{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:c8c8fdeb-96e3-5745-99f3-e71279c4ac85", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:pypi/django@5.0.2.post7+tuxcare", "type": "library", "name": "django", "version": "5.0.2.post7+tuxcare", "purl": "pkg:pypi/django@5.0.2.post7+tuxcare" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:73bdf32a-ef9b-52a6-ba4c-3c726d8eb1a7", "id": "CVE-2024-27351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 5.0.2.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:8b47873b-6cdb-58d8-9472-950bd8d7539b", "id": "CVE-2024-38875", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 5.0.2.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:ea70552d-f0fd-555c-87ea-b93c9016b1be", "id": "CVE-2024-39329", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is fixed in version 5.0.2.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:b3fcf968-6636-59f8-9115-264e10a1f012", "id": "CVE-2024-39330", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 5.0.2.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:e026d2e0-5567-51e5-af0f-051e83c2f6a6", "id": "CVE-2024-39614", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is fixed in version 5.0.2.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:450a1be9-d89c-5a0b-91f3-3e68556b5998", "id": "CVE-2024-41989", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41989 is fixed in version 5.0.2.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:845a9aa7-e1f2-5fd7-b96b-67adf6423e18", "id": "CVE-2024-41990", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-41990 does not affect version 5.0.2.post7+tuxcare of django. not_affected \u2014 Django 5.0.2 uses the original simple trim_punctuation implementation that lacks the vulnerable code pattern. CVE-2024-41990's DoS vulnerability was introduced by the CVE-2024-38875 fix (commit d666457453, June 2024) which replaced the simple implementation with a complex CountsDict-based one containing repeated rfind('&') calls. The target version predates this architectural change and therefo..." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:a5bfc473-eb82-5511-be4d-a028bde804f1", "id": "CVE-2024-41991", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41991 is fixed in version 5.0.2.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:ddc315e2-abc8-5a53-8afc-513e22b62c67", "id": "CVE-2024-42005", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-42005 is fixed in version 5.0.2.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:a99087b4-ddfe-57a1-b6fa-24a1bd83ecd3", "id": "CVE-2024-45230", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45230 is fixed in version 5.0.2.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:20bbc4cf-0f29-5ab5-afe8-17abe0bd2d05", "id": "CVE-2024-45231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 5.0.2.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:b1f666f4-f44c-583e-917b-d3a32440f4fd", "id": "CVE-2024-53907", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53907 is fixed in version 5.0.2.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:13ef145e-a400-58ca-a6dd-cf4e60612fec", "id": "CVE-2024-53908", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 5.0.2.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:0fdaccb3-28c3-51df-bec0-8a27695dba11", "id": "CVE-2024-56374", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56374 is fixed in version 5.0.2.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:24f9f461-758b-597f-9eaf-59bb7b897ba6", "id": "CVE-2025-13372", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13372 affects version 5.0.2.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:e55106a0-804b-5ff5-a2a6-e6c21e81e5b8", "id": "CVE-2025-13473", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13473 affects version 5.0.2.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:bd0880cc-ce7d-5f16-bd7f-dede6e630631", "id": "CVE-2025-14550", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-14550 affects version 5.0.2.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:d6577c65-aac7-546e-ab3f-da6e911c3e8c", "id": "CVE-2025-26699", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-26699 is fixed in version 5.0.2.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:19908bf4-5c37-5084-80af-91895ee38628", "id": "CVE-2025-27556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-27556 is fixed in version 5.0.2.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:5e5ccd5f-3990-5759-aff9-00d2c729adf2", "id": "CVE-2025-48432", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 5.0.2.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:32f580e3-e069-5553-acef-7375709e20a9", "id": "CVE-2025-57833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-57833 affects version 5.0.2.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:63866857-8847-591c-9dee-2fb5d56407e3", "id": "CVE-2025-64458", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 5.0.2.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:1a678764-56b6-59e0-9d32-1c955e82bdcd", "id": "CVE-2025-64459", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 5.0.2.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:6864a3f6-741f-55a0-987f-65f531b27ebf", "id": "CVE-2025-64460", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 5.0.2.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:d84eb203-f8fc-5189-af20-16a7acf6ad33", "id": "CVE-2026-1207", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 5.0.2.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:3c89533f-6b66-5c89-8cc8-bcf9fa126050", "id": "CVE-2026-1285", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1285 affects version 5.0.2.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:6468d143-fd64-5cf5-b16d-130a2a0b840b", "id": "CVE-2026-1287", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1287 affects version 5.0.2.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:6e90eb4a-9265-5366-86c3-d740512458fe", "id": "CVE-2026-1312", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 5.0.2.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:f087809c-2dfa-5e94-9ac1-c254b64fb089", "id": "CVE-2026-48587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 5.0.2.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:5dddf519-f5ac-5fd7-9eb9-bfbb26382abe", "id": "CVE-2026-48588", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 5.0.2.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:ed1989e6-a469-515e-862a-91405bd33222", "id": "CVE-2026-53877", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 5.0.2.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:4e177dc8-f69f-5842-9477-ee2d6363a624", "id": "CVE-2026-53878", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 5.0.2.post7+tuxcare of django. not_affected \u2014 Django 5.0.2 is not affected by CVE-2026-53878. The vulnerable code (DomainNameValidator class) does not exist in this version - it was introduced in Django 5.1. Django 5.0.2 uses _simple_domain_name_validator which already validates against newlines via string.whitespace." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:c3f5fff2-a573-5779-ada1-a92e4704f94e", "id": "CVE-2026-6873", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 5.0.2.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:cc230762-c001-5df5-a3f0-6e92063c9763", "id": "CVE-2026-8404", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 5.0.2.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post7+tuxcare" } ] } ], "dependencies": [ { "ref": "pkg:pypi/django@5.0.2.post7+tuxcare" } ] }