{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:dc0ecfb2-ffde-5dad-8935-b63a5a82c9e5", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@5.0.post12+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@5.0.post12+tuxcare", "version": "5.0.post12+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@5.0", "type": "library", "version": "5.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:b0a56017-ec81-51fd-b925-5060470576c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45115 affects version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:322395fb-d5d8-5766-8b1b-5a8df22ce4b0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-45116 affects version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:21ad24b9-5f63-5452-b15f-91bf89ee51b6", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-45452 does not affect version 5.0.post12+tuxcare of django. not_affected \u2014 CVE-2021-45452 (directory traversal in Storage.save()) is NOT present in Django 5.0.0.post20+tuxcare. The upstream fix (commit 6d343d01c5 by Florian Apolloner) shipped in Django 5.0.0 and predates all TuxCare commits in this branch. All defense mechanisms are present: backslash normalization (base.py:75,116), path traversal detection (base.py:77-80,119-122), relative path enforcement (filesyste...", "justification": "code_not_present" } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:303040d0-997b-5089-9dec-c79ffa2322cd", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22818 does not affect version 5.0.post12+tuxcare of django. not_affected \u2014 The target Django 5.0 repository is NOT AFFECTED by CVE-2022-22818. The vulnerability (XSS via unescaped output in the {% debug %} template tag) was fixed by Django upstream in commit 394517f078 on 2022-01-02, three years before this Django 5.0 release. The fix\u2014which wraps pformat() output with HTML entity encoding via escape() and blocks output when DEBUG=False\u2014is present at django/template/de...", "justification": "code_not_present" } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:3e59c331-87b8-5beb-9ab2-75f39e2553fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-23833 affects version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:a192902a-9f1e-5895-93d4-b35ce3236059", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28346 affects version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:4c2a31ec-81cc-52ee-87e8-6a2ccae1fcee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-28347 affects version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:e4011932-625d-5fcb-be20-84dadc8bca19", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-34265 affects version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:e3c03384-e735-55bb-b163-6a7caa8eddd5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-36359 affects version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:7b69efe6-459f-590e-9101-7cc74a536821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-41323 affects version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:3b3fa816-3b7a-53c0-89ee-371d8742963c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-23969 affects version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:636eb8a6-6f2e-5f44-8e7e-6e204a4cc3e8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-24580 affects version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:bd1768e9-e403-54c9-b5a2-9b3c52ac4742", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31047 affects version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:55951bff-2c2f-5533-ac32-57bfc3d243db", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36053 affects version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:92999d9b-5025-5454-98c6-05c81fa8121e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:351feb90-d2d2-5fa3-a677-7452b2c69f65", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-43665 affects version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:ae30ddd8-70c8-53d0-9a8f-692779589538", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46695 affects version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:0fd455c4-af24-5c6b-9422-c504b49bf1a1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24680 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:035b8ab3-53cd-5823-bc41-6d95fe9efaa2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:fb62fb6e-f324-5a86-b4fd-a753d285e88b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:5b6c1d24-a113-549d-9bd8-03c2751de7c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:3cc46b12-eecd-50b0-a62e-e24087560cc8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:b5599909-1253-5aa4-bc6a-a3f9800ef22a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:7f4adc8e-a697-57d1-87b9-796ae1d84ad2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41989 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:bceee6a8-c807-50a0-a93c-bc4147635306", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41990 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:d11cad8d-68f9-5283-bf27-edcc935a3bc4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41991 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:db678b36-76bf-5578-8d25-7f4074f743b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-42005 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:a4da12fa-00ba-5a33-927b-4dbc1cd23b09", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45230 affects version 5.0.post12+tuxcare of django, and is fixed in 5.0.post15+tuxcare." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:6efd231a-6a9d-5d24-9874-23333e971a72", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45231 affects version 5.0.post12+tuxcare of django, and is fixed in 5.0.post13+tuxcare." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:0a2eaa11-bf9b-51d1-9463-e12562c5ed50", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53907 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:e925188b-5019-5e11-8bab-75189bcfcbe8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:ce2c7239-ebb5-5df9-a30a-32d78a11b8d9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-56374 affects version 5.0.post12+tuxcare of django, and is fixed in 5.0.post13+tuxcare." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:21ff6214-1ce0-5106-ae35-8236e90724eb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13372 affects version 5.0.post12+tuxcare of django, and is fixed in 5.0.post17+tuxcare." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:82045681-ece5-5d7c-b8d5-1324cdb46bb7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13473 affects version 5.0.post12+tuxcare of django, and is fixed in 5.0.post14+tuxcare." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:60b6f9e2-5fdc-53a2-8d4d-8a4248fdff09", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-14550 affects version 5.0.post12+tuxcare of django, and is fixed in 5.0.post17+tuxcare." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:6ae5ffd6-b457-556c-a4ba-812c715f3561", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-26699 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:cc957cd0-638e-596f-96e1-bc6c1a6b0ba8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27556 affects version 5.0.post12+tuxcare of django, and is fixed in 5.0.post13+tuxcare." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:2c42be02-159f-55e5-8860-12e2f1a1f6b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32873 affects version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:8f8489ce-ce71-554a-b8b9-31f4a12da45c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-48432 affects version 5.0.post12+tuxcare of django, and is fixed in 5.0.post13+tuxcare." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:963764f3-7812-5804-98c8-979f6828b7e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:27b2129c-c603-5c35-8c6b-c8eea9a609d2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59681 affects version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:a72a3248-ebb0-5ef3-a239-ee29aaf256bd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59682 affects version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:f9a86de5-a403-5e57-a3e1-aa393108e0a1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:8a9ed143-f350-59ab-8033-ac20dc805b06", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:e18aea9a-e37e-5dcc-adf0-95289c1805f3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:cf30ca14-f754-5b18-898d-f56ac20008ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:208ab055-274c-5ab2-b22a-d42259aa9d1e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1285 affects version 5.0.post12+tuxcare of django, and is fixed in 5.0.post17+tuxcare." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:2a817e9a-62b7-5520-8d39-c67c453a6d4f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1287 affects version 5.0.post12+tuxcare of django, and is fixed in 5.0.post14+tuxcare." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:751b5562-586c-5887-bb49-5600d92aa83b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1312 affects version 5.0.post12+tuxcare of django, and is fixed in 5.0.post15+tuxcare." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:86743107-34f5-56cb-bcbc-319d2911f93b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-15307 affects version 5.0.post12+tuxcare of django, and is fixed in 5.0.post16+tuxcare." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:bf01f113-2e7c-5a21-91fb-740dc329a95e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-15830 affects version 5.0.post12+tuxcare of django, and is fixed in 5.0.post16+tuxcare." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:79e80b11-48e4-5996-8c3c-cf4636214742", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25673 affects version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:cfe70997-6b43-5f37-9944-eef81beab76f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25674 affects version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:9d139db8-5d9f-5bfd-8f57-085b13da792e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33033 affects version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:6de9ccc0-4494-533f-8964-09d2b4b14771", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:4baae5f3-320b-55cc-ac23-bca9f1216cff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-3902 affects version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:f5678823-462d-56de-b4b7-02fee3ac6757", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4277 affects version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:2955eb24-6864-5823-b2a5-a2f6eb83e305", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4292 affects version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:2a4ee18d-1ed2-5fdf-a689-a7f92446d07e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:d5d3b3cb-b253-5f4b-82e7-8215bec88d08", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:337bdb8f-215a-5a29-87c8-a57c99e323ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:a6c26a8c-163b-5e03-bdbb-229a49e147e4", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 5.0.post12+tuxcare of django. not_affected \u2014 Django 5.0 does not contain the vulnerable DomainNameValidator class. This validator was introduced in Django 5.1 (commit 4971a9afe5). Since the specific component affected by CVE-2026-53878 does not exist in this version, Django 5.0 cannot be affected by this vulnerability. Additionally, all domain validators present in Django 5.0 (_simple_domain_name_validator, EmailValidator, URLValidator) a...", "justification": "code_not_present" } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:7f37f1fc-be52-53e6-9ae6-0a8d4f29c904", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:d4297c3b-0264-5cff-adc0-3214b6b96159", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 5.0.post12+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ] }