{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:4139bb16-65d4-55ef-8536-e19536403d85", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@4.2.post12+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@4.2.post12+tuxcare", "version": "4.2.post12+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@4.2", "type": "library", "version": "4.2" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:d5fafd11-1c91-598c-acb9-fbda9227f066", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31047 affects version 4.2.post12+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:9ed0e26a-5c4e-5fa1-b2bc-962b4a095a86", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36053 affects version 4.2.post12+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:bc660e68-fd95-59b7-a3d2-66343f636ce9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 4.2.post12+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:d659157f-fe7a-5403-9d12-058f5560e6ea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-43665 affects version 4.2.post12+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:3f451a2a-5ce3-51c6-a498-9819cd443cf1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46695 affects version 4.2.post12+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:55250484-5af4-5a97-bf36-425a769e8c55", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-24680 affects version 4.2.post12+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:76b5f18a-8951-5182-9daa-31f4a52b67fe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-27351 affects version 4.2.post12+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:c6ca9cde-b493-59af-8850-7f9cd742a4fc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38875 affects version 4.2.post12+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:c70a78ba-71db-5ec7-98ee-6ec52b1f1a78", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39329 affects version 4.2.post12+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:10d0ebdc-03f8-54e7-9a29-8e6f2cd9b001", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39330 affects version 4.2.post12+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:63cdb1ae-dbff-5698-b3a1-1420d15d1888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39614 affects version 4.2.post12+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:859047bc-4565-5dfa-9a4f-087c228e87ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41989 affects version 4.2.post12+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:1d4800d7-4f07-5a32-ad0d-e3f48801aea5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41990 affects version 4.2.post12+tuxcare of django, and is fixed in 4.2.post18+tuxcare." } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:6dfea861-6df4-59e3-bbe4-53041c0edb76", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41991 affects version 4.2.post12+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:e8f41516-5831-5436-8d72-d0e1e786742a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-42005 affects version 4.2.post12+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:f6496364-97d1-56f1-bce4-3f4d1a96e634", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45230 affects version 4.2.post12+tuxcare of django, and is fixed in 4.2.post18+tuxcare." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:61b242e0-42d3-529b-b07a-f0292de4d3c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45231 affects version 4.2.post12+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:8c7df270-731f-5dd1-b655-5f8f806aad4a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53907 affects version 4.2.post12+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:d7cc43e6-5c20-5cff-a5e4-7caadb5f98cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53908 affects version 4.2.post12+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:4d0bc01c-e651-5d6f-bf9a-87e813fd11ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-56374 affects version 4.2.post12+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:6ce4e53d-d6fc-5514-9bf3-df8069808abd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 4.2.post12+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:648d5521-1ba4-5190-bbd4-d20cef18389b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 4.2.post12+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:e8d00692-c190-5a50-93fd-87e2d990330a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 4.2.post12+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:71048be1-38ab-5fb9-bd99-bd72d7522f60", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-26699 affects version 4.2.post12+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:2f9a2df0-33c2-5358-a041-f34b1f28d062", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32873 affects version 4.2.post12+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:3356c288-82ee-5fe7-995e-c8f78c462c91", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 4.2.post12+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:758a54c6-629e-5550-a5c5-2bda99a1d302", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 4.2.post12+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:8c0ce024-9c43-5fd5-833b-9714ac5a4636", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59681 is fixed in version 4.2.post12+tuxcare of django." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:78867335-5df2-5be3-bc85-4bd522c3aed4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59682 is fixed in version 4.2.post12+tuxcare of django." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:6680d845-913a-51e9-8bcf-90dc6d19deb6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 4.2.post12+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:1925ebff-3351-5739-ab0d-a90d0430fe63", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 4.2.post12+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:149e1306-a374-5bf9-a5af-8d734e93b982", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 4.2.post12+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:26716e47-3388-5658-8089-4dcacf5c232d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 4.2.post12+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:eb85f8fc-d7e2-5eb4-8fec-9555459a0ff3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 4.2.post12+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:51805d7b-1fdd-5e5d-af50-8594c7c4fdf0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 4.2.post12+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:06bcd46d-b482-55e2-8921-052b005f37dc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 4.2.post12+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:37f1c5e0-fa73-510a-abfe-50d5119f9df6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-15307 affects version 4.2.post12+tuxcare of django, and is fixed in 4.2.post14+tuxcare." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:e7cf64bf-e4b8-5a3b-a2fe-6706d453bc8b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-15830 affects version 4.2.post12+tuxcare of django, and is fixed in 4.2.post14+tuxcare." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:04909f89-65d6-5311-90d0-d1aabeae6c42", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25673 is fixed in version 4.2.post12+tuxcare of django." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:d1184354-5db1-5228-8279-86aaf3a9c859", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25674 is fixed in version 4.2.post12+tuxcare of django." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:70e7b845-7406-5ca9-a779-17af15e51c8a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33033 is fixed in version 4.2.post12+tuxcare of django." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:5dbb8275-25a1-5d32-aaec-e45dbae251cf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33034 is fixed in version 4.2.post12+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:b7aa72f1-007c-5c4b-8c52-0783dd2a534b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-3902 is fixed in version 4.2.post12+tuxcare of django." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:e5e44705-06a0-5c69-8fef-e453efe82396", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-4277 is fixed in version 4.2.post12+tuxcare of django." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:40d6af52-f9e3-540a-affd-068f9d04792f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-4292 is fixed in version 4.2.post12+tuxcare of django." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:2ac9649d-9e94-51f9-9249-694005bbaf7d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 4.2.post12+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:ec6c3e46-f512-5956-8276-2640afe3e458", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 4.2.post12+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:9eea3a7d-2899-509b-8ef1-73bc78433e47", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53877 affects version 4.2.post12+tuxcare of django, and is fixed in 4.2.post13+tuxcare." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:4ca9822b-b3e5-5ae7-9525-b11108dffa69", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 4.2.post12+tuxcare of django. not_affected \u2014 Django 4.2.0 is not affected by CVE-2026-53878. The vulnerable component `DomainNameValidator` does not exist in this version (it was introduced in Django 5.1). All existing domain validation mechanisms in Django 4.2.0 already prohibit newlines: URLValidator explicitly checks for newlines in `unsafe_chars`, EmailValidator uses regex that doesn't match newlines, and _simple_domain_name_validator...", "justification": "code_not_present" } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:46367860-9e49-506e-b0cb-3a3ba3680345", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6873 affects version 4.2.post12+tuxcare of django, and is fixed in 4.2.post13+tuxcare." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ], "bom-ref": "urn:uuid:8bb659b7-a53a-56fe-a24d-a78b4d26f81e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 4.2.post12+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@4.2.post12+tuxcare" } ] }