{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:9fd73f67-c2b2-5b63-8ec0-d0faa4181c1a", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@5.0.2.post12+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@5.0.2.post12+tuxcare", "version": "5.0.2.post12+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@5.0.2", "type": "library", "version": "5.0.2" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:339d9477-8829-5faa-8ff1-1c785b645144", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45115 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:f33bb9ba-37e3-5477-8ad6-d016b63ded2c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45116 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:7dee643f-8cee-5cec-83fc-cbd3b612852d", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-45452 does not affect version 5.0.2.post12+tuxcare of django. not_affected \u2014 Django 5.0.2 is NOT affected by CVE-2021-45452. The directory traversal vulnerability in Storage.save() was fixed by upstream Django in version 4.0.1 (January 2022), over 2 years before Django 5.0.2 was released (February 2024). All required defenses are present in the target: backslash normalization, path traversal detection via \"..\" checks, os.path.relpath() to ensure relative paths, and trip...", "justification": "code_not_present" } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:627b3af7-f15e-5df1-be43-a68ed19f522a", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22818 does not affect version 5.0.2.post12+tuxcare of django. not_affected \u2014 Target Django 5.0.2 is not affected by CVE-2022-22818. The vulnerability (unescaped HTML output in {% debug %} template tag leading to XSS) is not present because the upstream Django fix was already included in the 5.0.2 release. The DebugNode.render() method contains both security measures: (1) early return when DEBUG=False, and (2) HTML escaping via escape() on all pformat outputs. CVE affect...", "justification": "code_not_present" } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:a8fdb980-e616-504b-a6bd-4e6eeb4b7c59", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-23833 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:5af83352-43ca-5839-b9db-4d5669471f10", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28346 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:16885a3f-7fbc-5f43-94a0-f65ae5b315d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28347 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:b74026ba-589c-53af-b7ed-03549a5a470a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-34265 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:1165d337-09b0-5b5d-ac95-dad714eed656", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36359 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:d748bd27-9421-585d-bfee-8edfc6448f17", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-41323 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:7e17b99d-2a13-58ed-bd2d-29870e3e7e7e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-23969 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:174ed8a0-abda-5e59-8fa0-d281bdfcfa34", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-24580 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:91fec9c4-6066-5d3e-b085-22f2aca2161f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31047 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:21fbbb88-cb08-52da-a297-83e442209b21", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36053 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:d9dd52ce-73c0-5ac9-ac56-327ac80ebfb5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:dcb12262-5fdf-5ee9-804b-b41be63cf6a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-43665 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:3b1a66de-eade-5295-a7a2-47a3ca8e20a1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46695 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:bfc15a68-c454-5497-935d-9c8e18d30ddf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-24680 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:3f867ed6-6c67-5e54-b13e-94b97407feeb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:3e5a610f-0969-5b78-90bd-293de3075078", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:fc11063d-23af-5e11-9d65-4031c9f343aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:26551e5b-f6a2-5e9f-bc22-dd572dfd469f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:73994277-80a1-5e84-9855-41e96f389f8e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:4f41bea8-96db-5437-a1cd-2398e784319e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41989 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:cab5bf44-08ff-53e6-a453-fae5dc410a03", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-41990 does not affect version 5.0.2.post12+tuxcare of django. not_affected \u2014 Django 5.0.2 uses the original simple trim_punctuation implementation that lacks the vulnerable code pattern. CVE-2024-41990's DoS vulnerability was introduced by the CVE-2024-38875 fix (commit d666457453, June 2024) which replaced the simple implementation with a complex CountsDict-based one containing repeated rfind('&') calls. The target version predates this architectural change and therefo...", "justification": "code_not_present" } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:4ee30150-e531-56ba-af01-f9a7ffae7096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41991 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:957ea8a3-4200-5d13-8b61-b944201386f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-42005 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:c515ce77-cd77-5a79-8683-a39550256c72", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45230 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:42b12965-7e28-59b5-9803-6ff93391c950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:74790c6f-8732-5e74-919e-f8efd8714b54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53907 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:8c0d0c8d-9181-5f1c-bf12-bcae6ff98707", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:a53668d0-4e15-53e6-bd47-740424baf034", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56374 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:e633cc53-4e66-5e61-8856-6c8c6c01050e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:e0002787-4c4b-5432-a9ac-8ed4486147bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:0582e7de-ad27-5fed-b749-0943333d23b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:b63cfc4a-4f8f-5112-b528-0cce848c4260", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-26699 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:32625c6e-337f-5602-883a-fbd75b8c829a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-27556 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:1223bd95-f9f5-5b0a-8afd-aa07a961220b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32873 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:2ed70af7-cffb-5af5-8d4e-d61b91e7d2bd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:6ae5f368-e14f-5df3-a30e-108eb1bee1f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:f3ad7d63-1200-50fe-8ea9-555b1915b40b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59681 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:75aeed4d-e51c-53f7-a26e-038d397d6206", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59682 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:179557c9-008a-5040-9923-8a54e57b4ab8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:1d51ad76-9826-5a60-b9d4-b5ac5e835c50", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:ddb4a3fd-9869-5bca-95ef-1e439acb2542", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:5ac783e4-bc5e-5442-a834-9ff3db285a2c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:a89c4e2a-ef8e-5a10-8e72-ba832246aa27", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:c38c76db-cedf-5d69-9d30-a30d8440839e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:b5c9ef0a-99ab-5222-a193-31743c577a51", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:699159bb-80f0-5223-b490-e6d64cd112c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15307 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:3251dee8-c412-5a60-9ec2-4c1cec7a26a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15830 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:063c0997-28e0-5780-87db-7a2f6ef06939", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25673 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:69c4b53f-6f62-5522-8981-44f7f3fc86b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25674 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:71f9a3e9-4538-5685-a8a7-9f41bbbf9d80", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33033 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:130281f4-bada-5960-a053-09922457326e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:2e6ada7b-fd8e-5297-8a08-2bd400087044", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-3902 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:8ab2d4a4-5cc3-58b7-bfca-5d6f010188d8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4277 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:c75da16e-da94-5906-a848-11d97f8dae53", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4292 affects version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:45494d7a-cfdd-532d-8339-fba4fa0949b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:8ab3138a-e451-59e3-ac51-cd85c46730a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:011cace1-c94a-5600-9d23-d914c6d417a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:9c1a2e64-c2d2-50cd-808f-aaf037192330", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 5.0.2.post12+tuxcare of django. not_affected \u2014 Django 5.0.2 is not affected by CVE-2026-53878. The vulnerable code (DomainNameValidator class) does not exist in this version - it was introduced in Django 5.1. Django 5.0.2 uses _simple_domain_name_validator which already validates against newlines via string.whitespace.", "justification": "code_not_present" } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:df79154e-743f-58ff-9f98-8308b42fbe40", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:6f00b622-f896-5681-a398-8476c6e461a2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 5.0.2.post12+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ] }