{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:044f7b25-f067-5cbc-894d-11a573e0bfc7", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:pypi/django@4.0.post8+tuxcare", "type": "library", "name": "django", "version": "4.0.post8+tuxcare", "purl": "pkg:pypi/django@4.0.post8+tuxcare" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:23ca51f5-c9fc-5fe1-83c0-d77fb40205d2", "id": "CVE-2021-45115", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45115 is fixed in version 4.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:187a1200-3e58-5e6f-a769-ef37df7f32fc", "id": "CVE-2021-45116", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45116 is fixed in version 4.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:5fb821e4-fa69-5408-b92d-3329c3f56749", "id": "CVE-2021-45452", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45452 is fixed in version 4.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:aef1ce3b-1c25-55f6-ac21-f61247dbfa02", "id": "CVE-2022-22818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22818 is fixed in version 4.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:310975b7-232d-5e22-88e6-5f130f3418bd", "id": "CVE-2022-23833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-23833 is fixed in version 4.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:3ddc96bc-74e7-5792-aeea-b1f6eca7a2cd", "id": "CVE-2022-28346", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28346 is fixed in version 4.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:9c86905a-d7e9-5be9-b7ee-cefbaf79a32e", "id": "CVE-2022-28347", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28347 is fixed in version 4.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:1dccd6fb-4558-50e2-b25f-bb811e030f80", "id": "CVE-2022-34265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-34265 is fixed in version 4.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:540ede81-243d-5fc6-b891-9cf5b8d439fd", "id": "CVE-2022-36359", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-36359 is fixed in version 4.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:c10fc847-2c5e-5f46-9e60-f281355f49ea", "id": "CVE-2022-41323", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41323 is fixed in version 4.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:f484ed9d-5300-5392-b527-919bee1d154c", "id": "CVE-2023-23969", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-23969 is fixed in version 4.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:bf6ad932-c47e-5890-8f08-f0a64d576c3e", "id": "CVE-2023-24580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-24580 is fixed in version 4.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:ff35ab4a-7767-5a3e-baf4-f4375dcdd8ba", "id": "CVE-2023-31047", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-31047 is fixed in version 4.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:f502e9f3-d9cb-52b5-85d0-7b2990205d54", "id": "CVE-2023-36053", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36053 affects version 4.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:aade7081-1d4c-50be-ad3d-5ca5bb21faca", "id": "CVE-2023-43665", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-43665 is fixed in version 4.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:8f1ac53c-b254-53b4-959a-308979b7ebf3", "id": "CVE-2023-46695", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46695 affects version 4.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:416aeb7e-83c0-52f3-8722-6da4aedbc511", "id": "CVE-2024-45231", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45231 affects version 4.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:dd331e9a-faf9-55f1-83a4-d6b7561f8d06", "id": "CVE-2025-13372", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13372 affects version 4.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:54504a86-bdbf-583b-b409-0ea1262ba33a", "id": "CVE-2025-13473", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13473 affects version 4.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:25c6c43f-e0be-5a27-b1c5-91ce6ee4d721", "id": "CVE-2025-14550", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-14550 affects version 4.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:79bf5673-e35e-5277-a19a-46516867f0db", "id": "CVE-2025-48432", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-48432 affects version 4.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:9c482e1c-c581-5987-89e7-951951d6c400", "id": "CVE-2025-57833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-57833 affects version 4.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:f43bee9b-6541-5376-9b84-6d18ee368158", "id": "CVE-2025-64458", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-64458 affects version 4.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:3d703f34-5efb-5ee2-8c1f-3e13e2a58647", "id": "CVE-2025-64459", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-64459 affects version 4.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:4556c2a9-dd8b-503d-ad12-72ded980fc79", "id": "CVE-2025-64460", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-64460 affects version 4.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:17ff6562-326d-50ed-8430-47560f8931d7", "id": "CVE-2026-1207", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1207 affects version 4.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:6a7fb32f-0df4-5177-b827-2ff631c45a94", "id": "CVE-2026-1285", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1285 affects version 4.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:8e8dc1a0-d2d1-5b60-af88-0979dc0071ef", "id": "CVE-2026-1287", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1287 affects version 4.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:f9bd52ea-a15c-557d-b3c1-f19e542e276b", "id": "CVE-2026-1312", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1312 affects version 4.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:e078601b-ef78-5d1a-ac78-8d88ea7c6292", "id": "CVE-2026-48587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48587 affects version 4.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:7697b6f1-dfb4-5824-a169-30a56fa3da31", "id": "CVE-2026-48588", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48588 affects version 4.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:0ad2322a-1c44-5dcc-9d4a-c43ccb0131fd", "id": "CVE-2026-53877", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53877 affects version 4.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:2ee2314b-91c2-5d28-ad18-2f4a3b32557d", "id": "CVE-2026-53878", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 4.0.post8+tuxcare of django. not_affected \u2014 Django 4.0 is not affected by CVE-2026-53878. The vulnerable component DomainNameValidator does not exist in this version (it was introduced in Django 5.1). All domain validation in Django 4.0 is performed by EmailValidator, URLValidator, and _simple_domain_name_validator, which properly reject domain names containing newline characters through various mechanisms (regex anchors, explicit unsafe..." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:63c6b852-9936-5807-9774-ea26de8a0e10", "id": "CVE-2026-6873", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6873 affects version 4.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] }, { "bom-ref": "urn:uuid:f8953072-e286-5c95-b015-2765e157ba73", "id": "CVE-2026-8404", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-8404 affects version 4.0.post8+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] } ], "dependencies": [ { "ref": "pkg:pypi/django@4.0.post8+tuxcare" } ] }