{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:533ed6c8-0f44-5ea4-ba75-83a894508f77", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:pypi/django@5.0.2.post2+tuxcare", "type": "library", "name": "django", "version": "5.0.2.post2+tuxcare", "purl": "pkg:pypi/django@5.0.2.post2+tuxcare" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:992c2f4f-5c4f-528a-a8d1-8bfe48a1d48a", "id": "CVE-2024-27351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 5.0.2.post2+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post2+tuxcare" } ] }, { "bom-ref": "urn:uuid:84cb6c9a-005d-564e-a264-816ad3b4785a", "id": "CVE-2024-38875", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38875 affects version 5.0.2.post2+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post2+tuxcare" } ] }, { "bom-ref": "urn:uuid:52974196-d3da-5b98-b8cc-8764bfad220b", "id": "CVE-2024-39329", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39329 affects version 5.0.2.post2+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post2+tuxcare" } ] }, { "bom-ref": "urn:uuid:08558215-1c88-5b5b-8254-880f9443ff3a", "id": "CVE-2024-39330", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39330 affects version 5.0.2.post2+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post2+tuxcare" } ] }, { "bom-ref": "urn:uuid:9d1a1348-9883-5654-934b-b1880f321d92", "id": "CVE-2024-39614", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39614 affects version 5.0.2.post2+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post2+tuxcare" } ] }, { "bom-ref": "urn:uuid:a2e2085e-6505-5c92-bb08-7d695d434513", "id": "CVE-2024-41989", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41989 affects version 5.0.2.post2+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post2+tuxcare" } ] }, { "bom-ref": "urn:uuid:160d9fe9-6277-566e-8930-47acc6bd601e", "id": "CVE-2024-41990", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-41990 does not affect version 5.0.2.post2+tuxcare of django. not_affected \u2014 Django 5.0.2 uses the original simple trim_punctuation implementation that lacks the vulnerable code pattern. CVE-2024-41990's DoS vulnerability was introduced by the CVE-2024-38875 fix (commit d666457453, June 2024) which replaced the simple implementation with a complex CountsDict-based one containing repeated rfind('&') calls. The target version predates this architectural change and therefo..." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post2+tuxcare" } ] }, { "bom-ref": "urn:uuid:00fd118d-bb68-554b-88f5-51322fafd0ad", "id": "CVE-2024-41991", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41991 affects version 5.0.2.post2+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post2+tuxcare" } ] }, { "bom-ref": "urn:uuid:3cf32ff2-b98f-5815-b993-7ca8d612404b", "id": "CVE-2024-42005", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-42005 affects version 5.0.2.post2+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post2+tuxcare" } ] }, { "bom-ref": "urn:uuid:b2e34d66-7e3f-5d71-aaca-78adc259e4ee", "id": "CVE-2024-45230", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45230 affects version 5.0.2.post2+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post2+tuxcare" } ] }, { "bom-ref": "urn:uuid:0494a918-2f6a-5cf6-a43f-60e38fbb7185", "id": "CVE-2024-45231", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45231 affects version 5.0.2.post2+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post2+tuxcare" } ] }, { "bom-ref": "urn:uuid:ad8ea82d-a382-53f1-8c7e-9a88cba201e6", "id": "CVE-2024-53907", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53907 affects version 5.0.2.post2+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post2+tuxcare" } ] }, { "bom-ref": "urn:uuid:ac5e7d94-4653-5ee7-befd-f814ff505e51", "id": "CVE-2024-53908", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 5.0.2.post2+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post2+tuxcare" } ] }, { "bom-ref": "urn:uuid:0bcf0c53-2496-5399-8bf8-bd2b7a5302a3", "id": "CVE-2024-56374", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-56374 affects version 5.0.2.post2+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post2+tuxcare" } ] }, { "bom-ref": "urn:uuid:b8acf5f0-628c-5a72-95df-70e96e7eba4d", "id": "CVE-2025-13372", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13372 affects version 5.0.2.post2+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post2+tuxcare" } ] }, { "bom-ref": "urn:uuid:9e5cf0cc-ca3a-5854-a9b8-09f224f6c5f2", "id": "CVE-2025-13473", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13473 affects version 5.0.2.post2+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post2+tuxcare" } ] }, { "bom-ref": "urn:uuid:b0aa0420-c6af-5c97-a986-946f80e21d02", "id": "CVE-2025-14550", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-14550 affects version 5.0.2.post2+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post2+tuxcare" } ] }, { "bom-ref": "urn:uuid:608f91da-ba17-5213-bcc9-6cdd1ef12251", "id": "CVE-2025-26699", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-26699 affects version 5.0.2.post2+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post2+tuxcare" } ] }, { "bom-ref": "urn:uuid:80f0f5fe-f99b-5949-8191-213a2694c0f1", "id": "CVE-2025-27556", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27556 affects version 5.0.2.post2+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post2+tuxcare" } ] }, { "bom-ref": "urn:uuid:b4575654-26b4-5111-898f-e28079b6bcb2", "id": "CVE-2025-48432", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-48432 affects version 5.0.2.post2+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post2+tuxcare" } ] }, { "bom-ref": "urn:uuid:de58f140-0cec-5bb6-9a8b-465d853ee6c0", "id": "CVE-2025-57833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-57833 affects version 5.0.2.post2+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post2+tuxcare" } ] }, { "bom-ref": "urn:uuid:aa0ae757-28a0-58ca-bd1a-97ea64f8b671", "id": "CVE-2025-64458", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-64458 affects version 5.0.2.post2+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post2+tuxcare" } ] }, { "bom-ref": "urn:uuid:9bac9ce1-aced-5f8f-8c4d-73227454a200", "id": "CVE-2025-64459", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-64459 affects version 5.0.2.post2+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post2+tuxcare" } ] }, { "bom-ref": "urn:uuid:291e40da-bfd4-5f43-9a59-5d21d8df210a", "id": "CVE-2025-64460", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-64460 affects version 5.0.2.post2+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post2+tuxcare" } ] }, { "bom-ref": "urn:uuid:962f21e3-2978-550a-81f9-a5fb2e06e76c", "id": "CVE-2026-1207", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1207 affects version 5.0.2.post2+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post2+tuxcare" } ] }, { "bom-ref": "urn:uuid:9063a3d5-5f68-54b7-bbd1-399a2aa18546", "id": "CVE-2026-1285", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1285 affects version 5.0.2.post2+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post2+tuxcare" } ] }, { "bom-ref": "urn:uuid:30e3218a-0988-5172-9f4c-2acad84ffc09", "id": "CVE-2026-1287", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1287 affects version 5.0.2.post2+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post2+tuxcare" } ] }, { "bom-ref": "urn:uuid:bd22b0fe-4b48-5cf0-902c-ba297d8a8756", "id": "CVE-2026-1312", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1312 affects version 5.0.2.post2+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post2+tuxcare" } ] }, { "bom-ref": "urn:uuid:e899753b-d13c-5969-a796-cdbdbca7c4c2", "id": "CVE-2026-48587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48587 affects version 5.0.2.post2+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post2+tuxcare" } ] }, { "bom-ref": "urn:uuid:ba1e6830-f68b-5fc3-979e-9742b74d0f85", "id": "CVE-2026-48588", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48588 affects version 5.0.2.post2+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post2+tuxcare" } ] }, { "bom-ref": "urn:uuid:c877ba04-4778-53b7-9c89-f1c10fd7cb07", "id": "CVE-2026-53877", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53877 affects version 5.0.2.post2+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post2+tuxcare" } ] }, { "bom-ref": "urn:uuid:0dba0a0c-7856-5ac7-adb2-852b5f9a253f", "id": "CVE-2026-53878", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 5.0.2.post2+tuxcare of django. not_affected \u2014 Django 5.0.2 is not affected by CVE-2026-53878. The vulnerable code (DomainNameValidator class) does not exist in this version - it was introduced in Django 5.1. Django 5.0.2 uses _simple_domain_name_validator which already validates against newlines via string.whitespace." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post2+tuxcare" } ] }, { "bom-ref": "urn:uuid:eda329de-3c81-5618-8d04-f2ac6695747d", "id": "CVE-2026-6873", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6873 affects version 5.0.2.post2+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post2+tuxcare" } ] }, { "bom-ref": "urn:uuid:daa223fa-84ab-528b-9a04-f3dfd711bd4f", "id": "CVE-2026-8404", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-8404 affects version 5.0.2.post2+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post2+tuxcare" } ] } ], "dependencies": [ { "ref": "pkg:pypi/django@5.0.2.post2+tuxcare" } ] }