{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:1c492f3e-f3a9-5a88-b95e-4e4d393abc10", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@5.0.post12+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@5.0.post12+tuxcare", "version": "5.0.post12+tuxcare", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:0fd455c4-af24-5c6b-9422-c504b49bf1a1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24680 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:035b8ab3-53cd-5823-bc41-6d95fe9efaa2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:fb62fb6e-f324-5a86-b4fd-a753d285e88b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:5b6c1d24-a113-549d-9bd8-03c2751de7c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:3cc46b12-eecd-50b0-a62e-e24087560cc8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:b5599909-1253-5aa4-bc6a-a3f9800ef22a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:7f4adc8e-a697-57d1-87b9-796ae1d84ad2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41989 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:bceee6a8-c807-50a0-a93c-bc4147635306", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41990 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:d11cad8d-68f9-5283-bf27-edcc935a3bc4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41991 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:db678b36-76bf-5578-8d25-7f4074f743b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-42005 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:a4da12fa-00ba-5a33-927b-4dbc1cd23b09", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45230 affects version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:6efd231a-6a9d-5d24-9874-23333e971a72", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45231 affects version 5.0.post12+tuxcare of django, and is fixed in 5.0.post13+tuxcare." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:0a2eaa11-bf9b-51d1-9463-e12562c5ed50", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53907 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:e925188b-5019-5e11-8bab-75189bcfcbe8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:ce2c7239-ebb5-5df9-a30a-32d78a11b8d9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-56374 affects version 5.0.post12+tuxcare of django, and is fixed in 5.0.post13+tuxcare." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:21ff6214-1ce0-5106-ae35-8236e90724eb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13372 affects version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:82045681-ece5-5d7c-b8d5-1324cdb46bb7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13473 affects version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:60b6f9e2-5fdc-53a2-8d4d-8a4248fdff09", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-14550 affects version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:6ae5ffd6-b457-556c-a4ba-812c715f3561", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-26699 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:cc957cd0-638e-596f-96e1-bc6c1a6b0ba8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27556 affects version 5.0.post12+tuxcare of django, and is fixed in 5.0.post13+tuxcare." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:8f8489ce-ce71-554a-b8b9-31f4a12da45c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-48432 affects version 5.0.post12+tuxcare of django, and is fixed in 5.0.post13+tuxcare." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:963764f3-7812-5804-98c8-979f6828b7e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:f9a86de5-a403-5e57-a3e1-aa393108e0a1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:8a9ed143-f350-59ab-8033-ac20dc805b06", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:e18aea9a-e37e-5dcc-adf0-95289c1805f3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:cf30ca14-f754-5b18-898d-f56ac20008ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:208ab055-274c-5ab2-b22a-d42259aa9d1e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1285 affects version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:2a817e9a-62b7-5520-8d39-c67c453a6d4f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1287 affects version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:751b5562-586c-5887-bb49-5600d92aa83b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1312 affects version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:2a4ee18d-1ed2-5fdf-a689-a7f92446d07e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:d5d3b3cb-b253-5f4b-82e7-8215bec88d08", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:337bdb8f-215a-5a29-87c8-a57c99e323ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:a6c26a8c-163b-5e03-bdbb-229a49e147e4", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 5.0.post12+tuxcare of django. not_affected \u2014 Django 5.0 does not contain the vulnerable DomainNameValidator class. This validator was introduced in Django 5.1 (commit 4971a9afe5). Since the specific component affected by CVE-2026-53878 does not exist in this version, Django 5.0 cannot be affected by this vulnerability. Additionally, all domain validators present in Django 5.0 (_simple_domain_name_validator, EmailValidator, URLValidator) a...", "justification": "code_not_present" } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:7f37f1fc-be52-53e6-9ae6-0a8d4f29c904", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 5.0.post12+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:d4297c3b-0264-5cff-adc0-3214b6b96159", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 5.0.post12+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@5.0.post12+tuxcare" } ] }