{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:92ebc7e3-7dce-55a4-affa-38ce77b5e40d", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@4.0.post23+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@4.0.post23+tuxcare", "version": "4.0.post23+tuxcare", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:f4ae8da7-2ef6-5c9f-9b6a-477bef336344", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45115 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:360e50f4-6a46-5312-9522-71e25f8439c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45116 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:b78a4c94-cdd6-5132-b85a-d81d9e5d4a24", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45452 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:c7161655-4a8e-55f5-bfaa-5922081187ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22818 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:c4525f1f-026f-585b-9c18-5eb981dcde0a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-23833 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:b03bb16c-5da4-5ea4-b746-d5fdb2df477f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28346 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:8c1f9305-032f-5973-b8b4-3472f5f01c83", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28347 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:199eacf1-e137-54b5-92da-46b70a16037c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-34265 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:d83639b6-e972-5dcf-8f98-9bc8978e22c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-36359 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:769a15e8-4a64-59f5-b165-5fdfaff6d391", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41323 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:3077a5c4-6f6a-5501-8359-adaf79237274", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-23969 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:1f756c51-3c04-55d4-ac38-a7ce2edab2c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-24580 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:e9b3c4dc-7c38-55c2-98e4-b261a4d710b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-31047 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:cda34600-c531-512d-85d9-c8872514537b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-36053 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:91b24ccd-2145-5d69-a145-2e532e07172d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-43665 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:1b2862ea-8c0c-5d55-b155-dd1c81d3bffb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-46695 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:d67b634c-6b4d-5e03-aace-c14a8f885865", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:dfcc0eee-3ab3-5d5e-b050-f783dedd12ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:76b08d1d-128f-5261-8d0a-13392ae9b408", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:1c742a71-4809-5d10-b341-20c693fc3124", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:19fdc5a1-8766-5bc9-82d7-ba54bec8894e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:a82fcb60-3844-55ef-bda8-6e3fb2c11dbf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:1dae725f-1a7e-5bd6-b156-9ffe76486ddd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:c9245511-4b2d-511a-9e0d-aeaafe2413e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:1610f00e-a34a-5e0f-9325-05257a77e3d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:64b9aba7-b092-551c-bc11-dd0043dd233f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:4f61fbe5-e276-59e1-845d-64077a4d10e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:6f5aa6fb-1161-581c-a6c7-17d32b64da0a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:408b8f97-fbcb-5629-a405-fc6efb717d83", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:b21fb9f6-bbb5-5203-8d24-520ea2c1c017", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15307 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:af269681-25cd-57d6-820d-7a8ea82b2bc2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15830 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:75a8face-c54e-58fc-9db5-aa3e6d26a933", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:00bacb98-a1af-58ea-963f-bd4071a96f18", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:8844050d-9fbb-5d33-ae1d-3e810a52dd76", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:ec45e2bc-6599-590c-9982-e5c678802fef", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 4.0.post23+tuxcare of django. not_affected \u2014 Django 4.0 is not affected by CVE-2026-53878. The vulnerable component DomainNameValidator does not exist in this version (it was introduced in Django 5.1). All domain validation in Django 4.0 is performed by EmailValidator, URLValidator, and _simple_domain_name_validator, which properly reject domain names containing newline characters through various mechanisms (regex anchors, explicit unsafe...", "justification": "protected_at_runtime" } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:3f32bfdb-9561-5f7c-8197-41541cf86ca2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 4.0.post23+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ], "bom-ref": "urn:uuid:8bc4ca16-9624-5e01-8d71-2927890372f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 4.0.post23+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@4.0.post23+tuxcare" } ] }