{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a741fcba-438c-5fe3-8f51-e861995b9219", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@4.2.post13+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@4.2.post13+tuxcare", "version": "4.2.post13+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@4.2", "type": "library", "version": "4.2" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:1df17700-79da-5c8f-b94b-ee61a88dfd2e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31047 affects version 4.2.post13+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:9e2dcdfc-0cc2-54c5-b213-ec5eb65c6643", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36053 affects version 4.2.post13+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:f6c853a7-08c5-504a-a380-cddbf617bd14", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 4.2.post13+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:3cdcb681-5a3a-5f38-9884-4a3e643a5f69", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-43665 affects version 4.2.post13+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:ddac9ba6-adc0-5d84-abaa-919507647e71", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46695 affects version 4.2.post13+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:76feb98b-c086-5f5d-8c7e-cc43bebf51b8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-24680 affects version 4.2.post13+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:f7a622b2-0187-5d06-9d6e-303c14b58fd9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-27351 affects version 4.2.post13+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:ef3e356e-5def-5a82-ba86-ef6e35186429", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38875 affects version 4.2.post13+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:a8a75891-f419-510c-8183-497fa0f73df6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39329 affects version 4.2.post13+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:c7f195b3-65ca-5197-9a42-6ffb331296a7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39330 affects version 4.2.post13+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:61a9a206-c922-5220-9bf0-3bf113d84570", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39614 affects version 4.2.post13+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:20202f0f-97b5-5936-89bb-0b73455aab89", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41989 affects version 4.2.post13+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:467413a3-380e-5bd9-9555-6ee44aaef030", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41990 affects version 4.2.post13+tuxcare of django, and is fixed in 4.2.post18+tuxcare." } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:31d532c7-351c-5745-a220-e58bc5946aa5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41991 affects version 4.2.post13+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:7b83a1d1-1f76-5bf6-96be-81649b24dc20", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-42005 affects version 4.2.post13+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:cb87b681-3271-5100-a7b3-d6fe170724ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45230 affects version 4.2.post13+tuxcare of django, and is fixed in 4.2.post18+tuxcare." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:3b42f859-2229-51f0-a0ee-2e8855310933", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45231 affects version 4.2.post13+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:e412b30e-7f6e-51c8-bcb8-9f8862fbafeb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53907 affects version 4.2.post13+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:78a7fcb6-97f7-5825-982a-c92543726dd1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53908 affects version 4.2.post13+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:e09c58c9-535a-518a-9a5d-ca6f5e8fbda4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-56374 affects version 4.2.post13+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:3f8bda75-19b0-5f75-8d08-4f4d6e61efed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 4.2.post13+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:ac78e610-c43b-57f3-8d9c-785d0c4b02b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 4.2.post13+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:367fb428-a866-5c6f-8436-3a30c5b0716d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 4.2.post13+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:dda01975-9660-50d3-a660-423f3a64a855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-26699 affects version 4.2.post13+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:c7ae6bca-a0a4-5a0b-828a-ecbe9d7fa24b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32873 affects version 4.2.post13+tuxcare of django, and is fixed in 4.2.post17+tuxcare." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:196e7e6d-2d57-5e90-9b3a-cd64c28b1700", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 4.2.post13+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:b5866346-04e7-54c8-bc40-83697408f68d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 4.2.post13+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:61f54ad5-491f-5ee9-bf92-d92b118f3488", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59681 is fixed in version 4.2.post13+tuxcare of django." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:20df02eb-bed2-5a4e-8ea1-280cafd25ee1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59682 is fixed in version 4.2.post13+tuxcare of django." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:a8748e9f-5e98-598a-b6c9-80da59e7825a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 4.2.post13+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:22c62534-d896-53d3-90c1-ab141f9279c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 4.2.post13+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:6d71a5b7-f444-53d7-9563-65c16deaed02", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 4.2.post13+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:0a482753-c533-5fd8-9aab-336c958320df", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 4.2.post13+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:e85971ea-97a1-502d-a06c-52cc3b9b71b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 4.2.post13+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:fa3a02c7-639d-5d58-887a-67f87d0f7d11", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 4.2.post13+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:8538ad69-4d40-5701-863f-7c65a33748a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 4.2.post13+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:d31b8a75-8fb3-5b12-bd20-dc857b9f3932", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-15307 affects version 4.2.post13+tuxcare of django, and is fixed in 4.2.post14+tuxcare." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:d77a822e-b9e5-5869-8ff6-f66a3762824f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-15830 affects version 4.2.post13+tuxcare of django, and is fixed in 4.2.post14+tuxcare." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:03a214b3-afe2-55f8-84ce-5edac9fadf41", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25673 is fixed in version 4.2.post13+tuxcare of django." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:5148f680-d6ca-5aa2-b779-d62653fe0cf4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25674 is fixed in version 4.2.post13+tuxcare of django." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:a005f5e1-fe58-576d-802b-0184e9bda85d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33033 is fixed in version 4.2.post13+tuxcare of django." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:4dc8e4f9-2b65-5793-b48e-e903c2e9425c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33034 is fixed in version 4.2.post13+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:c0c6d7c6-a9e9-5fab-b722-dafc67c2cd07", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-3902 is fixed in version 4.2.post13+tuxcare of django." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:f9cfc9df-7038-593b-bbd4-52f56b86c840", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-4277 is fixed in version 4.2.post13+tuxcare of django." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:4758596b-4729-57d3-87ca-0924056c20b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-4292 is fixed in version 4.2.post13+tuxcare of django." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:93358e2c-dac9-52a3-b48a-aee87a9ac1fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 4.2.post13+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:1f710898-4932-5591-b3fc-c01b8d6069d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 4.2.post13+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:3598dd22-195e-5be3-84fd-2f572c5b36d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 4.2.post13+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:0e55717c-c7c6-512f-9beb-2c7eb139dee2", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 4.2.post13+tuxcare of django. not_affected \u2014 Django 4.2.0 is not affected by CVE-2026-53878. The vulnerable component `DomainNameValidator` does not exist in this version (it was introduced in Django 5.1). All existing domain validation mechanisms in Django 4.2.0 already prohibit newlines: URLValidator explicitly checks for newlines in `unsafe_chars`, EmailValidator uses regex that doesn't match newlines, and _simple_domain_name_validator...", "justification": "code_not_present" } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:366754bc-93fb-50e9-a346-0109f9fecf59", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 4.2.post13+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ], "bom-ref": "urn:uuid:5243b966-21ae-506c-977a-cf8bc0a710d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 4.2.post13+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@4.2.post13+tuxcare" } ] }