{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:350e718e-0b9f-55e3-a8a0-62e75b1ebe9e", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:pypi/django@4.0.post16+tuxcare", "type": "library", "name": "django", "version": "4.0.post16+tuxcare", "purl": "pkg:pypi/django@4.0.post16+tuxcare" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:c72c1f63-46ed-5c49-8be7-f1cc0416ae54", "id": "CVE-2021-45115", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45115 is fixed in version 4.0.post16+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:8bf368bc-673d-5608-848a-56e716729146", "id": "CVE-2021-45116", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45116 is fixed in version 4.0.post16+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:38c4409a-ce46-50c0-ae6d-23b4c0acb26c", "id": "CVE-2021-45452", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45452 is fixed in version 4.0.post16+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:e807057b-7390-5d6d-b39c-d6b90c084388", "id": "CVE-2022-22818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22818 is fixed in version 4.0.post16+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:e588a20f-4858-5947-abd1-568083c932f9", "id": "CVE-2022-23833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-23833 is fixed in version 4.0.post16+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:f60a6a0c-e85d-5d88-bf02-c034bfbf3153", "id": "CVE-2022-28346", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28346 is fixed in version 4.0.post16+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:fdb787a3-3022-5e08-928b-ea193d0c3f90", "id": "CVE-2022-28347", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28347 is fixed in version 4.0.post16+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:58b027bd-476a-52d8-9d73-e6fd5ff3d792", "id": "CVE-2022-34265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-34265 is fixed in version 4.0.post16+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:9d8a2cc6-a56e-5be4-b4f9-3309d68028a5", "id": "CVE-2022-36359", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-36359 is fixed in version 4.0.post16+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:ca2aa5d2-41cb-5bb8-944a-bc9835c32d6e", "id": "CVE-2022-41323", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41323 is fixed in version 4.0.post16+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:2b53c48d-0987-5899-9571-ebc1b46eeb8f", "id": "CVE-2023-23969", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-23969 is fixed in version 4.0.post16+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:4757a7ed-2ec2-517d-a1d7-753f2291535d", "id": "CVE-2023-24580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-24580 is fixed in version 4.0.post16+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:5045cabc-15b7-5ac9-9487-67846c7a7d32", "id": "CVE-2023-31047", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-31047 is fixed in version 4.0.post16+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:2ccd374d-d055-52c8-ac7d-bdfc127a8326", "id": "CVE-2023-36053", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-36053 is fixed in version 4.0.post16+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:09707a48-5714-52f4-8d76-e69a9e6ea280", "id": "CVE-2023-43665", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-43665 is fixed in version 4.0.post16+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:26513e7d-e0e0-56b8-b566-07cc128a85d0", "id": "CVE-2023-46695", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-46695 is fixed in version 4.0.post16+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:f5ac8bd1-87f5-5d13-9916-cad394ce86cf", "id": "CVE-2024-45231", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45231 affects version 4.0.post16+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:1cba8495-e334-5b19-bb93-784fa5acf77a", "id": "CVE-2025-13372", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 4.0.post16+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:ca6a87e5-07c2-5291-ab2c-5c74be216a85", "id": "CVE-2025-13473", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-13473 affects version 4.0.post16+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:a998adec-8e66-5d70-9cfa-3bd59b63eaec", "id": "CVE-2025-14550", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 4.0.post16+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:b097b733-0c77-5066-b39c-5d79714d569f", "id": "CVE-2025-48432", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 4.0.post16+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:feae8045-8e5b-5721-86c7-a4cc0ea65c09", "id": "CVE-2025-57833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-57833 affects version 4.0.post16+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:5b6ad026-1000-5b5e-b50b-2fa721a89fdf", "id": "CVE-2025-64458", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 4.0.post16+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:90b9d9a3-656f-5006-ae3e-541ac25286cf", "id": "CVE-2025-64459", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 4.0.post16+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:eefd4556-f51b-51a1-856b-d5b2b3973b81", "id": "CVE-2025-64460", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 4.0.post16+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:6a02b8f1-bc8d-5dc2-8eee-b0a66722c6e7", "id": "CVE-2026-1207", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 4.0.post16+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:5cd3c62a-e170-5b1b-b653-d8f2c6736b05", "id": "CVE-2026-1285", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1285 affects version 4.0.post16+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:5e1dfada-1499-53bd-9a51-403b8eda9fcc", "id": "CVE-2026-1287", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1287 affects version 4.0.post16+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:3980b0a0-c75d-5526-b340-bb6c569ec988", "id": "CVE-2026-1312", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 4.0.post16+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:a28e0adc-5745-55e4-a035-b90a7001d765", "id": "CVE-2026-48587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48587 affects version 4.0.post16+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:dbd4624e-bdf3-5b7a-9878-c9c3a2d3b5a6", "id": "CVE-2026-48588", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-48588 affects version 4.0.post16+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:04cab417-140a-5719-a04b-8271f7a9bc71", "id": "CVE-2026-53877", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53877 affects version 4.0.post16+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:2781dc54-b31e-5ffc-a678-7290b1755b76", "id": "CVE-2026-53878", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 4.0.post16+tuxcare of django. not_affected \u2014 Django 4.0 is not affected by CVE-2026-53878. The vulnerable component DomainNameValidator does not exist in this version (it was introduced in Django 5.1). All domain validation in Django 4.0 is performed by EmailValidator, URLValidator, and _simple_domain_name_validator, which properly reject domain names containing newline characters through various mechanisms (regex anchors, explicit unsafe..." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:e26f5522-1005-5eb3-bbb3-47723504d2a5", "id": "CVE-2026-6873", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6873 affects version 4.0.post16+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:f1121ee2-4d80-5629-93b4-c44953772471", "id": "CVE-2026-8404", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-8404 affects version 4.0.post16+tuxcare of django." }, "affects": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] } ], "dependencies": [ { "ref": "pkg:pypi/django@4.0.post16+tuxcare" } ] }