{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:7995311b-ad14-59c3-9207-df8ee04c5a18", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@4.0.post21+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@4.0.post21+tuxcare", "version": "4.0.post21+tuxcare", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:ff4c46e9-e656-5d08-9845-c64971108ae0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45115 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:716969d5-0d80-5f69-a589-fab4a279bb67", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45116 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:1b1f9c83-68e7-5aa2-b633-09c116ae926b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45452 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:88875be6-30ab-5745-8039-615531c21e30", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22818 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:d733d6c8-fb94-59bd-a873-7677472d748a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-23833 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:8c79f943-3356-533e-be62-491e34049b81", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28346 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:4a653085-151b-5cd9-8528-8ee6d0db9488", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28347 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:ceda23ee-8d30-5c65-90f9-9cfa1da57895", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-34265 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:e312c0ae-e505-59f5-a366-693a0980beb9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-36359 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:a1567856-4a11-540a-a2b5-b086d0162774", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41323 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:2328db3a-c04b-5858-adf3-64ce49f4dbc9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-23969 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:9f7d4c07-abd0-56e1-bdea-5880c1e949bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-24580 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:cc9c8d49-c8cd-5fbf-9251-9745a666448d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-31047 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:cac1550c-f67d-58ba-9f3d-3419db7d1a56", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-36053 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:b43c80ac-e734-5d31-9260-d0a87297b6e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-43665 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:94322b33-c1ac-5651-b9c1-018c41a4fff6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-46695 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:04306230-6ded-5bb7-88e9-b0549aa1ba85", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:9b1c8a31-4a09-5693-9d07-a02f4c0f4862", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:d4aa596f-ea3a-5727-bf8a-bd33e43039f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:6f97e209-32e0-596b-8d8d-0506081aafff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:6965cb23-f91a-582a-80e9-13ad54e2c1d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:709199eb-fb2e-516c-9c85-a04d2a09ca26", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:35e2780c-7897-5548-a6da-9f9fd0077ae7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:51ceef9c-a3c5-54f5-8fe0-7d549390c82b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:a4991b08-c491-5a6a-b2da-a8043dc3ce06", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:2a32bf69-2c2a-5c14-99a5-7e88bc5f380b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:4fc15bf4-d8b4-530c-801c-45726760ebaa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:0f4915c5-a162-5198-bbd9-08c384b0e068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:056c9377-d5a1-503d-bd05-aaba3c55360d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:a1060525-f4f7-55fe-8c5d-90561a32d2d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:a67aaf27-ba70-50fd-bd72-04f766db0407", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:0047e92b-e3e1-58bd-8092-800788fca051", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53877 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:0b67a8fd-a935-5854-bb22-1b5001bbdcf9", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 4.0.post21+tuxcare of django. not_affected \u2014 Django 4.0 is not affected by CVE-2026-53878. The vulnerable component DomainNameValidator does not exist in this version (it was introduced in Django 5.1). All domain validation in Django 4.0 is performed by EmailValidator, URLValidator, and _simple_domain_name_validator, which properly reject domain names containing newline characters through various mechanisms (regex anchors, explicit unsafe...", "justification": "protected_at_runtime" } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:5a68dfdd-7697-5e76-b494-fb8e5a44f405", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6873 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:2add7bc0-98b8-5dbc-89de-8d71d33e14f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 4.0.post21+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ] }