{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:f1906f36-46dd-508a-80d9-a93b82440f99", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@4.0.post20+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@4.0.post20+tuxcare", "version": "4.0.post20+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@4.0", "type": "library", "version": "4.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:47622af5-45e0-5cc6-8011-cbfcbdc3e91e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45115 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:c503509b-da0a-5d43-a141-2f442f4a98ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45116 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:376e2d79-5fe7-5526-ac4d-feb992febc8c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45452 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:c1452e42-4bf6-5b43-b25e-1909aaf47b6e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22818 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:0d0703d0-a176-5692-a2fd-78419420a12a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-23833 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:ef148c55-38d4-5b62-81ae-870e1fcf3335", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28346 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:fbcb8c19-f8f1-5c64-bb3c-152499fc2475", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28347 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:3425f45f-2029-512a-bd6a-4c4ddd9d95f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-34265 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:62a0e3c0-2436-5917-8121-2f5a78bc5385", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-36359 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:61ea90b1-d28a-530e-b879-08634776a7d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41323 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:116ac411-5da8-57e1-bbc2-1107fb62b229", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-23969 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:e2d83655-8ad7-5c4b-b0b9-957a98e5aabc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-24580 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:ca5bc7eb-58f6-5293-986d-99f134b7a0b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-31047 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:ea9c5e3d-2f26-5e44-9936-a292f6f78789", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-36053 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:2bf06219-2b01-5e3a-b989-111e8efed6f9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:32faf25d-fa09-5640-90b4-50318b35b780", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-43665 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:7fb2f718-adfe-522a-ba9c-202d248320cf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-46695 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:a256b57c-2a5e-540c-8c4f-a6d345c21cd4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-24680 affects version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:a1bca9a2-13ef-52c5-8713-896d7066ba02", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-27351 affects version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:d1bbf705-a8dc-5df0-9c42-fd26f3cc4902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38875 affects version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:ccf20549-e9f2-5459-846b-b346043c2003", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39329 affects version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:2fbe853e-698e-55ad-a622-a623ab37e59c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39330 affects version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:9101b0da-458c-569b-8c54-f184fd2c2b31", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39614 affects version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:6967ef2f-b883-5713-9924-b82d66ddc7b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41989 affects version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:173788a6-7426-5c2a-b16f-e1d0e011c12f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41990 affects version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:5f78ecd9-7028-577f-9272-34dd1550bfbf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41991 affects version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:38eef229-f433-5ba4-ad88-9404cdfb32cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-42005 affects version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:5f60da7b-28f7-506e-ad2e-e30f247cb994", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45230 affects version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:53a6d81c-5f76-50b4-b97c-980b05270a12", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:eda1f453-4df8-5174-a785-2ef15dc3cbf2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53907 affects version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:fd911abc-36f8-5242-a066-030c55664f40", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53908 affects version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:28504a04-a0b8-5150-931f-14c41d35207a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-56374 affects version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:8b81c7e3-6345-55b8-9304-23b657e34f5e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:19ff1990-9320-57b5-8a94-accd95443b2e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:ea2a92d3-15c5-5b28-84e7-731bacecec51", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:1648a765-4231-5aa6-8622-3da702176889", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-26699 affects version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:eee11eb1-9555-55ce-bb31-93efe7bcdb65", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27556 affects version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:de1c6c10-9c1b-5bdc-96b8-c600ca0ab8ab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32873 affects version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:6daf6390-7702-5f93-855f-91853e1eda22", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:60041499-47c0-5327-852c-f8895741236b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-57833 affects version 4.0.post20+tuxcare of django, and is fixed in 4.0.post21+tuxcare." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:52c60696-9714-5b19-84ef-0101fbbe8806", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59681 affects version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:176aac9a-469b-5384-9ffa-ffd18820e149", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59682 affects version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:76d166eb-ec08-5af1-ae4a-8ddf9638aeb3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:c4a36ca6-e6eb-5d99-91f5-6eaaf1edc5a2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:4c923ec5-079c-53ad-b347-55516f31723e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:5571db48-36b8-577a-8396-743692426407", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:b470a00a-a2b6-57b6-8134-db306c592bd1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:3107d36c-0f84-504e-87b6-ee2b7c64a525", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:202c92ca-945b-5358-a155-47cd3bf3cc04", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:3452ec25-52b6-5a40-a31e-07d829908c46", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-15307 affects version 4.0.post20+tuxcare of django, and is fixed in 4.0.post23+tuxcare." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:9f085174-375c-5e90-9178-c1567bb6526a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-15830 affects version 4.0.post20+tuxcare of django, and is fixed in 4.0.post23+tuxcare." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:68a1aad3-ac9c-581b-9dd1-b88a460cb31c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25673 affects version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:442d7018-5f94-5d1d-b4ac-faee1b03f4ef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25674 affects version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:fe773afe-837c-5727-bc62-829a4e0ff3c5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33033 affects version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:1f00077a-e6ed-5e9c-bbad-661463b4b2a2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:7a06be45-86ec-555f-a44a-c5dc07c369cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-3902 affects version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:9d454d32-ca4e-565d-b4c0-e45ba2b8a2ab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4277 affects version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:6993fd66-aef7-5020-a372-baacf3c68b92", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4292 affects version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:b11c68e2-114e-53aa-b0dc-ff2f0989d0d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:e908ae76-5c08-5f5e-b54b-6a4ce195f5c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 4.0.post20+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:8be4f9c2-11d1-5cc0-b386-76cf58f6c943", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53877 affects version 4.0.post20+tuxcare of django, and is fixed in 4.0.post22+tuxcare." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:99a5c0f6-d63c-5e61-9e5a-4a788acd2b78", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 4.0.post20+tuxcare of django. not_affected \u2014 Django 4.0 is not affected by CVE-2026-53878. The vulnerable component DomainNameValidator does not exist in this version (it was introduced in Django 5.1). All domain validation in Django 4.0 is performed by EmailValidator, URLValidator, and _simple_domain_name_validator, which properly reject domain names containing newline characters through various mechanisms (regex anchors, explicit unsafe...", "justification": "protected_at_runtime" } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:7dda0f31-5374-5898-a407-427975e18eb7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6873 affects version 4.0.post20+tuxcare of django, and is fixed in 4.0.post22+tuxcare." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ], "bom-ref": "urn:uuid:58133ee8-50aa-5523-a988-40b0a086009e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 4.0.post20+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@4.0.post20+tuxcare" } ] }