{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:2a21883f-8dcc-53c7-93d1-7a9bd94c7f9c", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:pypi/django@4.0.post12+tuxcare", "type": "library", "name": "django", "version": "4.0.post12+tuxcare", "purl": "pkg:pypi/django@4.0.post12+tuxcare" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:4b646905-6c05-521d-863d-b31749ca63b8", "id": "CVE-2021-45115", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45115 is fixed in version 4.0.post12+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] }, { "bom-ref": "urn:uuid:324a91e0-b2c2-54dd-8a59-b3fe11fec343", "id": "CVE-2021-45116", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45116 is fixed in version 4.0.post12+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] }, { "bom-ref": "urn:uuid:3a339d60-6272-5ab7-8004-2be8d52c9380", "id": "CVE-2021-45452", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45452 is fixed in version 4.0.post12+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] }, { "bom-ref": "urn:uuid:1e772315-0d38-5951-8c0c-4ea5c748077e", "id": "CVE-2022-22818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22818 is fixed in version 4.0.post12+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] }, { "bom-ref": "urn:uuid:b8d0db02-cca0-51ef-8b80-49c8048af1f5", "id": "CVE-2022-23833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-23833 is fixed in version 4.0.post12+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] }, { "bom-ref": "urn:uuid:e7240d96-6feb-51b3-8ab1-c0330801d7b5", "id": "CVE-2022-28346", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28346 is fixed in version 4.0.post12+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] }, { "bom-ref": "urn:uuid:db94abbb-b2a3-52ac-ab98-9b1d9f2f9625", "id": "CVE-2022-28347", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28347 is fixed in version 4.0.post12+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] }, { "bom-ref": "urn:uuid:55775498-b361-546a-8b6b-46f790b9e789", "id": "CVE-2022-34265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-34265 is fixed in version 4.0.post12+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] }, { "bom-ref": "urn:uuid:d0dafad5-b30d-5d1f-9d09-a5fb99e52d27", "id": "CVE-2022-36359", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-36359 is fixed in version 4.0.post12+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] }, { "bom-ref": "urn:uuid:2dc36ad0-ece7-567c-91ed-f46ac2ada4ba", "id": "CVE-2022-41323", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41323 is fixed in version 4.0.post12+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] }, { "bom-ref": "urn:uuid:47c90f3b-d2ea-5fd3-bc8f-c3fb3f11207b", "id": "CVE-2023-23969", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-23969 is fixed in version 4.0.post12+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] }, { "bom-ref": "urn:uuid:82f31a3a-a87a-5616-8332-35a328a91a4d", "id": "CVE-2023-24580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-24580 is fixed in version 4.0.post12+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] }, { "bom-ref": "urn:uuid:3787fdd6-32ac-5a2c-a168-30561b796499", "id": "CVE-2023-31047", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-31047 is fixed in version 4.0.post12+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] }, { "bom-ref": "urn:uuid:f3cf3a11-404c-5285-997e-3ef06768a32a", "id": "CVE-2023-36053", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-36053 is fixed in version 4.0.post12+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] }, { "bom-ref": "urn:uuid:3372a3f2-cfe5-5569-9832-d92c14b36600", "id": "CVE-2023-43665", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-43665 is fixed in version 4.0.post12+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] }, { "bom-ref": "urn:uuid:c8cf2b14-fd09-5d17-afde-22f4db690163", "id": "CVE-2023-46695", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46695 affects version 4.0.post12+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] }, { "bom-ref": "urn:uuid:d35371a8-0533-569d-a41f-12f313941b03", "id": "CVE-2024-45231", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45231 affects version 4.0.post12+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] }, { "bom-ref": "urn:uuid:d40a0940-d6ba-5809-810c-af4fcf74cffa", "id": "CVE-2025-13372", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13372 affects version 4.0.post12+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] }, { "bom-ref": "urn:uuid:2324394e-7da3-5bbb-87c4-7951e1763f39", "id": "CVE-2025-13473", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13473 affects version 4.0.post12+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] }, { "bom-ref": "urn:uuid:1d49d1fe-b662-5838-aea5-852875d2354f", "id": "CVE-2025-14550", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 4.0.post12+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] }, { "bom-ref": "urn:uuid:5c143656-16f4-5605-bf2f-17b8c618955e", "id": "CVE-2025-48432", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-48432 affects version 4.0.post12+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] }, { "bom-ref": "urn:uuid:77149f0e-c413-50c5-a2d6-891402bfb198", "id": "CVE-2025-57833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-57833 affects version 4.0.post12+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] }, { "bom-ref": "urn:uuid:301360a5-e204-5bec-8643-aa7a1183a015", "id": "CVE-2025-64458", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-64458 affects version 4.0.post12+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] }, { "bom-ref": "urn:uuid:9fa9eee6-0393-5bf1-bc93-5313474205d3", "id": "CVE-2025-64459", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-64459 affects version 4.0.post12+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] }, { "bom-ref": "urn:uuid:f0f64a80-7eda-5196-95e4-dd536624d84d", "id": "CVE-2025-64460", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 4.0.post12+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] }, { "bom-ref": "urn:uuid:b475458c-68c8-55ff-8a07-ebf28238068a", "id": "CVE-2026-1207", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 4.0.post12+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] }, { "bom-ref": "urn:uuid:b64ed6fc-c435-5b6c-bff0-661435b8c259", "id": "CVE-2026-1285", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1285 affects version 4.0.post12+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] }, { "bom-ref": "urn:uuid:382a2e9b-d3c9-5718-bd4b-d0ea8dc4fc5b", "id": "CVE-2026-1287", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1287 affects version 4.0.post12+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] }, { "bom-ref": "urn:uuid:2d1d2a5e-0d47-5ea3-a90f-347ed521c729", "id": "CVE-2026-1312", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 4.0.post12+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] }, { "bom-ref": "urn:uuid:b0067efe-35c8-528f-ab02-6dbf365e2c5c", "id": "CVE-2026-48587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48587 affects version 4.0.post12+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] }, { "bom-ref": "urn:uuid:5c31b34e-a555-5477-8975-3b72d7e69210", "id": "CVE-2026-48588", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48588 affects version 4.0.post12+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] }, { "bom-ref": "urn:uuid:d887d5e1-279a-5d9c-9eaa-0e707e58d3c2", "id": "CVE-2026-53877", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53877 affects version 4.0.post12+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] }, { "bom-ref": "urn:uuid:a2a4101d-097b-5040-842b-d76cfaa5fafa", "id": "CVE-2026-53878", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 4.0.post12+tuxcare of django. not_affected \u2014 Django 4.0 is not affected by CVE-2026-53878. The vulnerable component DomainNameValidator does not exist in this version (it was introduced in Django 5.1). All domain validation in Django 4.0 is performed by EmailValidator, URLValidator, and _simple_domain_name_validator, which properly reject domain names containing newline characters through various mechanisms (regex anchors, explicit unsafe..." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] }, { "bom-ref": "urn:uuid:31e7a3f1-0c0a-59f7-9afb-65a91da1d6ca", "id": "CVE-2026-6873", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6873 affects version 4.0.post12+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] }, { "bom-ref": "urn:uuid:a29b4030-9d41-50c1-b2e8-ce9f919bc20e", "id": "CVE-2026-8404", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-8404 affects version 4.0.post12+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] } ], "dependencies": [ { "ref": "pkg:pypi/django@4.0.post12+tuxcare" } ] }