{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:84dfc6d5-9032-52e7-baa9-4972c0f3563e", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@4.0.post20+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@4.0.post20+tuxcare", "version": "4.0.post20+tuxcare", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:47622af5-45e0-5cc6-8011-cbfcbdc3e91e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45115 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:c503509b-da0a-5d43-a141-2f442f4a98ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45116 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:376e2d79-5fe7-5526-ac4d-feb992febc8c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45452 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:c1452e42-4bf6-5b43-b25e-1909aaf47b6e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22818 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:0d0703d0-a176-5692-a2fd-78419420a12a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-23833 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:ef148c55-38d4-5b62-81ae-870e1fcf3335", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28346 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:fbcb8c19-f8f1-5c64-bb3c-152499fc2475", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28347 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:3425f45f-2029-512a-bd6a-4c4ddd9d95f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-34265 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:62a0e3c0-2436-5917-8121-2f5a78bc5385", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-36359 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:61ea90b1-d28a-530e-b879-08634776a7d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41323 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:116ac411-5da8-57e1-bbc2-1107fb62b229", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-23969 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:e2d83655-8ad7-5c4b-b0b9-957a98e5aabc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-24580 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:ca5bc7eb-58f6-5293-986d-99f134b7a0b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-31047 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:ea9c5e3d-2f26-5e44-9936-a292f6f78789", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-36053 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:32faf25d-fa09-5640-90b4-50318b35b780", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-43665 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:7fb2f718-adfe-522a-ba9c-202d248320cf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-46695 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:53a6d81c-5f76-50b4-b97c-980b05270a12", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:8b81c7e3-6345-55b8-9304-23b657e34f5e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:19ff1990-9320-57b5-8a94-accd95443b2e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:ea2a92d3-15c5-5b28-84e7-731bacecec51", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:6daf6390-7702-5f93-855f-91853e1eda22", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:60041499-47c0-5327-852c-f8895741236b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-57833 affects version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:76d166eb-ec08-5af1-ae4a-8ddf9638aeb3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:c4a36ca6-e6eb-5d99-91f5-6eaaf1edc5a2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:4c923ec5-079c-53ad-b347-55516f31723e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:5571db48-36b8-577a-8396-743692426407", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:b470a00a-a2b6-57b6-8134-db306c592bd1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:3107d36c-0f84-504e-87b6-ee2b7c64a525", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:202c92ca-945b-5358-a155-47cd3bf3cc04", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:b11c68e2-114e-53aa-b0dc-ff2f0989d0d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:e908ae76-5c08-5f5e-b54b-6a4ce195f5c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:8be4f9c2-11d1-5cc0-b386-76cf58f6c943", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53877 affects version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:99a5c0f6-d63c-5e61-9e5a-4a788acd2b78", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 4.0.post20+tuxcare of django. not_affected \u2014 Django 4.0 is not affected by CVE-2026-53878. The vulnerable component DomainNameValidator does not exist in this version (it was introduced in Django 5.1). All domain validation in Django 4.0 is performed by EmailValidator, URLValidator, and _simple_domain_name_validator, which properly reject domain names containing newline characters through various mechanisms (regex anchors, explicit unsafe...", "justification": "protected_at_runtime" } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:7dda0f31-5374-5898-a407-427975e18eb7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6873 affects version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:58133ee8-50aa-5523-a988-40b0a086009e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 4.0.post20+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ] }