{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:498fc2e4-0c8f-54ed-9117-adee4d449db3", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@5.0.2.post13+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@5.0.2.post13+tuxcare", "version": "5.0.2.post13+tuxcare", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:16204a18-106e-55bf-ac74-65a9d905b992", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:b23cd708-93b3-520c-9730-0abc8d72af16", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:362146ce-07c6-5c2d-97af-34e56c2e486b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:30699f2a-605f-564b-86ac-6e5e27352233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:feb775da-6298-56c5-a423-a8f079e91456", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:3ef9a2af-6a9f-565b-bf20-cc3245a23454", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41989 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:559e0466-2b36-5faf-a726-2cbf9786183c", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-41990 does not affect version 5.0.2.post13+tuxcare of django. not_affected \u2014 Django 5.0.2 uses the original simple trim_punctuation implementation that lacks the vulnerable code pattern. CVE-2024-41990's DoS vulnerability was introduced by the CVE-2024-38875 fix (commit d666457453, June 2024) which replaced the simple implementation with a complex CountsDict-based one containing repeated rfind('&') calls. The target version predates this architectural change and therefo...", "justification": "code_not_present" } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:2f500f52-c362-5e5c-97e7-7d4d5376f872", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41991 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:9b3ca626-ada9-5deb-8d61-7f0c085ce1f0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-42005 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:2d0ab2a6-466d-5ec9-9bea-8b74376af35d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45230 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:6d7dee83-d933-5757-af58-e66b37f9f8e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:c2ffc0fd-f1c7-51c4-8278-1b82a5588354", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53907 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:944cd51d-051d-5f6b-86fd-88eb0ec12219", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:bf5acb9f-c051-5ebc-9879-23ae1142d009", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56374 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:1aa34e04-aa29-5445-86a7-88036fd98da0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:9f83a8dc-0b6c-5991-b4ba-4920a72ed51f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:026a0887-804a-5297-87e4-7865cc649bee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:c27943ec-3ba0-5c5b-bb67-38ad356049db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-26699 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:d4e98dc8-c45d-500d-8d7b-17dbe540cf59", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-27556 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:a8b22761-4ea3-5801-8c99-3f39dffc6e4c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:f15c2af7-c63a-58bb-8a31-cf116ecb7e1e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:bd7556e7-d3b9-58c5-b7a4-d2c2dccfd87c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:0ac6545e-68f3-5390-ae45-ac88891b2924", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:1889e801-abc4-5113-b457-9d3107c92b03", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:991b5c5a-796a-55fc-8d7d-b9bd78941a0a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:ff98144e-9b48-5785-bfaa-1574d77e5485", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:bacab09c-b8ee-534c-a219-2641fdaf0990", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:bd26dab3-664c-59dc-a004-f1dd5afee6f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:02fde07f-093e-561e-964a-1e9345c8b707", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15307 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:5618bfcc-0a3a-5943-a9c8-c6b5a870401b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15830 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:dea0ad92-f14c-577a-9b6e-1d421d7d9200", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:4ece6440-f4a2-5511-a819-ebb867788b83", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:48f4b996-e2d2-55ac-8f95-98c6036d9ca6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:b9029b4b-9582-50c3-83c3-f4ed7af09231", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 5.0.2.post13+tuxcare of django. not_affected \u2014 Django 5.0.2 is not affected by CVE-2026-53878. The vulnerable code (DomainNameValidator class) does not exist in this version - it was introduced in Django 5.1. Django 5.0.2 uses _simple_domain_name_validator which already validates against newlines via string.whitespace.", "justification": "code_not_present" } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:7e462549-a8a6-5d6c-9a7b-73a1586f0d46", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 5.0.2.post13+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:4d3614c9-acd0-5120-8083-0bc69b051539", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 5.0.2.post13+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@5.0.2.post13+tuxcare" } ] }