{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:f2a0fb2a-1b5f-5141-a98b-0540c4ea9640", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:pypi/django@5.0.post9+tuxcare", "type": "library", "name": "django", "version": "5.0.post9+tuxcare", "purl": "pkg:pypi/django@5.0.post9+tuxcare" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:7e073667-eb5a-5f0f-9cd1-433346cfc0dc", "id": "CVE-2024-24680", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24680 is fixed in version 5.0.post9+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] }, { "bom-ref": "urn:uuid:2c49be53-7a82-5abb-91ea-fe6df11ec96f", "id": "CVE-2024-27351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 5.0.post9+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] }, { "bom-ref": "urn:uuid:e061cda4-47c9-565c-8b79-536e92f3af53", "id": "CVE-2024-38875", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 5.0.post9+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] }, { "bom-ref": "urn:uuid:99374726-a346-55d5-bebb-f10ccef754fd", "id": "CVE-2024-39329", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is fixed in version 5.0.post9+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] }, { "bom-ref": "urn:uuid:639fcf1a-b2a1-5b49-963d-b52206e4f3c9", "id": "CVE-2024-39330", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 5.0.post9+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] }, { "bom-ref": "urn:uuid:7fe90906-3b3d-5842-bf6b-229dbd9dcad6", "id": "CVE-2024-39614", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is fixed in version 5.0.post9+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] }, { "bom-ref": "urn:uuid:fc236e1a-ffbf-5840-9088-5310c1f781eb", "id": "CVE-2024-41989", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41989 is fixed in version 5.0.post9+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] }, { "bom-ref": "urn:uuid:b61b0253-0f87-5469-9116-f9b07ef998bb", "id": "CVE-2024-41990", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41990 is fixed in version 5.0.post9+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] }, { "bom-ref": "urn:uuid:af2d345c-8a23-54ad-91c1-30b4b3965b05", "id": "CVE-2024-41991", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41991 is fixed in version 5.0.post9+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] }, { "bom-ref": "urn:uuid:981ae3e8-746a-5c63-a0db-9cdb4479331f", "id": "CVE-2024-42005", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-42005 is fixed in version 5.0.post9+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] }, { "bom-ref": "urn:uuid:251d57a3-c52b-5472-b72f-56534a2fb83f", "id": "CVE-2024-45230", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45230 affects version 5.0.post9+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] }, { "bom-ref": "urn:uuid:754cf5c9-7238-508c-9949-fad098bc14b4", "id": "CVE-2024-45231", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45231 affects version 5.0.post9+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] }, { "bom-ref": "urn:uuid:084c2d31-e48b-5fab-a0ed-bad2a0951653", "id": "CVE-2024-53907", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53907 is fixed in version 5.0.post9+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] }, { "bom-ref": "urn:uuid:4344844f-ae48-5524-bb85-9bace9b9f2b5", "id": "CVE-2024-53908", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 5.0.post9+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] }, { "bom-ref": "urn:uuid:83120ca3-1ed0-541d-82d7-65cb95be6cdb", "id": "CVE-2024-56374", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-56374 affects version 5.0.post9+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] }, { "bom-ref": "urn:uuid:ab39b4e1-1cda-5143-8085-db8f9ec60bba", "id": "CVE-2025-13372", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13372 affects version 5.0.post9+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] }, { "bom-ref": "urn:uuid:1c9d1798-f1f0-5a4a-b1a2-25b358a8b3ab", "id": "CVE-2025-13473", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13473 affects version 5.0.post9+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] }, { "bom-ref": "urn:uuid:3f8062a4-41c7-5d34-99fb-43677c8afd39", "id": "CVE-2025-14550", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-14550 affects version 5.0.post9+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] }, { "bom-ref": "urn:uuid:b44ea968-30b1-59f4-b5ff-6a3737998f53", "id": "CVE-2025-26699", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-26699 affects version 5.0.post9+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] }, { "bom-ref": "urn:uuid:ca458956-00d3-5ed3-9d5a-07840a3bb356", "id": "CVE-2025-27556", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27556 affects version 5.0.post9+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] }, { "bom-ref": "urn:uuid:0160970e-8e02-51b5-8656-e806040afe3e", "id": "CVE-2025-48432", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-48432 affects version 5.0.post9+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] }, { "bom-ref": "urn:uuid:e922310e-0f85-56e8-b77d-7c53b93653c5", "id": "CVE-2025-57833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-57833 affects version 5.0.post9+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] }, { "bom-ref": "urn:uuid:d1617c4f-5bfc-5ad7-afd6-0a72d23de5db", "id": "CVE-2025-64458", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-64458 affects version 5.0.post9+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] }, { "bom-ref": "urn:uuid:5648c58f-53f8-5185-bce0-b79349cb7829", "id": "CVE-2025-64459", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 5.0.post9+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] }, { "bom-ref": "urn:uuid:93984c03-325e-589a-a74c-81fe0705f886", "id": "CVE-2025-64460", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 5.0.post9+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] }, { "bom-ref": "urn:uuid:508dd7ae-7e02-56b4-9658-5d0acf7b132c", "id": "CVE-2026-1207", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1207 affects version 5.0.post9+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] }, { "bom-ref": "urn:uuid:0367686b-59b0-58a3-b5f2-3d1977b1394c", "id": "CVE-2026-1285", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1285 affects version 5.0.post9+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] }, { "bom-ref": "urn:uuid:7870c3f9-79db-5b96-a118-0756dd889a20", "id": "CVE-2026-1287", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1287 affects version 5.0.post9+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] }, { "bom-ref": "urn:uuid:54c6bb26-3258-5ac1-bbd1-3d04be7ef14f", "id": "CVE-2026-1312", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1312 affects version 5.0.post9+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] }, { "bom-ref": "urn:uuid:97dcb827-de63-5e7a-9645-83cf8d664060", "id": "CVE-2026-48587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48587 affects version 5.0.post9+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] }, { "bom-ref": "urn:uuid:8a5800cc-5484-5a0a-bef6-7fe1c148f09c", "id": "CVE-2026-48588", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48588 affects version 5.0.post9+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] }, { "bom-ref": "urn:uuid:f6355760-3d55-577e-ba78-c4fa248d4158", "id": "CVE-2026-53877", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53877 affects version 5.0.post9+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] }, { "bom-ref": "urn:uuid:4b79e971-223c-5352-bea8-50bcf9ff774e", "id": "CVE-2026-53878", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 5.0.post9+tuxcare of django. not_affected \u2014 Django 5.0 does not contain the vulnerable DomainNameValidator class. This validator was introduced in Django 5.1 (commit 4971a9afe5). Since the specific component affected by CVE-2026-53878 does not exist in this version, Django 5.0 cannot be affected by this vulnerability. Additionally, all domain validators present in Django 5.0 (_simple_domain_name_validator, EmailValidator, URLValidator) a..." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] }, { "bom-ref": "urn:uuid:bb0f8572-f192-5771-b2d4-a2c3c6fd717c", "id": "CVE-2026-6873", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6873 affects version 5.0.post9+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] }, { "bom-ref": "urn:uuid:870b2898-0c1a-5fe0-b211-24d9573f4081", "id": "CVE-2026-8404", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-8404 affects version 5.0.post9+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] } ], "dependencies": [ { "ref": "pkg:pypi/django@5.0.post9+tuxcare" } ] }