{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:cf9d33f6-5512-588f-a2d0-e682a92c9c40", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@4.2.post17+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@4.2.post17+tuxcare", "version": "4.2.post17+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@4.2", "type": "library", "version": "4.2" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:0cd20eb4-225a-50f4-b46a-ea8a25bb38b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-31047 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:6b5d1fe8-e518-5101-9af2-807c21157e14", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-36053 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:4294c750-7e1e-5426-9fee-87686414e4b5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-41164 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:7ef72579-8e9b-5a2f-aec0-2b883639d8fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-43665 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:aa9d7cd3-c297-53e6-876d-3c304859efe8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-46695 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:85152d68-4542-57f4-8cfc-f7e6a7f99ae4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24680 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:89da2962-a774-5f2a-9611-990bdfbf4a10", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-27351 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:41dc2a6c-318b-5582-8c7c-5ea83c8a7cd3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38875 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:59603fdc-65d6-56d6-8784-3e42cbcc011f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39329 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:d8e25ea7-4ccc-5686-b8c0-847109131de8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39330 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:2723e783-09ca-561c-b5fc-4d6b60e3a418", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39614 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:482ec9fa-d47f-56c2-b44b-f9aff531256f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41989 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:f3f0f1c8-9cf1-55c4-ae87-9f07f2022fa7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41990 affects version 4.2.post17+tuxcare of django, and is fixed in 4.2.post18+tuxcare." } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:3d08429b-78c4-5a59-b657-f7b8d8363a53", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-41991 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:e87958b9-696c-52ef-9d67-852028852576", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-42005 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:a15eedf6-c1e6-5a84-8bf7-10c13a4cd118", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45230 affects version 4.2.post17+tuxcare of django, and is fixed in 4.2.post18+tuxcare." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:1dcf9396-3065-557b-84b6-c202feafb068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:736e516d-774e-5644-bbbd-0ff0ddffff76", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53907 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:3758f93e-dd26-5dae-9edd-96f1e3428a81", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-53908 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:e62ad137-06f4-5a26-8c4e-c5834ddd1219", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56374 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:903e046c-b076-58fa-a222-2548792e297f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:5ee2b23d-e04a-5771-adb1-209d95282116", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:b74fae3f-7be5-5516-999e-0dd58a20a03b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:d9e34587-e257-5530-b3bb-cf9764995943", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-26699 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:3727b400-d816-56f3-8ee7-10fe979973da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32873 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:b40a71f7-e275-538d-a9ff-9049bd4a83ba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:ccce2066-b2b7-59d0-8ad0-4903ac8d2d7c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:db382fbf-015e-5f49-b283-b64c71f53865", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59681 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:0774db6f-ea32-5888-9865-14563a80e7ed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59682 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:a51897b7-73aa-59d0-91d2-94ce146a396e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:6f46f37b-c59c-5d30-967f-beb6c54f932e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:091fc70a-9b18-5bf9-a0a0-90393b1e34b5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:f4b1f989-951b-560c-9538-533701eb9d87", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:91a8ef30-39ec-5dfc-b823-504069a326db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:d81c7a72-f4a0-5de7-8009-7769bb484de6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:badfceee-74df-5cf9-a57c-49f3f082b08d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:2b0feb2b-5ee9-535c-aa7d-a3aa35846ec7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15307 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:b35a9922-1daf-5678-bcc3-1475b83ff206", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15830 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:fdde82d7-5b46-5e8c-be74-a9bc5c23248d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25673 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:5787449f-1fbd-509e-afd7-ea13adb59442", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25674 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:b8b945b5-fac8-5cc2-a968-d605a0ea04e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33033 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:6776b729-54f9-5deb-b55b-5221be72589a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33034 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:9bf3fa50-65c8-5d82-968b-f6e220b51e2b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-3902 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:4c6996a7-abbd-53fa-bb65-b37e4501ef2f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-4277 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:3269d0e0-74ec-598c-9c92-88ea6037c490", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-4292 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:a14c9c81-20db-51bd-bc87-0eaec3333716", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:3add9e02-ef41-5a71-bc38-38b80610e349", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:62cb3421-615a-53ff-8fed-ecdb5a58e5a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:d9abc367-3ca2-5aa1-828b-29b8f2c3fa3a", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 4.2.post17+tuxcare of django. not_affected \u2014 Django 4.2.0 is not affected by CVE-2026-53878. The vulnerable component `DomainNameValidator` does not exist in this version (it was introduced in Django 5.1). All existing domain validation mechanisms in Django 4.2.0 already prohibit newlines: URLValidator explicitly checks for newlines in `unsafe_chars`, EmailValidator uses regex that doesn't match newlines, and _simple_domain_name_validator...", "justification": "code_not_present" } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:da8918f5-8634-5300-b604-cb8917aeeb7e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 4.2.post17+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ], "bom-ref": "urn:uuid:68076983-645c-52e9-b9d6-1beb3add5c4b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 4.2.post17+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@4.2.post17+tuxcare" } ] }