{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:16566075-12e8-5ecf-95e9-ca14b4cc2a74", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@5.0.post17+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@5.0.post17+tuxcare", "version": "5.0.post17+tuxcare", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:8110fcbe-b86e-5fac-a2a9-8409c1fd4eca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24680 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:57486ecc-beac-5de9-9bda-564e049a64a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:fa94072a-1087-5193-bee9-a2740ed9f1fe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:8b87e606-8c48-5919-a264-ef6c194fdf15", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:2904e147-0afe-5102-bfb6-9a786f614209", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:7ba765e6-8b31-5528-88a4-189315fdcfce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:d16fd243-7eb9-5255-973d-04c70312b2fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41989 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:89acadb1-2b8b-565d-aa15-b96c005a74f3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41990 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:b45b814f-005f-5a51-be19-4342a26dbfd6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41991 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:abe736d6-3946-5f17-80d0-8657a491c4c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-42005 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:0bb016b1-16de-5a49-aac4-c7d38692f03f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45230 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:ca56b9ed-bca4-55d3-a0cd-a8256b672f01", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:c242f5a2-528e-53e4-9632-5cdb31bb65bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53907 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:95db5e5c-9a6a-52d1-a9fb-9daa0daf9dda", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:bd4d0025-c132-598d-87ea-657ec2b20232", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56374 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:ff7ac64a-57cc-5347-88b8-ecf8c40f7f53", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:870040d6-b825-5343-bfd6-cc7e090afddb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:c6c35289-52cf-5a24-896c-b9f3dffa3139", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:9328a765-47c7-503e-aca1-a5998972f326", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-26699 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:83e8f6ee-7181-54d5-b21c-5c2873c8536f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-27556 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:96aef952-d497-567b-9423-2803d6971f04", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:66cf7539-172b-57f0-a619-cdc04e7eee3b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:72c8d35c-e9ef-5d86-ae3b-3578c4d9620c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:24b83dd7-149e-53c0-a538-75d6f12783dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:5388ecf9-5f53-5032-b668-af013415d843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:7e9258b2-08f2-5fe4-a2b7-f7ab65e55e03", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:6d98beef-7c3e-563e-b056-5e46f7ec8d04", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:15eaf9ea-9310-5905-bf18-69827c72fbf9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:1734a2cc-ab61-5e64-a02e-1bedc408bae6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:45a3a598-b41f-5b68-a900-32e2b448ce39", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15307 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:5234b253-0923-5eee-a4e0-39b3d213310f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15830 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:9b5f8fd4-dfb7-5395-8d39-31d335d5e575", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:02e350ba-3f31-5ba9-825d-bdf8057e8668", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:488b447e-a21a-597b-b17e-a8e3716f5af0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:1dbfd7dc-1862-5025-aab9-ca2d99ac27cd", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 5.0.post17+tuxcare of django. not_affected \u2014 Django 5.0 does not contain the vulnerable DomainNameValidator class. This validator was introduced in Django 5.1 (commit 4971a9afe5). Since the specific component affected by CVE-2026-53878 does not exist in this version, Django 5.0 cannot be affected by this vulnerability. Additionally, all domain validators present in Django 5.0 (_simple_domain_name_validator, EmailValidator, URLValidator) a...", "justification": "code_not_present" } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:1c73e54d-3127-5d75-aedc-14fb72e42184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 5.0.post17+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:3ecfd130-b9b3-584b-a6dc-4091ed7c9c16", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 5.0.post17+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@5.0.post17+tuxcare" } ] }