{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:2ae3e1fb-2cde-535b-9848-14d3c63cfa47", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:pypi/django@5.0.post6+tuxcare", "type": "library", "name": "django", "version": "5.0.post6+tuxcare", "purl": "pkg:pypi/django@5.0.post6+tuxcare" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:64f884b8-0731-5a32-a575-fa1a47b802b7", "id": "CVE-2024-24680", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24680 is fixed in version 5.0.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:493f8ac6-9430-5cc4-833c-c08d8d273b3f", "id": "CVE-2024-27351", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-27351 affects version 5.0.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:ede5c16a-171c-51de-a0b7-9af86d3347a7", "id": "CVE-2024-38875", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 5.0.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:48f7050c-7ff5-5dcb-b2c2-fd3c273b4114", "id": "CVE-2024-39329", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39329 affects version 5.0.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:6cb2ee6c-f479-5070-9d26-73c540c59957", "id": "CVE-2024-39330", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 5.0.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:8bcc71fc-ea88-50fc-9c4d-900bd142b734", "id": "CVE-2024-39614", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is fixed in version 5.0.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:14b22ce7-65f0-5226-b557-ca07c714267c", "id": "CVE-2024-41989", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41989 affects version 5.0.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:933940e3-c247-5ff0-9e6c-49e0a4fb869b", "id": "CVE-2024-41990", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41990 is fixed in version 5.0.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:e6504f3a-5113-5449-bd0d-a9dcac2e1484", "id": "CVE-2024-41991", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41991 affects version 5.0.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:7e9f5591-337a-5feb-9768-c2dec35eb066", "id": "CVE-2024-42005", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-42005 is fixed in version 5.0.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:0bde28cc-ffbe-58a0-bee7-c190a02be6d9", "id": "CVE-2024-45230", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45230 affects version 5.0.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:ed14b39b-4c01-58e7-942a-262fddf0d83a", "id": "CVE-2024-45231", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45231 affects version 5.0.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:d9c9d2d2-0015-5cd2-98ab-d3b5dc730107", "id": "CVE-2024-53907", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53907 affects version 5.0.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:644c90f0-db47-5f5f-9992-8df221d555c0", "id": "CVE-2024-53908", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53908 affects version 5.0.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:6a060f3c-0753-55cc-ab63-b18803f6433f", "id": "CVE-2024-56374", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-56374 affects version 5.0.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:3c2cf11d-6cc0-5a8a-99f5-cd840ee8963c", "id": "CVE-2025-13372", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13372 affects version 5.0.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:b4baabc1-8092-5b12-b762-a49f34841198", "id": "CVE-2025-13473", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13473 affects version 5.0.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:bc691a55-8888-5746-8430-a0dda74841f1", "id": "CVE-2025-14550", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-14550 affects version 5.0.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:8acf4cc6-b075-5799-a9d5-8910121d7acc", "id": "CVE-2025-26699", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-26699 affects version 5.0.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:925a3d92-773a-5231-a41e-adb6d9474b69", "id": "CVE-2025-27556", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27556 affects version 5.0.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:10236191-8612-56cf-8714-2faefc058f12", "id": "CVE-2025-48432", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-48432 affects version 5.0.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:46848187-6475-52f2-8598-3c1ce3cc57ab", "id": "CVE-2025-57833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-57833 affects version 5.0.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:ab9caeea-4e27-5bbf-8450-d2d6a0219eda", "id": "CVE-2025-64458", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-64458 affects version 5.0.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:9019b949-d4a0-5db9-8da3-470ff923c296", "id": "CVE-2025-64459", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 5.0.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:711a6fb6-1833-5813-bba6-468e88bb581d", "id": "CVE-2025-64460", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-64460 affects version 5.0.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:c92a853f-7f98-5af0-8a03-43bec31ddca6", "id": "CVE-2026-1207", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1207 affects version 5.0.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:b1eaa873-9b91-5efc-a1fc-e5c213d71ff1", "id": "CVE-2026-1285", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1285 affects version 5.0.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:cc1e2983-ce9b-533a-8880-d2fa3704f979", "id": "CVE-2026-1287", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1287 affects version 5.0.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:7157908c-5060-5310-a5c8-b3a77c1c686e", "id": "CVE-2026-1312", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1312 affects version 5.0.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:6eaf7ee9-d407-5652-a168-a5b5f9051b4f", "id": "CVE-2026-48587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48587 affects version 5.0.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:31d3382f-a66c-58c4-9a4c-cb218d0c0bd6", "id": "CVE-2026-48588", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48588 affects version 5.0.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:e3ae1921-9cf8-5540-817c-f6869190071b", "id": "CVE-2026-53877", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53877 affects version 5.0.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:d76ab083-127d-5954-b1ae-0d7c8f73b1a5", "id": "CVE-2026-53878", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 5.0.post6+tuxcare of django. not_affected \u2014 Django 5.0 does not contain the vulnerable DomainNameValidator class. This validator was introduced in Django 5.1 (commit 4971a9afe5). Since the specific component affected by CVE-2026-53878 does not exist in this version, Django 5.0 cannot be affected by this vulnerability. Additionally, all domain validators present in Django 5.0 (_simple_domain_name_validator, EmailValidator, URLValidator) a..." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:5f558fd3-ed6d-5895-8645-98c9612362ee", "id": "CVE-2026-6873", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6873 affects version 5.0.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] }, { "bom-ref": "urn:uuid:dabaacad-7d5b-53d4-bc2d-870f39c62da2", "id": "CVE-2026-8404", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-8404 affects version 5.0.post6+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] } ], "dependencies": [ { "ref": "pkg:pypi/django@5.0.post6+tuxcare" } ] }