{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:71f2d6bc-545d-55cd-8630-c57d55e3453e", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:pypi/django@5.0.2.post8+tuxcare", "type": "library", "name": "django", "version": "5.0.2.post8+tuxcare", "purl": "pkg:pypi/django@5.0.2.post8+tuxcare" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:092fafc4-b4e3-51ed-ba6d-e2abb6ea3ba9", "id": "CVE-2024-27351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 5.0.2.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:792f15c7-cd7a-542e-840c-63ebde1b4d6d", "id": "CVE-2024-38875", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 5.0.2.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:0210fe9f-3a9d-53ad-b65c-97fee1bcd5a8", "id": "CVE-2024-39329", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is fixed in version 5.0.2.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:46a4240a-3eed-57e9-b74a-8291a14e6443", "id": "CVE-2024-39330", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 5.0.2.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:47343220-bbbc-5128-af3e-e064d23f9aa8", "id": "CVE-2024-39614", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is fixed in version 5.0.2.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:40c64f3c-d065-53ce-bf2e-4f3234c98ae8", "id": "CVE-2024-41989", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41989 is fixed in version 5.0.2.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:126c4de2-12a2-5968-8efa-d43b94100273", "id": "CVE-2024-41990", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-41990 does not affect version 5.0.2.post8+tuxcare of django. not_affected \u2014 Django 5.0.2 uses the original simple trim_punctuation implementation that lacks the vulnerable code pattern. CVE-2024-41990's DoS vulnerability was introduced by the CVE-2024-38875 fix (commit d666457453, June 2024) which replaced the simple implementation with a complex CountsDict-based one containing repeated rfind('&') calls. The target version predates this architectural change and therefo..." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:a1d43edb-3672-5fb1-8918-4a228533714a", "id": "CVE-2024-41991", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41991 is fixed in version 5.0.2.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:77ff804f-dee4-5782-ba49-7c37aaae2011", "id": "CVE-2024-42005", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-42005 is fixed in version 5.0.2.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:282ec9fc-e12c-5cc6-8a70-7bcd7f2b0af2", "id": "CVE-2024-45230", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45230 is fixed in version 5.0.2.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:f10731cd-a99c-59fb-a9ac-3c73595afb09", "id": "CVE-2024-45231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 5.0.2.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:5c5a6e79-a8dc-585b-97e0-e8f2a04b526e", "id": "CVE-2024-53907", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53907 is fixed in version 5.0.2.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:84b4bbc5-d39f-5238-a73f-97e7402842a6", "id": "CVE-2024-53908", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 5.0.2.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:4bba224c-cf04-59c9-88ea-b78bfaf1938c", "id": "CVE-2024-56374", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56374 is fixed in version 5.0.2.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:aeb33da3-1b95-5a46-80b7-f3e5f15f0600", "id": "CVE-2025-13372", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13372 affects version 5.0.2.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:435c82a9-cb6b-542b-8286-3d53161aa6ae", "id": "CVE-2025-13473", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 5.0.2.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:14c5bdd5-492d-57a8-85d5-944f39bf9c5f", "id": "CVE-2025-14550", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 5.0.2.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:a1c68006-dabc-5282-ad6b-1b54cb3f786a", "id": "CVE-2025-26699", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-26699 is fixed in version 5.0.2.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:10b8ee74-d542-5519-9f2e-cb967045a712", "id": "CVE-2025-27556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-27556 is fixed in version 5.0.2.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:9be89413-0eac-53ec-9a47-e0a6e1cecb67", "id": "CVE-2025-48432", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 5.0.2.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:b6febbea-0d6c-53d6-acf2-5bb86fecab53", "id": "CVE-2025-57833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-57833 affects version 5.0.2.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:9865708a-3d21-535f-8db2-1b6226c955ac", "id": "CVE-2025-64458", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 5.0.2.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:8e35358d-af18-56b1-9853-91f1e22ff0e5", "id": "CVE-2025-64459", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 5.0.2.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:ed1b41c3-6491-5d44-9079-3d3023dad099", "id": "CVE-2025-64460", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 5.0.2.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:a3725423-be59-541d-943d-2af98a7026b7", "id": "CVE-2026-1207", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 5.0.2.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:3250cf14-44ef-5956-86b7-382081badcef", "id": "CVE-2026-1285", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1285 affects version 5.0.2.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:2f3ef51b-db61-5940-b7ee-ca3edc215f21", "id": "CVE-2026-1287", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 5.0.2.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:8b851f7f-4d6e-5989-b851-73c4b21517d7", "id": "CVE-2026-1312", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 5.0.2.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:d671ae25-5f05-55a0-a0cb-801ebc448c9a", "id": "CVE-2026-48587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 5.0.2.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:e5cd4fe3-47d9-5e01-8de5-a3c817d27be0", "id": "CVE-2026-48588", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 5.0.2.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:9eef5401-ed97-5d5e-b160-fd8e4611e59f", "id": "CVE-2026-53877", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 5.0.2.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:5b706e16-3c5e-527e-a554-f564cbfdea14", "id": "CVE-2026-53878", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 5.0.2.post8+tuxcare of django. not_affected \u2014 Django 5.0.2 is not affected by CVE-2026-53878. The vulnerable code (DomainNameValidator class) does not exist in this version - it was introduced in Django 5.1. Django 5.0.2 uses _simple_domain_name_validator which already validates against newlines via string.whitespace." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:e8b09db9-dcf8-5d0e-b264-edce74ded871", "id": "CVE-2026-6873", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 5.0.2.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:2fe43aef-945d-5fb5-af6d-7c9393cd6d49", "id": "CVE-2026-8404", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 5.0.2.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post8+tuxcare" } ] } ], "dependencies": [ { "ref": "pkg:pypi/django@5.0.2.post8+tuxcare" } ] }