{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:af5a6cb8-3da7-56a7-b5dd-4aff49308de2", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@4.0.post25+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@4.0.post25+tuxcare", "version": "4.0.post25+tuxcare", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:f2282569-92fc-5c35-bd3c-372a1cbbba54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45115 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:3fd8e154-96b9-536a-872b-66445dcf17b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45116 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:f642b999-78de-56d0-9aa5-b0ac16255e6d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45452 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:75ea487b-3bcf-59c6-82c2-3ac6c03a54e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22818 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:21b44e93-b038-5973-89bd-dfbb6d35f419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-23833 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:c7d8c759-dea6-59fa-86eb-c68cb276205b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28346 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:4e45f326-2abc-5d52-8ffe-196be455771f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28347 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:09cc3566-0282-583b-a386-a7d0fbfd932c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-34265 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:cc6e3116-2fe1-5e2b-ab73-a5ede1cff80e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-36359 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:bd4aa494-ed21-5faa-b749-45ad8a2aa46a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41323 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:a9530cc3-2059-5ea4-91ca-49b2dfecb2f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-23969 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:8fd4fe89-8efd-59b0-9b29-4e9f2e395742", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-24580 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:7ab9d4af-6824-58fd-b25d-1317526169c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-31047 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:f4a95775-88c1-5001-9d27-8a71c6856183", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-36053 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:a6060de6-e6ca-5d6c-9325-59f2fefbdc89", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-43665 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:2f0511e5-97b0-5de8-8e0f-f6804ee0d0d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-46695 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:9c4ffc3f-7002-5601-a75d-35178b1e5df8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:cfa32fcb-3328-5838-b67e-e5ea31649afe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:ec921328-9594-5473-bb52-2cb7957e1eb3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:1d5b421d-a0e2-54bd-a95a-f30ccf998b6f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:159c3086-a8bc-5ac8-ba05-4dc491872e95", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:711ef41e-84d0-5b88-a053-4306d5eff9fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:bc05baeb-4278-59c1-8328-0ea0a6b40c43", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:eb7e9bc2-be32-5af5-9136-0a1591beb453", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:fa23a147-32ed-5185-ac8d-842cdd53e103", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:087110f8-0810-556c-9076-aed8227af5dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:00e62622-1b6f-5995-9b30-9987f883b456", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:c1d095c0-5fb2-52a9-a008-d95bb9aa5255", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:2ed4716e-465a-5343-b95a-2d0ab6c2949c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:a3feb88e-0ba6-5473-9c37-b253c690ed7d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15307 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:782a6010-5305-5ab0-b747-88adf0e6021b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15830 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:1fd670e1-cbc3-57dd-a783-04bc92242a79", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:47daaa3c-db9f-51a3-a471-8f74a4003484", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:4cb4178a-719a-5bbe-821d-f94d454c4b12", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:7b7c2498-84c4-5306-a04d-12c7acebccd1", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 4.0.post25+tuxcare of django. not_affected \u2014 Django 4.0 is not affected by CVE-2026-53878. The vulnerable component DomainNameValidator does not exist in this version (it was introduced in Django 5.1). All domain validation in Django 4.0 is performed by EmailValidator, URLValidator, and _simple_domain_name_validator, which properly reject domain names containing newline characters through various mechanisms (regex anchors, explicit unsafe...", "justification": "protected_at_runtime" } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:616fbb89-13da-5075-b5cb-b655eda5c405", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:e3f06a4c-4af5-54c7-ac47-7957177579a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 4.0.post25+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ] }