "CVE-2026-1207", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 5.0.2.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:71ca5275-f574-52b2-a15b-04c425a094dc", "id": "CVE-2026-1285", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1285 affects version 5.0.2.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:b1a591a9-c159-59eb-929a-0e6f40304e6e", "id": "CVE-2026-1287", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1287 affects version 5.0.2.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:babf65b9-cdf6-5f03-a798-2480936eddea", "id": "CVE-2026-1312", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 5.0.2.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:4d0577b4-7c60-5bfe-8bc0-993861d998f2", "id": "CVE-2026-48587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 5.0.2.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:a96548a0-066c-5483-8c24-4b718e153527", "id": "CVE-2026-48588", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 5.0.2.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:99b31f72-003e-56f3-bc7e-90a09ab08d6e", "id": "CVE-2026-53877", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 5.0.2.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:cabbd2be-742b-5db1-898d-608680097b70", "id": "CVE-2026-53878", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 5.0.2.post6+tuxcare of django. not_affected \u2014 Django 5.0.2 is not affected by CVE-2026-53878. The vulnerable code (DomainNameValidator class) does not exist in this version - it was introduced in Django 5.1. Django 5.0.2 uses _simple_domain_name_validator which already validates against newlines via string.whitespace." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:80b464ce-c1b6-500c-ab2b-3d45751504dc", "id": "CVE-2026-6873", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 5.0.2.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:fefc38e1-9016-5d3e-969a-3c2f762276f2", "id": "CVE-2026-8404", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 5.0.2.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post6+tuxcare" } ] } ], "dependencies": [ { "ref": "pkg:pypi/django@5.0.2.post6+tuxcare" } ] }