{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:413fda14-9eb7-5232-bc77-d8157678d515", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@4.0.post24+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@4.0.post24+tuxcare", "version": "4.0.post24+tuxcare", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:301c50dc-860f-545e-a842-139525d37b55", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45115 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:f07ff56d-a964-585f-84d5-86b3955840d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45116 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:5fa7ea5a-2aef-5055-9c12-2cc445d3a9ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45452 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:ccf84c22-a509-5686-8020-7ed65c040a0e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22818 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:747f50f4-6f06-5a8e-852a-a2c850c61bd6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-23833 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:583a66b8-4af9-5fea-b8af-3e9f63839b20", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28346 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:3a2cff39-a794-5ed4-846b-2db677d68a36", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28347 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:e2340c10-7441-590b-b8db-e6f6780224f0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-34265 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:126bf89d-352d-5d92-8498-53d8023fbdac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-36359 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:8b336a6a-1eeb-5afa-bef4-5825834ed495", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41323 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:27686d5b-6bb0-5e16-a634-111a2424806a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-23969 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:97e2e059-3032-5540-987e-fdb89b6af687", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-24580 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:0a0c48e5-3f60-5baa-9993-2dd04f806580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-31047 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:aa60e544-f87d-5b20-9c3d-f3b86fc8383f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-36053 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:ae1681e8-a4d7-5a1c-bb40-e511f7971cfa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-43665 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:0de163f6-6480-57a7-8d57-1f3824f33757", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-46695 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:356a3c6a-9f85-5db6-bc8e-81c7676f4359", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:0e5f3b2c-0679-57d7-80c9-8e30054c7e05", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:a8312e54-0005-574d-825a-00fa830ac134", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:846082e2-aea1-546e-ac92-38212c81a953", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:58e79cb6-d9ab-57fc-8653-edbd235a0098", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:c9b068e6-2c1b-5bc7-8878-acc9556748e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:e601f331-6074-549e-b88f-f3c45c9a82f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:d6ef68e9-703b-5b13-a877-29f5887409ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:f629897d-3054-5819-a270-b3453c31e22a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:c7e944d8-7291-5b41-b964-3785fa0c2ae0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:655ac469-6cbc-5351-b36c-0d5ec3d31ffc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:a05ae4b4-a7b4-5598-adce-996404a201ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:8d8810bb-1b86-5834-8ea0-44e991ceaa1a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:81e4e7d3-4c65-5c32-b6d0-3239e7279e11", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15307 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:ddbf47e3-ed98-5a28-97b6-b3d3d7ef7862", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15830 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:77e16cd1-ca14-5937-9b5f-4fc4f770eb6b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:ed494160-c298-5631-8cb1-85a6781dbb4a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:a3efa6e2-ed69-5b8c-ac48-b6264d726eba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:58065daf-8334-53df-85f0-5dc2cb3e61e9", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 4.0.post24+tuxcare of django. not_affected \u2014 Django 4.0 is not affected by CVE-2026-53878. The vulnerable component DomainNameValidator does not exist in this version (it was introduced in Django 5.1). All domain validation in Django 4.0 is performed by EmailValidator, URLValidator, and _simple_domain_name_validator, which properly reject domain names containing newline characters through various mechanisms (regex anchors, explicit unsafe...", "justification": "protected_at_runtime" } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:8b06150e-aa67-5aeb-9402-5928f845b041", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:c745d2a5-46f6-51bb-a6fd-f4af82914ddd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 4.0.post24+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ] }