{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:6b74fcb8-29f1-5cd8-91e3-b51978f6bb0e", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:pypi/django@4.0.post7+tuxcare", "type": "library", "name": "django", "version": "4.0.post7+tuxcare", "purl": "pkg:pypi/django@4.0.post7+tuxcare" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:99e6ca18-10dc-536c-808d-ccb3df96690a", "id": "CVE-2021-45115", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45115 is fixed in version 4.0.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:6f6d1a60-4133-5014-8080-e3a6602654ae", "id": "CVE-2021-45116", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45116 is fixed in version 4.0.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:fdac9c21-aa2e-56e5-be69-e26ca36799a5", "id": "CVE-2021-45452", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45452 is fixed in version 4.0.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:bd4d70c7-40a9-5aba-98f7-8265c288fe3b", "id": "CVE-2022-22818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22818 is fixed in version 4.0.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:9b4e3768-a181-5d54-a81a-48cc7905f83f", "id": "CVE-2022-23833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-23833 is fixed in version 4.0.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:af616f1c-3dab-5926-96ea-74f41b8547a9", "id": "CVE-2022-28346", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28346 is fixed in version 4.0.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:de8f5d88-e5d2-581a-836b-7973780839fd", "id": "CVE-2022-28347", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28347 is fixed in version 4.0.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:d929f4a0-1ef4-521a-9bdd-080e1687d52d", "id": "CVE-2022-34265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-34265 is fixed in version 4.0.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:53124069-40ae-516e-afd8-816864b50fa3", "id": "CVE-2022-36359", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-36359 is fixed in version 4.0.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:0b30ffbe-05a5-5fe5-a010-1374dc8c7644", "id": "CVE-2022-41323", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41323 is fixed in version 4.0.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:4dbb9c26-6e6c-5509-b395-7489ba6aff95", "id": "CVE-2023-23969", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-23969 is fixed in version 4.0.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:3ce1becd-ad4b-525b-89e4-46e49d70e9db", "id": "CVE-2023-24580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-24580 is fixed in version 4.0.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:fdc7adb7-650c-598b-a52d-ee345366611e", "id": "CVE-2023-31047", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31047 affects version 4.0.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:26596018-5c11-5d38-b27d-d0f684a25647", "id": "CVE-2023-36053", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36053 affects version 4.0.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:0ba521a0-5a1e-5eb7-9598-4354b215c333", "id": "CVE-2023-43665", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-43665 is fixed in version 4.0.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:40f04ae8-bd4f-513c-8021-8df2e86c6581", "id": "CVE-2023-46695", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46695 affects version 4.0.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:f53824a3-970d-50ef-8dda-1aaecaaf3a84", "id": "CVE-2024-45231", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45231 affects version 4.0.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:67044590-48f4-59ad-aabe-0df89add202c", "id": "CVE-2025-13372", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13372 affects version 4.0.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:d94fb8ca-94e2-5255-8fe1-6d93ab521e4d", "id": "CVE-2025-13473", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13473 affects version 4.0.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:22a8676e-2031-5592-90d4-abf5ebf7747e", "id": "CVE-2025-14550", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-14550 affects version 4.0.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:fe924d02-0c00-5840-8f89-ff0e2b892267", "id": "CVE-2025-48432", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-48432 affects version 4.0.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:d7974ef1-5d60-58da-80f7-93fa281ede04", "id": "CVE-2025-57833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-57833 affects version 4.0.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:0dbb4beb-fd65-517f-a913-991ce0573560", "id": "CVE-2025-64458", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-64458 affects version 4.0.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:ffcfe6bc-7301-5977-9f12-690fc7ee4471", "id": "CVE-2025-64459", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-64459 affects version 4.0.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:eb923819-e2bb-5fe0-9566-938ab1bb2ffd", "id": "CVE-2025-64460", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-64460 affects version 4.0.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:dbcccce4-0c71-511b-a00c-45a331a1c142", "id": "CVE-2026-1207", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1207 affects version 4.0.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:9bf7a55e-6ec2-50ec-a6d4-0fb58bec06bc", "id": "CVE-2026-1285", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1285 affects version 4.0.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:98ec29cb-44df-5040-b611-2e207604a73f", "id": "CVE-2026-1287", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1287 affects version 4.0.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:1cead4b9-d148-56c9-9e3b-00ee742f5da6", "id": "CVE-2026-1312", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1312 affects version 4.0.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:c9db77c5-9d74-5743-8540-0bd7b3b306a4", "id": "CVE-2026-48587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48587 affects version 4.0.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:1df1b076-b41c-5e09-8807-04c9acb82928", "id": "CVE-2026-48588", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48588 affects version 4.0.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:7a748311-961e-58ff-813c-44670aff489e", "id": "CVE-2026-53877", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53877 affects version 4.0.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:435ef211-0c85-51df-89f8-4d377da94ba8", "id": "CVE-2026-53878", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 4.0.post7+tuxcare of django. not_affected \u2014 Django 4.0 is not affected by CVE-2026-53878. The vulnerable component DomainNameValidator does not exist in this version (it was introduced in Django 5.1). All domain validation in Django 4.0 is performed by EmailValidator, URLValidator, and _simple_domain_name_validator, which properly reject domain names containing newline characters through various mechanisms (regex anchors, explicit unsafe..." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:006678a7-9805-50b7-9a08-b08dcaf71c11", "id": "CVE-2026-6873", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6873 affects version 4.0.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] }, { "bom-ref": "urn:uuid:fe1db326-a132-5560-8332-02efe2fd18ff", "id": "CVE-2026-8404", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-8404 affects version 4.0.post7+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] } ], "dependencies": [ { "ref": "pkg:pypi/django@4.0.post7+tuxcare" } ] }