{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:09493364-5194-5e5f-8b94-0509313e8b42", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:pypi/django@5.0.2.post3+tuxcare", "type": "library", "name": "django", "version": "5.0.2.post3+tuxcare", "purl": "pkg:pypi/django@5.0.2.post3+tuxcare" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:5ae30ae5-7393-5ea7-964b-c224a8bc1b02", "id": "CVE-2024-27351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 5.0.2.post3+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post3+tuxcare" } ] }, { "bom-ref": "urn:uuid:c41f4330-04ea-5182-af8c-c07e27c0ddae", "id": "CVE-2024-38875", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38875 affects version 5.0.2.post3+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post3+tuxcare" } ] }, { "bom-ref": "urn:uuid:f5d403f3-d6c0-5324-9bb6-cbfa07cbaab9", "id": "CVE-2024-39329", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39329 affects version 5.0.2.post3+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post3+tuxcare" } ] }, { "bom-ref": "urn:uuid:e4251210-45f4-5498-9c1b-a4a9cf0b55d4", "id": "CVE-2024-39330", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39330 affects version 5.0.2.post3+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post3+tuxcare" } ] }, { "bom-ref": "urn:uuid:f706e224-2354-5352-9e65-f9cdfa46067d", "id": "CVE-2024-39614", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39614 affects version 5.0.2.post3+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post3+tuxcare" } ] }, { "bom-ref": "urn:uuid:c09a7a5c-3c2f-595b-918b-d5b5c59e0dcc", "id": "CVE-2024-41989", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41989 affects version 5.0.2.post3+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post3+tuxcare" } ] }, { "bom-ref": "urn:uuid:57809083-9ca0-5d84-9c8e-04127409d2dc", "id": "CVE-2024-41990", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-41990 does not affect version 5.0.2.post3+tuxcare of django. not_affected \u2014 Django 5.0.2 uses the original simple trim_punctuation implementation that lacks the vulnerable code pattern. CVE-2024-41990's DoS vulnerability was introduced by the CVE-2024-38875 fix (commit d666457453, June 2024) which replaced the simple implementation with a complex CountsDict-based one containing repeated rfind('&') calls. The target version predates this architectural change and therefo..." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post3+tuxcare" } ] }, { "bom-ref": "urn:uuid:056624f8-d624-5588-9f76-24857d2eb1f0", "id": "CVE-2024-41991", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41991 affects version 5.0.2.post3+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post3+tuxcare" } ] }, { "bom-ref": "urn:uuid:e93693bd-23b0-5c61-a980-63a67391444b", "id": "CVE-2024-42005", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-42005 affects version 5.0.2.post3+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post3+tuxcare" } ] }, { "bom-ref": "urn:uuid:ed791b64-aaa5-5f39-9c34-ee5109e2f061", "id": "CVE-2024-45230", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45230 affects version 5.0.2.post3+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post3+tuxcare" } ] }, { "bom-ref": "urn:uuid:25cfd35a-14cd-5212-b157-c7e5187f57f8", "id": "CVE-2024-45231", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45231 affects version 5.0.2.post3+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post3+tuxcare" } ] }, { "bom-ref": "urn:uuid:d7d77498-3afd-538a-b390-340d1663af93", "id": "CVE-2024-53907", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53907 affects version 5.0.2.post3+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post3+tuxcare" } ] }, { "bom-ref": "urn:uuid:33cbd334-ac4f-5be4-8d3d-b3469efe5407", "id": "CVE-2024-53908", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 5.0.2.post3+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post3+tuxcare" } ] }, { "bom-ref": "urn:uuid:1e9d2663-71cd-5b27-905f-885b96b7245e", "id": "CVE-2024-56374", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-56374 affects version 5.0.2.post3+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post3+tuxcare" } ] }, { "bom-ref": "urn:uuid:bb32b9f3-1b93-5ed1-a08f-afc6dcd6ce50", "id": "CVE-2025-13372", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13372 affects version 5.0.2.post3+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post3+tuxcare" } ] }, { "bom-ref": "urn:uuid:c803517b-1f92-549b-9a69-1ff75a797dc6", "id": "CVE-2025-13473", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13473 affects version 5.0.2.post3+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post3+tuxcare" } ] }, { "bom-ref": "urn:uuid:fad3056e-b438-54be-b77d-0e47108c7297", "id": "CVE-2025-14550", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-14550 affects version 5.0.2.post3+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post3+tuxcare" } ] }, { "bom-ref": "urn:uuid:87030369-564d-540f-bbce-89bfcb570845", "id": "CVE-2025-26699", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-26699 affects version 5.0.2.post3+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post3+tuxcare" } ] }, { "bom-ref": "urn:uuid:3e0a8028-f0fb-5a49-b736-7040e6f50100", "id": "CVE-2025-27556", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27556 affects version 5.0.2.post3+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post3+tuxcare" } ] }, { "bom-ref": "urn:uuid:6862050f-73c1-54bb-85b5-5c6583faa0a1", "id": "CVE-2025-48432", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-48432 affects version 5.0.2.post3+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post3+tuxcare" } ] }, { "bom-ref": "urn:uuid:9b916597-e200-5299-83f2-e5636c69caba", "id": "CVE-2025-57833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-57833 affects version 5.0.2.post3+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post3+tuxcare" } ] }, { "bom-ref": "urn:uuid:d64c1032-7377-5419-8e42-755200b46bfe", "id": "CVE-2025-64458", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-64458 affects version 5.0.2.post3+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post3+tuxcare" } ] }, { "bom-ref": "urn:uuid:752f3e6c-78b7-5caf-b389-d61d6d373460", "id": "CVE-2025-64459", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 5.0.2.post3+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post3+tuxcare" } ] }, { "bom-ref": "urn:uuid:7258eee9-f82c-5b56-bcee-6c151d1e3c82", "id": "CVE-2025-64460", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-64460 affects version 5.0.2.post3+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post3+tuxcare" } ] }, { "bom-ref": "urn:uuid:c5d1a23e-3987-5fb4-99f4-9eb558f7c5ae", "id": "CVE-2026-1207", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1207 affects version 5.0.2.post3+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post3+tuxcare" } ] }, { "bom-ref": "urn:uuid:178d3cfd-e056-55e7-a5e0-455c1bd3b5da", "id": "CVE-2026-1285", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1285 affects version 5.0.2.post3+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post3+tuxcare" } ] }, { "bom-ref": "urn:uuid:4444b1ec-0dd6-57bd-8d7b-6db794327808", "id": "CVE-2026-1287", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1287 affects version 5.0.2.post3+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post3+tuxcare" } ] }, { "bom-ref": "urn:uuid:436cc03d-9a35-5b0d-a7c7-7100d082d93f", "id": "CVE-2026-1312", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1312 affects version 5.0.2.post3+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post3+tuxcare" } ] }, { "bom-ref": "urn:uuid:6a66ad04-e803-5616-9c29-ad0bc4dd0a96", "id": "CVE-2026-48587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48587 affects version 5.0.2.post3+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post3+tuxcare" } ] }, { "bom-ref": "urn:uuid:98c82981-ac97-5104-b515-25efff280b7c", "id": "CVE-2026-48588", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48588 affects version 5.0.2.post3+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post3+tuxcare" } ] }, { "bom-ref": "urn:uuid:aa2ff2ae-5798-59b1-a3c3-2b2ec0fbe9ab", "id": "CVE-2026-53877", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53877 affects version 5.0.2.post3+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post3+tuxcare" } ] }, { "bom-ref": "urn:uuid:db621cdb-fa1c-59f3-bc58-7482846408d7", "id": "CVE-2026-53878", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 5.0.2.post3+tuxcare of django. not_affected \u2014 Django 5.0.2 is not affected by CVE-2026-53878. The vulnerable code (DomainNameValidator class) does not exist in this version - it was introduced in Django 5.1. Django 5.0.2 uses _simple_domain_name_validator which already validates against newlines via string.whitespace." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post3+tuxcare" } ] }, { "bom-ref": "urn:uuid:fb1a3523-73be-5e98-9496-e1d9f3102934", "id": "CVE-2026-6873", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6873 affects version 5.0.2.post3+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post3+tuxcare" } ] }, { "bom-ref": "urn:uuid:e0551ae0-f0f2-58c0-91ae-38261bb9653f", "id": "CVE-2026-8404", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-8404 affects version 5.0.2.post3+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.2.post3+tuxcare" } ] } ], "dependencies": [ { "ref": "pkg:pypi/django@5.0.2.post3+tuxcare" } ] }