{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:fc96f2a3-7e80-516d-8548-ab1a899d87cd", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@5.0.2.post12+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@5.0.2.post12+tuxcare", "version": "5.0.2.post12+tuxcare", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:3f867ed6-6c67-5e54-b13e-94b97407feeb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:3e5a610f-0969-5b78-90bd-293de3075078", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:fc11063d-23af-5e11-9d65-4031c9f343aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:26551e5b-f6a2-5e9f-bc22-dd572dfd469f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:73994277-80a1-5e84-9855-41e96f389f8e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:4f41bea8-96db-5437-a1cd-2398e784319e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41989 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:cab5bf44-08ff-53e6-a453-fae5dc410a03", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-41990 does not affect version 5.0.2.post12+tuxcare of django. not_affected \u2014 Django 5.0.2 uses the original simple trim_punctuation implementation that lacks the vulnerable code pattern. CVE-2024-41990's DoS vulnerability was introduced by the CVE-2024-38875 fix (commit d666457453, June 2024) which replaced the simple implementation with a complex CountsDict-based one containing repeated rfind('&') calls. The target version predates this architectural change and therefo...", "justification": "code_not_present" } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:4ee30150-e531-56ba-af01-f9a7ffae7096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41991 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:957ea8a3-4200-5d13-8b61-b944201386f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-42005 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:c515ce77-cd77-5a79-8683-a39550256c72", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45230 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:42b12965-7e28-59b5-9803-6ff93391c950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:74790c6f-8732-5e74-919e-f8efd8714b54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53907 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:8c0d0c8d-9181-5f1c-bf12-bcae6ff98707", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:a53668d0-4e15-53e6-bd47-740424baf034", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56374 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:e633cc53-4e66-5e61-8856-6c8c6c01050e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:e0002787-4c4b-5432-a9ac-8ed4486147bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:0582e7de-ad27-5fed-b749-0943333d23b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:b63cfc4a-4f8f-5112-b528-0cce848c4260", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-26699 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:32625c6e-337f-5602-883a-fbd75b8c829a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-27556 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:2ed70af7-cffb-5af5-8d4e-d61b91e7d2bd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:6ae5f368-e14f-5df3-a30e-108eb1bee1f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:179557c9-008a-5040-9923-8a54e57b4ab8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:1d51ad76-9826-5a60-b9d4-b5ac5e835c50", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:ddb4a3fd-9869-5bca-95ef-1e439acb2542", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:5ac783e4-bc5e-5442-a834-9ff3db285a2c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:a89c4e2a-ef8e-5a10-8e72-ba832246aa27", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:c38c76db-cedf-5d69-9d30-a30d8440839e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:b5c9ef0a-99ab-5222-a193-31743c577a51", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:699159bb-80f0-5223-b490-e6d64cd112c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15307 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:3251dee8-c412-5a60-9ec2-4c1cec7a26a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15830 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:45494d7a-cfdd-532d-8339-fba4fa0949b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:8ab3138a-e451-59e3-ac51-cd85c46730a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:011cace1-c94a-5600-9d23-d914c6d417a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:9c1a2e64-c2d2-50cd-808f-aaf037192330", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 5.0.2.post12+tuxcare of django. not_affected \u2014 Django 5.0.2 is not affected by CVE-2026-53878. The vulnerable code (DomainNameValidator class) does not exist in this version - it was introduced in Django 5.1. Django 5.0.2 uses _simple_domain_name_validator which already validates against newlines via string.whitespace.", "justification": "code_not_present" } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:df79154e-743f-58ff-9f98-8308b42fbe40", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 5.0.2.post12+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:6f00b622-f896-5681-a398-8476c6e461a2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 5.0.2.post12+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@5.0.2.post12+tuxcare" } ] }