{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:c4ea0bcf-55fa-5b3a-9c1b-c3571acdcaaf", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@5.0.2.post13+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@5.0.2.post13+tuxcare", "version": "5.0.2.post13+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@5.0.2", "type": "library", "version": "5.0.2" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:ba754a75-d287-57b0-bdbe-97c534b49eb8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45115 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:b6312d8d-214b-546e-a23b-856fe36e6c1f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45116 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:e51500ef-de18-588e-bbbe-b869911be7dd", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-45452 does not affect version 5.0.2.post13+tuxcare of django. not_affected \u2014 Django 5.0.2 is NOT affected by CVE-2021-45452. The directory traversal vulnerability in Storage.save() was fixed by upstream Django in version 4.0.1 (January 2022), over 2 years before Django 5.0.2 was released (February 2024). All required defenses are present in the target: backslash normalization, path traversal detection via \"..\" checks, os.path.relpath() to ensure relative paths, and trip...", "justification": "code_not_present" } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:e1c6e6a6-63ae-5367-b0c5-d22dc87e3f23", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22818 does not affect version 5.0.2.post13+tuxcare of django. not_affected \u2014 Target Django 5.0.2 is not affected by CVE-2022-22818. The vulnerability (unescaped HTML output in {% debug %} template tag leading to XSS) is not present because the upstream Django fix was already included in the 5.0.2 release. The DebugNode.render() method contains both security measures: (1) early return when DEBUG=False, and (2) HTML escaping via escape() on all pformat outputs. CVE affect...", "justification": "code_not_present" } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:010453fe-5d05-5feb-b47c-5d77329676cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-23833 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:08222779-cc03-5d33-bbaa-af681ce35cf1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28346 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:fcf437df-5dff-590e-95e7-b15d38bdf2d8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28347 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:29a0bdde-6f38-5e90-a4c3-9091af3f3518", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-34265 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:a0c2bc4c-dc0c-56fe-87f9-307823256a30", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36359 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:2398cab9-e587-5b5e-8810-8244ce17ca47", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-41323 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:3ee57036-df39-53b4-ae80-916e4112b23e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-23969 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:7ade7a65-d27b-5bcd-bb08-c3f8d40aa70d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-24580 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:2ea0ee81-c500-59ac-a81e-83032f76eca2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31047 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:05645656-6d02-5cf1-a749-2fcdda8a806b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36053 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:76868d21-99a7-54d9-9639-e9d0ac98d536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:67361212-73ae-5b4b-9e70-fa7c091fe386", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-43665 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:291e8c2e-01de-5776-8dce-180c7416e486", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46695 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:f2c463e8-1fc2-5c19-8810-5995ca85729b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-24680 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:16204a18-106e-55bf-ac74-65a9d905b992", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:b23cd708-93b3-520c-9730-0abc8d72af16", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:362146ce-07c6-5c2d-97af-34e56c2e486b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:30699f2a-605f-564b-86ac-6e5e27352233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:feb775da-6298-56c5-a423-a8f079e91456", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:3ef9a2af-6a9f-565b-bf20-cc3245a23454", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41989 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:559e0466-2b36-5faf-a726-2cbf9786183c", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-41990 does not affect version 5.0.2.post13+tuxcare of django. not_affected \u2014 Django 5.0.2 uses the original simple trim_punctuation implementation that lacks the vulnerable code pattern. CVE-2024-41990's DoS vulnerability was introduced by the CVE-2024-38875 fix (commit d666457453, June 2024) which replaced the simple implementation with a complex CountsDict-based one containing repeated rfind('&') calls. The target version predates this architectural change and therefo...", "justification": "code_not_present" } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:2f500f52-c362-5e5c-97e7-7d4d5376f872", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41991 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:9b3ca626-ada9-5deb-8d61-7f0c085ce1f0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-42005 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:2d0ab2a6-466d-5ec9-9bea-8b74376af35d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45230 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:6d7dee83-d933-5757-af58-e66b37f9f8e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:c2ffc0fd-f1c7-51c4-8278-1b82a5588354", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53907 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:944cd51d-051d-5f6b-86fd-88eb0ec12219", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:bf5acb9f-c051-5ebc-9879-23ae1142d009", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56374 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:1aa34e04-aa29-5445-86a7-88036fd98da0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:9f83a8dc-0b6c-5991-b4ba-4920a72ed51f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:026a0887-804a-5297-87e4-7865cc649bee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:c27943ec-3ba0-5c5b-bb67-38ad356049db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-26699 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:d4e98dc8-c45d-500d-8d7b-17dbe540cf59", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-27556 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:70b62f3e-be66-5fed-8fe0-60b88798d122", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32873 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:a8b22761-4ea3-5801-8c99-3f39dffc6e4c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:f15c2af7-c63a-58bb-8a31-cf116ecb7e1e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:078e3bf5-0cdc-5cbc-8248-e9d0ee94eb66", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59681 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:f1860277-2ac8-554b-a112-a6196367a2e8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59682 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:bd7556e7-d3b9-58c5-b7a4-d2c2dccfd87c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:0ac6545e-68f3-5390-ae45-ac88891b2924", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:1889e801-abc4-5113-b457-9d3107c92b03", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:991b5c5a-796a-55fc-8d7d-b9bd78941a0a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:ff98144e-9b48-5785-bfaa-1574d77e5485", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:bacab09c-b8ee-534c-a219-2641fdaf0990", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:bd26dab3-664c-59dc-a004-f1dd5afee6f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:02fde07f-093e-561e-964a-1e9345c8b707", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15307 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:5618bfcc-0a3a-5943-a9c8-c6b5a870401b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15830 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:467a70f6-3fa3-567b-b380-2269af41c356", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25673 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:657fb21a-1753-5c20-a0a6-c76be7907f67", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25674 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:c869fa50-d3e9-5c40-a580-e9226734d20b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33033 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:54eacb0f-8959-507b-bc67-046505f0c8e9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:44b367cc-795b-5674-89d9-487258412d77", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-3902 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:685462e6-9479-5b5c-99ba-d9a98ca5e5e7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4277 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:82988a83-09fd-5f58-b6cf-2f03580644bd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4292 affects version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:dea0ad92-f14c-577a-9b6e-1d421d7d9200", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:4ece6440-f4a2-5511-a819-ebb867788b83", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:48f4b996-e2d2-55ac-8f95-98c6036d9ca6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:b9029b4b-9582-50c3-83c3-f4ed7af09231", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 5.0.2.post13+tuxcare of django. not_affected \u2014 Django 5.0.2 is not affected by CVE-2026-53878. The vulnerable code (DomainNameValidator class) does not exist in this version - it was introduced in Django 5.1. Django 5.0.2 uses _simple_domain_name_validator which already validates against newlines via string.whitespace.", "justification": "code_not_present" } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:7e462549-a8a6-5d6c-9a7b-73a1586f0d46", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:4d3614c9-acd0-5120-8083-0bc69b051539", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 5.0.2.post13+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ] }