{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e5dba37c-748f-5f51-a9a7-a087b35c757a", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@5.0.1.post9+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@5.0.1.post9+tuxcare", "version": "5.0.1.post9+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@5.0.1", "type": "library", "version": "5.0.1" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:450dd760-e3d8-551a-8d71-6ea3aa18164d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45115 affects version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:884fe2b2-5fc0-5477-a2c3-bbcd560a29e0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45116 affects version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:8831cbcb-0c87-5567-8263-66e13493fdaf", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-45452 does not affect version 5.0.1.post9+tuxcare of django. not_affected \u2014 Django 5.0.1.post14+tuxcare is NOT affected by CVE-2021-45452. The directory traversal vulnerability in Storage.save() was already fixed in the upstream release before TuxCare onboarded this version. All four critical protections are present: (1) backslash-to-forward-slash normalization in get_available_name() and generate_filename(), (2) \"..\" path component validation, (3) post-save path valid...", "justification": "code_not_present" } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:3bcbd0ee-f736-5394-9bd2-dc8852f521e9", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22818 does not affect version 5.0.1.post9+tuxcare of django. not_affected \u2014 CVE-2022-22818 affects Django's {% debug %} template tag, which failed to HTML-escape template context data before rendering, enabling XSS attacks. The target repository (Django 5.0.1.post14+tuxcare) is NOT AFFECTED because the upstream fix was already present in Django 5.0.1 when TuxCare onboarded this version. The fix (commit 394517f078) was authored by Django maintainer Markus Holtermann on ...", "justification": "code_not_present" } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:94ec73a8-4fca-58ad-9dc1-55098b2861f0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-23833 affects version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:a45912dd-7a39-5cb3-86a8-cabce88e910b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28346 affects version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:1ea806ce-6122-50e3-b73f-e8557b5c2241", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28347 affects version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:22a1f577-b1b1-5cd0-a4c4-d9a80dcabf89", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-34265 affects version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:5e9f6104-6bca-57a0-a9f9-28372fcaacd0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36359 affects version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:0f9acfc9-e29b-5bcf-9be0-dcfdbcf57e27", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-41323 affects version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:d51fcded-6c89-57e9-9352-7b81d8f6b673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-23969 affects version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:7ba17fe5-e3b4-558b-8548-6ee9ed457c19", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-24580 affects version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:09027646-5658-5487-bd21-bc15f7689d53", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31047 affects version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:aa4cb783-4de2-584f-b36b-5734a7163c41", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36053 affects version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:9de6fe10-b1be-5d51-9fd7-9f3ba7ca2d02", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:f0c22be9-8f35-5c59-85c0-97a6b7e4ba2e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-43665 affects version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:8d732835-109d-5a82-b604-138269bccf09", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46695 affects version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:25187dd0-7387-545c-903b-eeffc04abf71", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24680 is fixed in version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:a7740dc3-8293-5038-bd6a-25a834e54ef6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:4ae54d69-33a6-5f02-9cab-30f3bfceeb68", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:51440cd2-cfd9-504c-a827-4a6f7a90bd1a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is fixed in version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:ff8b41ee-a73c-5ffd-b25c-d3396e45794a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:f1349de2-6eaf-57a1-880f-aa82474cecb8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is fixed in version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:d1c597a3-48b2-5af8-95e9-d692f6212a5c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41989 is fixed in version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:bcd94f5f-03de-50a4-9421-3790d8129587", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-41990 does not affect version 5.0.1.post9+tuxcare of django. not_affected \u2014 Django 5.0.1.post3+tuxcare uses a refactored architecture that does not contain the vulnerable code pattern from CVE-2024-41990. The target implementation uses html.unescape() upfront, while the CVE affects a different implementation with repeated rfind() calls that was introduced later in Django 5.0.7.", "justification": "code_not_present" } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:0acadf3a-8100-5f89-a8aa-0778829795ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41991 is fixed in version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:34b91e41-e90f-52f0-af9c-8725f1f88f26", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-42005 affects version 5.0.1.post9+tuxcare of django, and is fixed in 5.0.1.post12+tuxcare." } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:c4e70a34-835c-5859-87c9-ceeb890630a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45230 is fixed in version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:a75023ca-12cb-5369-8c9b-868c61d3edfd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:f2fb2e16-1259-5666-98f5-11af7fd08ce0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53907 is fixed in version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:a1b3acca-10b2-51d0-8d4f-03391cc1edad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:f9960bcf-8ac8-57d2-a5b8-d479e5c66fb1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56374 is fixed in version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:c5a283e1-9cc5-555a-8cf1-5833b1969cb2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13372 affects version 5.0.1.post9+tuxcare of django, and is fixed in 5.0.1.post12+tuxcare." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:74e4ec97-6817-5727-83d9-55f7a43cb1c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13473 affects version 5.0.1.post9+tuxcare of django, and is fixed in 5.0.1.post10+tuxcare." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:f8594ceb-487a-5609-986d-083b07d33fbe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-14550 affects version 5.0.1.post9+tuxcare of django, and is fixed in 5.0.1.post12+tuxcare." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:32cbc458-bc7f-54cc-b06a-fd4d5534f412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-26699 is fixed in version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:1aecee10-c0d1-5790-9d36-d4f156b829a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-27556 is fixed in version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:be06d0ff-c998-5309-9723-ed4eacb706f0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32873 affects version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:1c3fb5c0-819c-5ae2-a2f7-425a87002d09", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:1f225c4a-668b-5583-868c-cea815dd34c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-57833 affects version 5.0.1.post9+tuxcare of django, and is fixed in 5.0.1.post11+tuxcare." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:fbdb1093-093e-5d37-b0e9-b7591d250211", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59681 affects version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:fa0f3663-0daa-50b0-b5a0-86f6b2ddaac4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59682 affects version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:188b03b8-4a22-5d64-9441-a204e818d70b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:822ad1df-938a-50bf-95a3-c4b1c0715c9d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:8eab2673-536a-5eb6-8e19-8538b16ac13f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:59d987ac-2fab-5d9a-8839-a7bd485489a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:ce43cc81-7eec-5217-91ec-8220a050336a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1285 affects version 5.0.1.post9+tuxcare of django, and is fixed in 5.0.1.post12+tuxcare." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:7fdaae84-e61b-5541-b1df-75ad5af4cf82", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1287 affects version 5.0.1.post9+tuxcare of django, and is fixed in 5.0.1.post10+tuxcare." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:60ab65f5-5db2-52f7-9cde-45ee3f802f5d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:fb193d86-2c65-5c98-a587-1d4724f25ebc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-15307 affects version 5.0.1.post9+tuxcare of django, and is fixed in 5.0.1.post12+tuxcare." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:64406a8c-e04c-5f51-9318-7c11f271b35b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-15830 affects version 5.0.1.post9+tuxcare of django, and is fixed in 5.0.1.post12+tuxcare." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:000811bb-0ded-59bb-8683-b1269ecf30dc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25673 affects version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:a5b21c28-d355-5f17-8a05-b70737400492", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25674 affects version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:5f6e881d-244b-599b-9191-0ff7ba59a9ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33033 affects version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:687b8410-788f-5251-a52f-91cae89a5f26", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:0b858b1d-bf58-5b72-8b98-5d088dc0e61d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-3902 affects version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:49b0e124-7676-5b92-9d23-8267d4ebbaff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4277 affects version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:85fb8167-cd32-580d-9c49-2231fa2f7c0e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4292 affects version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:f4edd17b-c65d-58ed-b1e7-b355b09ee933", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:054220fd-15f6-5010-84b1-4e6aa8c24e69", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:7c6c6d5e-c8fb-5eab-b71d-ffbbfe80b8f3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:4f84288e-c2d6-5356-8b04-9d2fa8eb2e38", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 5.0.1.post9+tuxcare of django. not_affected \u2014 Django 5.0.1 is not affected by CVE-2026-53878. The CVE describes a vulnerability in the DomainNameValidator class introduced in Django 5.1, where regex patterns without proper anchors allowed domains containing newlines to pass validation. Django 5.0.1 does not have this class. All domain validation mechanisms in 5.0.1 (_simple_domain_name_validator, EmailValidator.domain_regex, URLValidator.u...", "justification": "protected_at_runtime" } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:e285c202-ec85-5925-bf9f-ce46ff6b41e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 5.0.1.post9+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ], "bom-ref": "urn:uuid:595de39c-36bd-5b6a-9d3f-4f8df6dd6a29", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 5.0.1.post9+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@5.0.1.post9+tuxcare" } ] }