{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:f62789ab-416d-5efd-8b49-aa172e226276", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@4.2.post18+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@4.2.post18+tuxcare", "version": "4.2.post18+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@4.2", "type": "library", "version": "4.2" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:e2b6fea7-4156-5cc3-a6ee-42d73d431040", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-31047 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:69f50c30-7972-5921-bc72-43ee7372eccb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-36053 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:ed5f47d7-2182-5f72-841a-ae5cd0d92bd0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-41164 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:ae2d173b-e0f4-51af-8426-516c6df4577a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-43665 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:266dcc0f-f2de-5188-bdea-2668426ca7f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-46695 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:26ddd1cd-6585-57e4-ab74-6090e7eec773", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24680 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:ab6dbdb3-83d3-5463-b06f-746c60c79c84", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:4106b635-d932-571c-8587-2f0ee465445f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:2e0815e7-b969-5963-95fe-87c9fc831da8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:4d01a953-2a87-516f-8cdd-a80620af609d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:307e60d7-5dfc-5245-b1c1-8daf4c4dcb9a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:1400b308-c570-59eb-8e70-61f35c203aaa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41989 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:a0d1d804-4c7b-5d7f-a304-973960302700", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41990 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:53096558-9ddc-54a9-8a7c-b20bfe59e7b5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41991 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:b9de5b19-e6d9-5ea6-af91-bb31a9c82bfe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-42005 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:b6430338-bd92-5d85-9779-4065feb93196", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45230 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:310796dd-e471-551f-8f15-af0796966397", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:c1c5f7df-39b7-504b-adae-dbc30d549971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53907 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:8a171782-d9a8-55be-bf80-d81c48bdbb81", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:ecf2aaff-f038-574d-9db8-ceca2413cfa4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56374 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:0758f9c4-35bd-573e-9acf-f5f3a5051fa9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:52e932b5-217b-5f16-8549-48354388f23e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:c63ab877-0336-5ec8-8fd5-33f32dc0022b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:5c2c6f97-2124-5484-9704-a4bbc84618e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-26699 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:ab8ced77-f686-51c5-864d-dd17be98dbe3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32873 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:3684d969-d3f5-5e9f-b8bd-4ad904128186", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:2cfe2187-5e1c-52d4-bc56-d0e82bcf55fe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:b5e99b9a-a100-51a7-adc0-f8aab1d049a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59681 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:5a2fff34-38a8-5265-a2ff-b89aeba5dc7a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59682 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:691aa344-a826-577b-8f26-5e1c8dfe4de9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:c53c1e6e-78cf-50a4-bcdc-8d7372e0eded", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:be50c0c7-22ed-5ac3-9a28-0e4c6408b9c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:0b061ba9-fd0a-5d44-9545-ad822e0a9e7f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:a9297fe0-e304-56e1-987e-91081fc3ce65", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:265b9275-6920-59e7-96bd-52d29c48ff0e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:27f1127a-d4f8-5b1d-8bfb-b8a0d59470fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:d5be023f-301e-58bf-855c-3908d2b5ee86", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15307 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:fef16624-7180-5313-a679-284532a292ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15830 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:f61560f4-ed8c-50df-9254-547bf484c5f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25673 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:1242b1a9-f21c-5e35-a17c-a559f2d4a3c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25674 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:8b88bd54-4c57-5771-bbdc-be150ab6bf57", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33033 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:6c8f1e32-829d-5a89-ad6e-85f91aca6afd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33034 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:1558ddd8-4e44-5c17-a4f7-fc887e7f1264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-3902 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:399ea983-527b-52b6-8c23-4c6ce537fcc2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-4277 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:914dd990-7693-5598-adac-3a7a557cefb9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-4292 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:dc1a639f-ad36-526e-bb2c-6b8a013fdcc4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:367e55d0-7f1c-5fb9-9fec-993a1a5cea4e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:a6d97ed3-9275-5473-864a-c84372d101aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:c6d96cb7-de6f-5446-b5d8-6325ef18fce7", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 4.2.post18+tuxcare of django. not_affected \u2014 Django 4.2.0 is not affected by CVE-2026-53878. The vulnerable component `DomainNameValidator` does not exist in this version (it was introduced in Django 5.1). All existing domain validation mechanisms in Django 4.2.0 already prohibit newlines: URLValidator explicitly checks for newlines in `unsafe_chars`, EmailValidator uses regex that doesn't match newlines, and _simple_domain_name_validator...", "justification": "code_not_present" } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:4a500677-e01e-5006-af8b-2dd7403d1583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 4.2.post18+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ], "bom-ref": "urn:uuid:9276fa9c-4d39-5f38-83f1-b3e05171c6e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 4.2.post18+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@4.2.post18+tuxcare" } ] }