{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a5f5a086-d05a-56af-88aa-85d94f6f8583", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:pypi/django@4.0.post11+tuxcare", "type": "library", "name": "django", "version": "4.0.post11+tuxcare", "purl": "pkg:pypi/django@4.0.post11+tuxcare" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:a6fe02b5-40f4-541c-926e-765533994fc7", "id": "CVE-2021-45115", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45115 is fixed in version 4.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:5875ceff-bbb9-5000-9b6c-fa9305cf187d", "id": "CVE-2021-45116", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45116 is fixed in version 4.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:27ef0e3d-6ea2-541d-afd1-a56180d8549c", "id": "CVE-2021-45452", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45452 is fixed in version 4.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:67cd6f89-ef36-51cf-9922-9595be95460a", "id": "CVE-2022-22818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22818 is fixed in version 4.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:c9b3789a-c729-57bd-88f0-b8f3fe5c7d76", "id": "CVE-2022-23833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-23833 is fixed in version 4.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:d19f0036-a664-5499-a475-aa6fbc9baf0b", "id": "CVE-2022-28346", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28346 is fixed in version 4.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:2ceedc29-4866-50c5-b0ef-8d28044abde9", "id": "CVE-2022-28347", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28347 is fixed in version 4.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:227489e9-e1ab-57d9-8793-07efb721454b", "id": "CVE-2022-34265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-34265 is fixed in version 4.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:8f2b4135-db28-58cc-a0ef-46ebb7828b4c", "id": "CVE-2022-36359", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-36359 is fixed in version 4.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:5de2a018-b419-5d52-ae9f-4fe6b02800d5", "id": "CVE-2022-41323", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41323 is fixed in version 4.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:60689987-2c02-59b8-9313-6190ac4ee106", "id": "CVE-2023-23969", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-23969 is fixed in version 4.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:fd0b98b1-59ac-5001-8796-630a3d17b68b", "id": "CVE-2023-24580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-24580 is fixed in version 4.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:0bdea148-957f-58f7-925a-c09e00aad36e", "id": "CVE-2023-31047", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-31047 is fixed in version 4.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:d495b449-19e5-561d-9307-95703e6fd5f0", "id": "CVE-2023-36053", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-36053 is fixed in version 4.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:3b1eaf53-78e7-5155-abd0-433aa25261b0", "id": "CVE-2023-43665", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-43665 is fixed in version 4.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:4483b9bd-00b0-5fb6-b1d3-b7e32a7b88d2", "id": "CVE-2023-46695", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46695 affects version 4.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:13ed32ba-af6d-52ec-beb0-1eb9b6ba52c0", "id": "CVE-2024-45231", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45231 affects version 4.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:7652c44a-4afb-5f53-a1bf-c3b83af05d90", "id": "CVE-2025-13372", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13372 affects version 4.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:c8bd1180-c565-5c0c-8c2f-8d83394cf420", "id": "CVE-2025-13473", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13473 affects version 4.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:f55a3192-f314-59ee-9f8f-90092c71ce56", "id": "CVE-2025-14550", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-14550 affects version 4.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:9e9da647-f29c-51a7-b97c-fab6b85df4d1", "id": "CVE-2025-48432", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-48432 affects version 4.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:ce833f44-5c4b-5a17-8e75-5cba309f7745", "id": "CVE-2025-57833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-57833 affects version 4.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:baf7b92c-a1f8-5023-bbb7-055fff751459", "id": "CVE-2025-64458", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-64458 affects version 4.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:bbef6451-c3db-515d-a983-26724fecfcbf", "id": "CVE-2025-64459", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-64459 affects version 4.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:46cebbcb-f05e-5745-809b-681484abfd20", "id": "CVE-2025-64460", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 4.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:db3b965e-88e3-5d33-bd41-01fde151c0fe", "id": "CVE-2026-1207", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 4.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:615f8fe5-4557-5b98-89cb-de774a5500db", "id": "CVE-2026-1285", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1285 affects version 4.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:fadef02c-2b1f-5a2e-8d61-7502c61fc182", "id": "CVE-2026-1287", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1287 affects version 4.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:f319a48a-e5c7-5c16-884d-e8e419dd05ed", "id": "CVE-2026-1312", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1312 affects version 4.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:fd9564f0-a383-5cfb-8957-e2a1087dae7d", "id": "CVE-2026-48587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48587 affects version 4.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:c08756e1-0541-5686-b898-d5d691d8ce8c", "id": "CVE-2026-48588", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48588 affects version 4.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:bf38b24d-4efe-5384-bbe3-9df9b4e5ad17", "id": "CVE-2026-53877", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53877 affects version 4.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:c47f7a31-9126-57b1-8554-476c6eb40d32", "id": "CVE-2026-53878", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 4.0.post11+tuxcare of django. not_affected \u2014 Django 4.0 is not affected by CVE-2026-53878. The vulnerable component DomainNameValidator does not exist in this version (it was introduced in Django 5.1). All domain validation in Django 4.0 is performed by EmailValidator, URLValidator, and _simple_domain_name_validator, which properly reject domain names containing newline characters through various mechanisms (regex anchors, explicit unsafe..." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:b5e7ceef-53bf-5993-bed7-2f2067f9551c", "id": "CVE-2026-6873", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6873 affects version 4.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] }, { "bom-ref": "urn:uuid:86dfd485-2fcc-5ce0-9fb6-480785451995", "id": "CVE-2026-8404", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-8404 affects version 4.0.post11+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] } ], "dependencies": [ { "ref": "pkg:pypi/django@4.0.post11+tuxcare" } ] }