{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:0dbff2e4-30ae-5687-bc0d-c3aa4a76f6f4", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:pypi/django@5.0.post11+tuxcare", "type": "library", "name": "django", "version": "5.0.post11+tuxcare", "purl": "pkg:pypi/django@5.0.post11+tuxcare" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:4190b840-d2b1-54d3-9965-792116617aa4", "id": "CVE-2024-24680", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24680 is fixed in version 5.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:33a05f7f-1138-51c5-b9e6-d7a1ee70839c", "id": "CVE-2024-27351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 5.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:e3f02893-1576-584c-8f36-121f90ca4cab", "id": "CVE-2024-38875", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 5.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:7f163e14-83b9-5a4a-87d3-9044e3b76ea6", "id": "CVE-2024-39329", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is fixed in version 5.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:19a364e5-7516-518f-a5d2-0abf71570315", "id": "CVE-2024-39330", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 5.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:a19fd5f1-a65c-5391-9bb9-c4835fb35798", "id": "CVE-2024-39614", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is fixed in version 5.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:43e39651-5cf5-5c49-9447-19b811e65687", "id": "CVE-2024-41989", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41989 is fixed in version 5.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:66c10c7c-acd8-51b2-884b-b256eaefaf55", "id": "CVE-2024-41990", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41990 is fixed in version 5.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:d37bf39a-55ab-5b53-b57d-3af1cb274138", "id": "CVE-2024-41991", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41991 is fixed in version 5.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:b5792a79-5671-5e72-a3ae-f9e0e566bdc6", "id": "CVE-2024-42005", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-42005 is fixed in version 5.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:4637d853-82ab-57e0-b760-e62c7d5b9806", "id": "CVE-2024-45230", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45230 affects version 5.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:5808ee6c-4124-57c0-8038-054153ff81cf", "id": "CVE-2024-45231", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45231 affects version 5.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:57ea132b-02b5-56ca-8b98-958d35263e7e", "id": "CVE-2024-53907", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53907 is fixed in version 5.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:1b82cc20-a420-5b94-b01e-677a27af3582", "id": "CVE-2024-53908", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 5.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:0ea12748-1b99-5b43-b111-c2813b801f4d", "id": "CVE-2024-56374", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-56374 affects version 5.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:1a02ac7c-b909-5245-b27d-6982060d86e9", "id": "CVE-2025-13372", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13372 affects version 5.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:2c5d42ad-31ec-58b5-bc4d-9e75d2452573", "id": "CVE-2025-13473", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13473 affects version 5.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:76f33e6a-b116-51ff-a578-6284a40a4970", "id": "CVE-2025-14550", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-14550 affects version 5.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:45999035-d18e-54d9-abf0-45e113e591dd", "id": "CVE-2025-26699", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-26699 affects version 5.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:a0171044-ab77-5d16-9e38-213f1a3c1098", "id": "CVE-2025-27556", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27556 affects version 5.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:f743a1b6-0b29-5e53-a730-d974305ea8ef", "id": "CVE-2025-48432", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-48432 affects version 5.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:4d87eb50-56f0-5324-ae45-9a11faecc506", "id": "CVE-2025-57833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-57833 affects version 5.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:48727a29-113e-5c6a-bcb9-173efdef4e1a", "id": "CVE-2025-64458", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 5.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:5f5f1caf-9b10-5208-8e71-564d69292df5", "id": "CVE-2025-64459", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 5.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:6e2c3fe2-644e-5cb1-8559-b162e58ef29f", "id": "CVE-2025-64460", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 5.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:d121ea81-4aa2-5a6d-8886-72f77716f613", "id": "CVE-2026-1207", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 5.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:bd9491da-6e2a-5159-be22-d3d4a3fef0d3", "id": "CVE-2026-1285", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1285 affects version 5.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:2c950cb6-390e-5171-b8c8-19818fe9409b", "id": "CVE-2026-1287", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1287 affects version 5.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:ededecca-d02e-5f57-a274-169782e7aa2c", "id": "CVE-2026-1312", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1312 affects version 5.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:20281cd5-1b39-524c-94e9-7e915b099d9f", "id": "CVE-2026-48587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 5.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:574327b1-61a3-5a81-9865-d488b4a9d375", "id": "CVE-2026-48588", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 5.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:9e88fc84-a10c-53b9-afee-2bf964c68fc3", "id": "CVE-2026-53877", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 5.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:27f335be-e357-5795-a470-4f2bf6a6cd5f", "id": "CVE-2026-53878", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 5.0.post11+tuxcare of django. not_affected \u2014 Django 5.0 does not contain the vulnerable DomainNameValidator class. This validator was introduced in Django 5.1 (commit 4971a9afe5). Since the specific component affected by CVE-2026-53878 does not exist in this version, Django 5.0 cannot be affected by this vulnerability. Additionally, all domain validators present in Django 5.0 (_simple_domain_name_validator, EmailValidator, URLValidator) a..." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:5fefbfd4-6847-519e-bbba-2b1007717d63", "id": "CVE-2026-6873", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 5.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:ec99522a-fb11-535f-be24-ed6020484109", "id": "CVE-2026-8404", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 5.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] } ], "dependencies": [ { "ref": "pkg:pypi/django@5.0.post11+tuxcare" } ] }