{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:ce382d8c-a029-5924-94aa-3db9b2291887", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@5.0.post20+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@5.0.post20+tuxcare", "version": "5.0.post20+tuxcare", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:e61ccae5-353f-5ce8-87ba-ac11343415f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24680 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:fe623763-3ce5-5283-b2a5-34ea6af29a43", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:2fd9176a-ec33-5edf-bcfd-fc5ca4aadde0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:aee2d1a8-20a1-5bf1-bc69-e2e6fb3abfe3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:efaa673d-1c95-555d-a540-5008c2d9a91c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:0e4362f0-5241-543d-af0d-dbf49eeabfd4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:8f71575b-5615-5afe-a3a7-739bcc7b617c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41989 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:7844f9cf-8ce9-5223-8a29-f3f1ccb4d32a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41990 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:fbd9dc26-3477-5258-80f4-e48db1f67014", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41991 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:a58268a7-9495-5833-ac21-0f2871af96d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-42005 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:45194f19-891f-580b-bfb3-809c7aa9e4b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45230 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:367420f1-d5f5-525a-a34b-df8c57160815", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:e9a67428-b28b-5580-a6d2-05a24c9590e8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53907 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:545c99cb-fdd8-51d9-b865-d548fd771860", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:777b4343-3de6-5865-9101-76c58b796d85", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56374 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:bf4ce3b0-2c19-5d0d-977c-37e1007f4cd9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:5e322469-4125-563c-ac6b-e4c9c6999561", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:81093718-e9ff-5f5d-9b6a-5d2fe0e2bf52", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:c8ae0ef1-4f30-53ea-a58d-cade75835ee5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-26699 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:fe157765-b0ea-533f-adec-22f7070265d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-27556 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:3b951360-004d-528e-9c99-bf5de2f63fa1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:32301a9e-e4bf-5cd8-9953-8ee44a4e1e5a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:a5738553-7574-5f4e-b0b4-26360def4c2b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:8661dc56-8d7c-51f4-a7c9-ba9db8bcf233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:c50c0ce3-f64b-5131-b2d3-a4117f6fbc4c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:0b63b2e7-b1f0-5d30-bfde-de61a2b2053a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:ffbb09b7-ed08-5aaa-81c3-2a7b9b5404fd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:4d8701c6-a99c-551e-8ea5-f4b648a015e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:d494bff5-da86-5225-8648-76effbb851b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:f7b3e6d0-4457-5405-a05d-41fe3d1fd321", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15307 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:f4429150-fde1-5c9f-b176-d0ead391bdd2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15830 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:af52c4e2-f596-59df-bb2e-35fd76fa03ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:5ef16fd4-f83a-59eb-a2ff-3135ef366dd4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:50583139-ff54-5b96-9cea-afc97c240e29", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:ca392ee2-abab-5a6d-938a-6c837fc25527", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 5.0.post20+tuxcare of django. not_affected \u2014 Django 5.0 does not contain the vulnerable DomainNameValidator class. This validator was introduced in Django 5.1 (commit 4971a9afe5). Since the specific component affected by CVE-2026-53878 does not exist in this version, Django 5.0 cannot be affected by this vulnerability. Additionally, all domain validators present in Django 5.0 (_simple_domain_name_validator, EmailValidator, URLValidator) a...", "justification": "code_not_present" } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:0fb06693-1c39-5896-affe-e670920e1248", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 5.0.post20+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:43ce952d-502e-58fd-ba7a-c9015bcf1f5f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 5.0.post20+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@5.0.post20+tuxcare" } ] }