{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:fdf9a4f1-226f-552f-b01f-50bba8ba4fa5", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@5.0.post15+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@5.0.post15+tuxcare", "version": "5.0.post15+tuxcare", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:34853051-4a02-54f1-b11c-4b9227fa5d08", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24680 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:7fc3c7f2-582c-50d2-83b0-53995ebc53f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:7b0f6a08-9f5b-5738-80f9-a99d44f7b8e0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:6df2d0f7-4088-5dee-af72-40a210544741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:fa8e2a46-6270-5d4f-9880-ad5de14ca837", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:07212900-165c-52b0-9ec0-cef6c6f4b686", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:1924df8b-1745-5f4e-b174-ff46d9d7672e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41989 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:c03edc13-2de8-5e40-b8c9-7a8b5169c7a1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41990 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:68464b24-866c-5e38-a30a-5f9d7d503b84", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41991 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:3a48c0c5-cf51-540f-bca3-e9b9ff23bd50", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-42005 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:527cdac5-50f2-5333-acec-2c7d6ce24089", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45230 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:77629ec3-2845-5a51-98a8-5387f86a999d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:fab17661-05d6-5f10-b4e6-8c3315cb3109", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53907 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:ada44b6d-c81a-5ff1-9a2b-e4875ec96b57", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:c27dff68-1344-5843-9c8f-145881fb1ef2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56374 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:3ca666a2-6ac9-5ece-860a-ce1587d041c0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13372 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:1c244209-3718-52f3-8773-8cc4611608e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:eead2434-3958-5fcc-a38e-b51917b01be6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-14550 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:d51b8300-1861-537f-931a-dbadb5fa7a77", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-26699 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:99677b4a-4b10-5713-8e50-5895781bf3eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-27556 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:aff8cdae-6a7f-5296-bb25-7192ac1a8490", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:24af6f62-6de9-5744-b01e-77c0d93d267c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:f7620641-97ca-50c7-b985-9b3d984a9c54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:7dffb6b9-1879-5249-a5c7-51cd1a4b1550", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:08edc75a-183b-55a2-a9d1-0d1066b114f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:0379757e-03d3-574d-be4f-cdfd76881e4b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:64d58917-bb9c-51af-a7f9-c33dea2dd83b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1285 affects version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:fa974b8b-cee2-5284-a5c5-7389197980dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:c3dc3944-e14d-5aab-a966-afed7ae0c88d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:eb763f6c-5850-5592-88be-c4a27c415899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-15307 affects version 5.0.post15+tuxcare of django, and is fixed in 5.0.post16+tuxcare." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:67288870-2602-56f8-9276-aa83e3cea287", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-15830 affects version 5.0.post15+tuxcare of django, and is fixed in 5.0.post16+tuxcare." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:692ad389-f53e-5a6a-9e77-b4139db7f7ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:fd60b8fe-8324-53be-9de6-90c79d3d4502", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:70a312d9-79a9-5eeb-b344-5ecb096f7819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:99c22e25-5dc1-581d-a5f3-dbbb5225ae15", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 5.0.post15+tuxcare of django. not_affected \u2014 Django 5.0 does not contain the vulnerable DomainNameValidator class. This validator was introduced in Django 5.1 (commit 4971a9afe5). Since the specific component affected by CVE-2026-53878 does not exist in this version, Django 5.0 cannot be affected by this vulnerability. Additionally, all domain validators present in Django 5.0 (_simple_domain_name_validator, EmailValidator, URLValidator) a...", "justification": "code_not_present" } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:4dc6588c-3ede-5ad2-bbb1-1f34fcaff5c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 5.0.post15+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ], "bom-ref": "urn:uuid:b0ec4b94-325f-5127-a192-76effef12c60", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 5.0.post15+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@5.0.post15+tuxcare" } ] }