{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:44ed67a6-48d8-58e4-b811-55c9ad94056c", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:pypi/django@5.0.post8+tuxcare", "type": "library", "name": "django", "version": "5.0.post8+tuxcare", "purl": "pkg:pypi/django@5.0.post8+tuxcare" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:7392d12a-0ff5-562a-b5f5-c5fde247958f", "id": "CVE-2024-24680", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24680 is fixed in version 5.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:4a7a5502-1670-5244-be6f-3699c8faf37d", "id": "CVE-2024-27351", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-27351 affects version 5.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:05d75763-e357-5587-a3b7-1545e2485f94", "id": "CVE-2024-38875", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 5.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:a8f39297-d0a9-5d9b-867f-af1b797f4c3d", "id": "CVE-2024-39329", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39329 affects version 5.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:a5dfac83-208e-5424-a136-08814cedb015", "id": "CVE-2024-39330", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 5.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:a6cb7fe7-fb14-5d18-be00-61dee80ead85", "id": "CVE-2024-39614", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is fixed in version 5.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:5d66ddac-6cb5-5c1d-adae-f9d175238c23", "id": "CVE-2024-41989", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41989 is fixed in version 5.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:bbfc3930-93a9-50bf-be0a-788dcef338a0", "id": "CVE-2024-41990", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41990 is fixed in version 5.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:753c2338-4653-5d1c-8bcb-3bc118cb9031", "id": "CVE-2024-41991", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41991 is fixed in version 5.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:542b57e8-194b-548b-a29f-49c521c7716d", "id": "CVE-2024-42005", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-42005 is fixed in version 5.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:ba8f5c69-d2b2-504a-af8b-cc764d7963a1", "id": "CVE-2024-45230", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45230 affects version 5.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:a0b82713-b91a-5ede-8689-be5550495924", "id": "CVE-2024-45231", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45231 affects version 5.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:33a977f7-c227-5888-9f33-30b9a257c674", "id": "CVE-2024-53907", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53907 is fixed in version 5.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:3fe62c59-0580-574e-b1c1-1baf2215c27c", "id": "CVE-2024-53908", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 5.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:35fd552c-e34d-5093-809e-e960bb3e2581", "id": "CVE-2024-56374", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-56374 affects version 5.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:0eab9b2b-3fde-52fb-bd7d-86e53ad4e9ca", "id": "CVE-2025-13372", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13372 affects version 5.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:e31f27af-8c59-5c8e-a688-20d4bb4cb1b7", "id": "CVE-2025-13473", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13473 affects version 5.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:e1687ed0-bb82-5d30-9716-829961e80ab6", "id": "CVE-2025-14550", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-14550 affects version 5.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:42f44886-af25-5b0e-906e-a01fd1a17aba", "id": "CVE-2025-26699", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-26699 affects version 5.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:416f2835-05a5-578e-a6dc-8ca8a9e09d57", "id": "CVE-2025-27556", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27556 affects version 5.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:32ccba1a-13a8-5031-8572-d314608d50f4", "id": "CVE-2025-48432", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-48432 affects version 5.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:ce0b3ae5-eed8-56b4-b47a-7a2b6873aa02", "id": "CVE-2025-57833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-57833 affects version 5.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:9ad9cfbd-fdf1-5b8a-a9d4-72bdddf0a28e", "id": "CVE-2025-64458", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-64458 affects version 5.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:476cff63-bd11-586c-8ee9-112de8470be3", "id": "CVE-2025-64459", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 5.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:8f791797-922f-539d-8121-d6de98286d14", "id": "CVE-2025-64460", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-64460 affects version 5.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:4768c65e-1cc3-5153-9b12-8c1332f3e17b", "id": "CVE-2026-1207", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1207 affects version 5.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:9ca69398-4bfd-5fb1-aa6e-44a2d302021c", "id": "CVE-2026-1285", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1285 affects version 5.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:49e4f2c6-e891-5d8c-b23d-03c03052884e", "id": "CVE-2026-1287", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1287 affects version 5.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:13fc86ef-0f6d-53b1-860c-760b53a6d0c3", "id": "CVE-2026-1312", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1312 affects version 5.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:d56345e6-97f2-5463-82f4-7d777067757f", "id": "CVE-2026-48587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48587 affects version 5.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:47b916f3-0177-5ed4-8a9d-a58b62f0ba7d", "id": "CVE-2026-48588", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48588 affects version 5.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:f75e7b07-3ade-5578-815c-3276c4371b29", "id": "CVE-2026-53877", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53877 affects version 5.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:4a994d79-976c-59a2-ae9e-4a40bb302196", "id": "CVE-2026-53878", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 5.0.post8+tuxcare of django. not_affected \u2014 Django 5.0 does not contain the vulnerable DomainNameValidator class. This validator was introduced in Django 5.1 (commit 4971a9afe5). Since the specific component affected by CVE-2026-53878 does not exist in this version, Django 5.0 cannot be affected by this vulnerability. Additionally, all domain validators present in Django 5.0 (_simple_domain_name_validator, EmailValidator, URLValidator) a..." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:e48ebbcf-005f-50be-ab8c-dc6c43627a13", "id": "CVE-2026-6873", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6873 affects version 5.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:44f6e295-d736-5d9e-ab6b-950133b0fcfa", "id": "CVE-2026-8404", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-8404 affects version 5.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] } ], "dependencies": [ { "ref": "pkg:pypi/django@5.0.post8+tuxcare" } ] }