{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:3520de44-1c9d-5933-877e-074371f8e630", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@5.0.post19+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@5.0.post19+tuxcare", "version": "5.0.post19+tuxcare", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:704e600c-b52e-507d-a72b-9c07f2fe2e9b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24680 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:271e26ea-6520-51df-a724-88eabeb5a285", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:7264ad41-bc6b-5e9e-bbc0-c80fedc703de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:9bd4b859-7253-587e-92b9-fc433fe54f7d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:87a35ca0-00da-597a-b8c0-b39c27dbc3be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:b3a15feb-93f0-5024-98e7-2932db507952", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:9cd4585b-7f73-53d7-8b0a-72b2dfbd547d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41989 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:51314af3-b517-58e5-83d4-2cf2be9541a1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41990 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:8ad42332-eb18-5fbf-a077-f07a621335fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41991 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:2f123341-2cb5-50e5-b422-d6f162b1baf0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-42005 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:bf099696-fc31-56e3-913d-d170cd6d34ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45230 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:6c85019a-7f16-5e4e-9e96-526a419f7dd1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:8486b16e-dad6-5c1d-94a1-96f8b6dfe442", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53907 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:e6726c90-b2da-59c6-9a97-987f8ab826c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:3dadfd5a-4a2c-570d-9c84-b033eb9da88a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56374 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:51635038-d0e5-5308-b1fe-2a648609b350", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:af304f24-6cc5-5840-ad94-cb0e69a1d19b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:9f6d097e-0d09-5a1d-8182-7d234d981122", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:f14a5edd-3c68-5f5b-aae8-8b31d8237de4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-26699 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:57dbf418-07b3-5774-a0bd-5bb09cf81e63", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-27556 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:ef865912-50f9-5a02-8f35-3e10fbd87736", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:2d321ee2-fc3d-54d4-be2f-deac68bc8c4f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:a9f5a673-9500-5c71-80ee-728080cc7e3d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:ef6d3ee1-6cd7-53bc-87a2-980e76fe7987", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:8ff843d6-aad7-5e1b-9bff-0ac77aabdf57", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:e9c57f9a-c7a3-5031-9ffb-066d7b949dd2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:387734fe-a263-561e-af96-49ed7b60b389", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:65f0a95e-206d-5d15-a253-38ca6dfecebc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:cb6c9b19-7b58-5be6-9cb4-139eba8738db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:8e1e7c2f-af7e-56e3-bf87-9e6493dad8d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15307 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:39ea483d-3a1f-5e84-bdd5-f7b342f642fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15830 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:3b74da79-4b66-58f8-b6ee-12f24ad607c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:122cebf1-81de-54a4-9ac5-44ee2d2dffb3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:285ea963-c424-5959-8730-d6f4b842210a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:45686b5f-4fe5-5f19-85cd-ca5819769b15", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 5.0.post19+tuxcare of django. not_affected \u2014 Django 5.0 does not contain the vulnerable DomainNameValidator class. This validator was introduced in Django 5.1 (commit 4971a9afe5). Since the specific component affected by CVE-2026-53878 does not exist in this version, Django 5.0 cannot be affected by this vulnerability. Additionally, all domain validators present in Django 5.0 (_simple_domain_name_validator, EmailValidator, URLValidator) a...", "justification": "code_not_present" } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:962e4e49-9c94-5ae8-9f28-02fee2cd912b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 5.0.post19+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ], "bom-ref": "urn:uuid:a3ba6d4d-df2a-518f-aa50-d18c7839e6d5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 5.0.post19+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@5.0.post19+tuxcare" } ] }