{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:73df62e7-6a38-5046-bc35-8b9265670eae", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@5.0.2.post10+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@5.0.2.post10+tuxcare", "version": "5.0.2.post10+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@5.0.2", "type": "library", "version": "5.0.2" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:f8ad7939-11e5-56b9-a436-18425cc5e3a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45115 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:db9135f2-9d2f-5903-acf2-e888ec82d4c7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45116 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:8898ec98-7256-5715-adbe-c98ad163cd96", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-45452 does not affect version 5.0.2.post10+tuxcare of django. not_affected \u2014 Django 5.0.2 is NOT affected by CVE-2021-45452. The directory traversal vulnerability in Storage.save() was fixed by upstream Django in version 4.0.1 (January 2022), over 2 years before Django 5.0.2 was released (February 2024). All required defenses are present in the target: backslash normalization, path traversal detection via \"..\" checks, os.path.relpath() to ensure relative paths, and trip...", "justification": "code_not_present" } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:e9923ace-e7f7-5060-8c36-364dcbeded3e", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22818 does not affect version 5.0.2.post10+tuxcare of django. not_affected \u2014 Target Django 5.0.2 is not affected by CVE-2022-22818. The vulnerability (unescaped HTML output in {% debug %} template tag leading to XSS) is not present because the upstream Django fix was already included in the 5.0.2 release. The DebugNode.render() method contains both security measures: (1) early return when DEBUG=False, and (2) HTML escaping via escape() on all pformat outputs. CVE affect...", "justification": "code_not_present" } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:11d9b850-a2c7-56ac-8edd-b40cc62fedae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-23833 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:0327af3d-c2d0-5554-865a-dd1a09142f3d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28346 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:f87f0f2c-f15f-5882-ad2d-b0fcdded576d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28347 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:a4dd9751-99bf-5e7f-8969-51906dd93f3d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-34265 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:aaa9ba7e-77f6-5f08-8b05-d813b915fc46", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36359 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:a3ebd753-88d9-548b-b776-84dbe793813c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-41323 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:a01d49fa-9791-5b46-9de8-00d23f102c07", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-23969 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:720d773a-0015-5fb1-b80e-0322c2b8294c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-24580 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:cbafcc24-4ee7-52e7-ae7c-401ddb4237cf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31047 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:45010e1c-c56b-5613-8e89-6f16185b892e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36053 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:7f3403fd-2286-5eb1-8522-1eaf242a1c64", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:b02ca052-e9bc-5f37-9217-ef4af1c55d3d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-43665 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:1f2c1dd6-b5dc-58b7-bfdb-101c6137a99f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46695 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:797a4eff-d6f8-5c8f-a6d3-ac00cadb0f7a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-24680 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:cf5faf8f-e253-5f84-85e2-398cda9df503", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:ac548313-268a-5ac1-a5bd-545d7a18494f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:a5265f6d-34a2-5961-bc7b-042c4e754a6a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:62cfeca9-56a5-54bd-bd8e-4ce1ed7f93a8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:770edf6d-ba81-5062-84e4-79847fe4b9e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:cee2c45b-967b-56f0-897a-5c95c23d1831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41989 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:456b0b87-7de2-59d0-a754-d4fa16ec2d1b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-41990 does not affect version 5.0.2.post10+tuxcare of django. not_affected \u2014 Django 5.0.2 uses the original simple trim_punctuation implementation that lacks the vulnerable code pattern. CVE-2024-41990's DoS vulnerability was introduced by the CVE-2024-38875 fix (commit d666457453, June 2024) which replaced the simple implementation with a complex CountsDict-based one containing repeated rfind('&') calls. The target version predates this architectural change and therefo...", "justification": "code_not_present" } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:3559b098-1bba-54a9-bdf5-bac9ee08eb05", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41991 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:4378ec01-9594-5cce-bb56-a2ada0677efb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-42005 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:663f2784-20a9-5ac2-9e83-37392bb7c2ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45230 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:abb2ab22-8d93-5a10-968d-89ad21034367", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:129f6fac-ea07-5b29-9fa7-4da09334a38f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53907 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:9c4f9b50-ee51-550a-978e-c89b175ed8a1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:90f064fb-3e77-53c3-9f2b-4da11f5e94c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56374 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:668924ad-2718-5670-8635-06ea746c9247", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:a6f8eb84-c853-5a15-bc14-b9e1c8e0832a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:7a754669-9109-5b12-bd65-009898ce1dbb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:bb9f41f4-599b-5dad-85db-640f5776dca8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-26699 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:e042c187-d97d-557b-beda-8bdc36042c18", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-27556 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:f964b20d-bec7-58ce-8f8b-ff9454eea50b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32873 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:18f71eec-0f0c-55df-97cb-3370bbc6bb2e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:be43dfa8-466b-5213-8f07-a54bc0665f09", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:60be5166-ea66-5400-ade2-bd226a006c6d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59681 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:34806294-60b3-52d4-bc98-e2e1c98e0dc4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59682 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:4b3412bc-b493-57f1-81a0-476405a1ab2f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:b444d097-8ce8-5b89-9fb4-cdf7488acb25", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:d60b372c-dd0c-50d7-815c-fa101fd83cc7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:d08965ea-f78b-528e-a08f-88269b05efa7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:177d28b9-e8e7-524a-9334-62e5de875b55", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1285 affects version 5.0.2.post10+tuxcare of django, and is fixed in 5.0.2.post12+tuxcare." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:b2fa6cdf-136e-5d65-8188-ac506de7ebf0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:8963f888-b56c-5e5b-8f1e-a64c40581fde", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:952e745f-0358-5004-a20d-bc36afe08b1e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-15307 affects version 5.0.2.post10+tuxcare of django, and is fixed in 5.0.2.post11+tuxcare." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:aef900ff-bd61-5aa0-871d-844d171a01c6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-15830 affects version 5.0.2.post10+tuxcare of django, and is fixed in 5.0.2.post11+tuxcare." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:6ba823f5-6a44-56eb-bf7f-8ac3237613d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25673 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:c9edf391-1385-5958-852b-1d04a124ef0f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25674 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:d7544972-3990-58c4-818e-a91421f5a07c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33033 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:c90ff897-3e9a-5c8a-9015-31302ee23bc6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:4cc2bd80-c0d1-53af-9766-9c770ca3b700", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-3902 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:14802a78-e748-5e68-8dc4-766469089da5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4277 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:2164326f-016f-57ff-9264-ee60e15ccef4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4292 affects version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:9ff5df71-27d8-5559-8e75-488bbed50df3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:65d46b09-0619-5993-8637-5242b6a74f76", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:e0a17e61-f62a-5645-99c8-a5edeca24e40", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:3a29dec3-92d1-58b3-bb77-a7c0e593f40e", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 5.0.2.post10+tuxcare of django. not_affected \u2014 Django 5.0.2 is not affected by CVE-2026-53878. The vulnerable code (DomainNameValidator class) does not exist in this version - it was introduced in Django 5.1. Django 5.0.2 uses _simple_domain_name_validator which already validates against newlines via string.whitespace.", "justification": "code_not_present" } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:8f64b36f-245b-5837-b2e5-33f8ecd6cca5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 5.0.2.post10+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ], "bom-ref": "urn:uuid:7d3182e0-64bc-547d-ba72-475eb70b0625", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 5.0.2.post10+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@5.0.2.post10+tuxcare" } ] }