{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e9721a9d-3905-5a89-ab18-50d865659140", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:pypi/django@5.0.post10+tuxcare", "type": "library", "name": "django", "version": "5.0.post10+tuxcare", "purl": "pkg:pypi/django@5.0.post10+tuxcare" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:2a19d889-e96c-5461-b91d-f3a71c397968", "id": "CVE-2024-24680", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24680 is fixed in version 5.0.post10+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] }, { "bom-ref": "urn:uuid:80bd15d0-f9ee-5a9b-a1b3-8f404591728d", "id": "CVE-2024-27351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 5.0.post10+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] }, { "bom-ref": "urn:uuid:c8b1d8b8-d5af-5062-b75d-bf1a103ca429", "id": "CVE-2024-38875", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 5.0.post10+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] }, { "bom-ref": "urn:uuid:693ce773-a967-5cd9-8bf8-270db4404f13", "id": "CVE-2024-39329", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is fixed in version 5.0.post10+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] }, { "bom-ref": "urn:uuid:5dfce949-8801-5457-b939-a24223939227", "id": "CVE-2024-39330", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 5.0.post10+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] }, { "bom-ref": "urn:uuid:9f4a0714-b0e5-5bdf-b472-5b9b6bf9081a", "id": "CVE-2024-39614", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is fixed in version 5.0.post10+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] }, { "bom-ref": "urn:uuid:4f30e207-f49b-553c-a8b4-d905fae2d88e", "id": "CVE-2024-41989", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41989 is fixed in version 5.0.post10+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] }, { "bom-ref": "urn:uuid:ed1eb126-2411-5497-83a8-9819f09cd887", "id": "CVE-2024-41990", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41990 is fixed in version 5.0.post10+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] }, { "bom-ref": "urn:uuid:5fbd2a24-5a54-5f75-ab47-7e6fad48b22b", "id": "CVE-2024-41991", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41991 is fixed in version 5.0.post10+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] }, { "bom-ref": "urn:uuid:aa33feca-ae4e-5293-81c5-aee1e0d28f95", "id": "CVE-2024-42005", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-42005 is fixed in version 5.0.post10+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] }, { "bom-ref": "urn:uuid:13af7a1f-895d-5cd7-bbd5-fb103a083b5d", "id": "CVE-2024-45230", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45230 affects version 5.0.post10+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] }, { "bom-ref": "urn:uuid:c1b447b3-5f39-52e6-a981-a6d3e7d99541", "id": "CVE-2024-45231", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45231 affects version 5.0.post10+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] }, { "bom-ref": "urn:uuid:e5517624-0ba9-564b-91c8-29431748a14e", "id": "CVE-2024-53907", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53907 is fixed in version 5.0.post10+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] }, { "bom-ref": "urn:uuid:3d6da44a-05e7-59da-9e91-701cc4de5e75", "id": "CVE-2024-53908", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 5.0.post10+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] }, { "bom-ref": "urn:uuid:616b7473-a90d-57d0-a30b-fe415b8161ab", "id": "CVE-2024-56374", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-56374 affects version 5.0.post10+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] }, { "bom-ref": "urn:uuid:feff0e76-4a21-5806-bd5b-08dc862d03ed", "id": "CVE-2025-13372", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13372 affects version 5.0.post10+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] }, { "bom-ref": "urn:uuid:39b057aa-a76b-5f30-8162-09e00346ad40", "id": "CVE-2025-13473", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13473 affects version 5.0.post10+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] }, { "bom-ref": "urn:uuid:8aab7d7b-f53a-5f69-95a4-802bdea8fe3b", "id": "CVE-2025-14550", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-14550 affects version 5.0.post10+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] }, { "bom-ref": "urn:uuid:4a727ca2-9e11-5f52-986a-c0ac8d8faaca", "id": "CVE-2025-26699", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-26699 affects version 5.0.post10+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] }, { "bom-ref": "urn:uuid:3bc9eeb9-41e1-5b1e-a6f9-693556bb9fa0", "id": "CVE-2025-27556", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27556 affects version 5.0.post10+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] }, { "bom-ref": "urn:uuid:843476e3-812b-521d-8868-a4e77c87a1e2", "id": "CVE-2025-48432", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-48432 affects version 5.0.post10+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] }, { "bom-ref": "urn:uuid:c6ba89c4-12c7-5efb-a8c7-6872aa3d6883", "id": "CVE-2025-57833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-57833 affects version 5.0.post10+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] }, { "bom-ref": "urn:uuid:169527ca-6ea8-53d1-bd40-c0530da574ca", "id": "CVE-2025-64458", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-64458 affects version 5.0.post10+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] }, { "bom-ref": "urn:uuid:0be55bf9-f57c-51d8-acb7-934c1152c12f", "id": "CVE-2025-64459", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 5.0.post10+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] }, { "bom-ref": "urn:uuid:3b515b48-a413-5734-9c6a-49a544c6f4ee", "id": "CVE-2025-64460", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 5.0.post10+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] }, { "bom-ref": "urn:uuid:db9e39a6-9273-57cc-9f4a-4ee989596ab0", "id": "CVE-2026-1207", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 5.0.post10+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] }, { "bom-ref": "urn:uuid:63f98c0b-bee2-56a8-9965-5383740ee85d", "id": "CVE-2026-1285", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1285 affects version 5.0.post10+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] }, { "bom-ref": "urn:uuid:cd04c04f-55db-5089-b0bc-e2855de4de20", "id": "CVE-2026-1287", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1287 affects version 5.0.post10+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] }, { "bom-ref": "urn:uuid:37b9201f-b49d-56c1-929e-6f83749fbe17", "id": "CVE-2026-1312", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1312 affects version 5.0.post10+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] }, { "bom-ref": "urn:uuid:e3f29901-7566-50f4-a23d-aad36bafe64e", "id": "CVE-2026-48587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48587 affects version 5.0.post10+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] }, { "bom-ref": "urn:uuid:203594cb-bd34-5595-9148-0a5f695e10a5", "id": "CVE-2026-48588", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 5.0.post10+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] }, { "bom-ref": "urn:uuid:f6a563a4-3d82-5ff5-8954-ce211def5030", "id": "CVE-2026-53877", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 5.0.post10+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] }, { "bom-ref": "urn:uuid:83773b50-d50b-501f-b0b7-863b793ff6cb", "id": "CVE-2026-53878", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 5.0.post10+tuxcare of django. not_affected \u2014 Django 5.0 does not contain the vulnerable DomainNameValidator class. This validator was introduced in Django 5.1 (commit 4971a9afe5). Since the specific component affected by CVE-2026-53878 does not exist in this version, Django 5.0 cannot be affected by this vulnerability. Additionally, all domain validators present in Django 5.0 (_simple_domain_name_validator, EmailValidator, URLValidator) a..." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] }, { "bom-ref": "urn:uuid:39e02578-b771-5599-8028-6f4154cd254d", "id": "CVE-2026-6873", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 5.0.post10+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] }, { "bom-ref": "urn:uuid:8107e990-63fa-587c-9e4e-0b69a98a1a8f", "id": "CVE-2026-8404", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 5.0.post10+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] } ], "dependencies": [ { "ref": "pkg:pypi/django@5.0.post10+tuxcare" } ] }