{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:69647a58-19af-510c-ba55-1faa16a40e8b", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@4.0.post21+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@4.0.post21+tuxcare", "version": "4.0.post21+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@4.0", "type": "library", "version": "4.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:ff4c46e9-e656-5d08-9845-c64971108ae0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45115 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:716969d5-0d80-5f69-a589-fab4a279bb67", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45116 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:1b1f9c83-68e7-5aa2-b633-09c116ae926b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45452 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:88875be6-30ab-5745-8039-615531c21e30", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22818 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:d733d6c8-fb94-59bd-a873-7677472d748a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-23833 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:8c79f943-3356-533e-be62-491e34049b81", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28346 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:4a653085-151b-5cd9-8528-8ee6d0db9488", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28347 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:ceda23ee-8d30-5c65-90f9-9cfa1da57895", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-34265 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:e312c0ae-e505-59f5-a366-693a0980beb9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-36359 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:a1567856-4a11-540a-a2b5-b086d0162774", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41323 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:2328db3a-c04b-5858-adf3-64ce49f4dbc9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-23969 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:9f7d4c07-abd0-56e1-bdea-5880c1e949bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-24580 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:cc9c8d49-c8cd-5fbf-9251-9745a666448d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-31047 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:cac1550c-f67d-58ba-9f3d-3419db7d1a56", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-36053 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:3944605a-92fc-552f-ac97-2c82844a9d6c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:b43c80ac-e734-5d31-9260-d0a87297b6e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-43665 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:94322b33-c1ac-5651-b9c1-018c41a4fff6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-46695 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:803c1733-b6a2-5576-b9ba-fbeddc1ec0bf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-24680 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:9312eb2d-3711-51d8-8f0e-5d9096a5177e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-27351 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:d3a3e5bd-e22d-5c6c-a905-28a4adc37f5c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38875 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:ac4147b6-edb6-56db-aea5-7f82070ea8db", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39329 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:36bc6a43-c36e-5b11-8985-1d4589ed13dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39330 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:f2659a4c-f388-5f93-a30d-224d6af94d42", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39614 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:afa6e672-7f26-5b0b-875e-3455744e73a8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41989 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:2912f12d-cbcd-5882-a1ab-e761cab186a7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41990 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:0d162378-cc62-5c32-88f3-1844bae294cb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41991 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:06345a08-7b9f-5947-8eb1-c1ffe15ada1d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-42005 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:be5ff160-4d9a-5a4d-914c-9de9e6adb69c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45230 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:04306230-6ded-5bb7-88e9-b0549aa1ba85", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:f7c4819b-4810-5c71-b13f-9bcba6bc40af", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53907 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:2e5f74a5-d59f-5673-9e2b-b3e33e5c7986", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53908 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:72fe3a54-d336-5338-8c1a-e81f7156e480", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-56374 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:9b1c8a31-4a09-5693-9d07-a02f4c0f4862", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:d4aa596f-ea3a-5727-bf8a-bd33e43039f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:6f97e209-32e0-596b-8d8d-0506081aafff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:f94e11ee-55a5-5d22-a7a6-0debcf8e50a7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-26699 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:fa6a20f2-dd98-5f65-8b52-db03b6e37ec0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27556 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:57b2141c-920b-58e7-873d-672e9831ae84", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32873 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:6965cb23-f91a-582a-80e9-13ad54e2c1d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:709199eb-fb2e-516c-9c85-a04d2a09ca26", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:a67c9225-37ef-59b0-b0a6-dc29c1d8d760", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59681 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:f1d3aa4e-72d3-5e34-996b-ae3567aad361", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59682 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:35e2780c-7897-5548-a6da-9f9fd0077ae7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:51ceef9c-a3c5-54f5-8fe0-7d549390c82b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:a4991b08-c491-5a6a-b2da-a8043dc3ce06", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:2a32bf69-2c2a-5c14-99a5-7e88bc5f380b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:4fc15bf4-d8b4-530c-801c-45726760ebaa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:0f4915c5-a162-5198-bbd9-08c384b0e068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:056c9377-d5a1-503d-bd05-aaba3c55360d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:a8a51d14-5af2-51c2-9c2b-bfabb5781d2d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-15307 affects version 4.0.post21+tuxcare of django, and is fixed in 4.0.post23+tuxcare." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:e1a7e4c8-35cf-5bb4-a068-f883fcc42281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-15830 affects version 4.0.post21+tuxcare of django, and is fixed in 4.0.post23+tuxcare." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:70e23938-8ead-5fd8-9177-3afef74f304a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25673 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:5947804b-32b3-541c-a108-f700553ae1e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25674 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:85f35cb0-be39-51b6-bc66-b9fbad530088", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33033 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:7722721c-9046-599f-9eb7-2192a5c43069", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:1856bb47-1352-524d-b0f3-86d8dba2b4cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-3902 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:5dcf9a86-0fbd-5b4d-823c-d8be27f6a76e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4277 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:0ac427a5-7cf2-5b39-a490-ba55845255ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4292 affects version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:a1060525-f4f7-55fe-8c5d-90561a32d2d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:a67aaf27-ba70-50fd-bd72-04f766db0407", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 4.0.post21+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:0047e92b-e3e1-58bd-8092-800788fca051", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53877 affects version 4.0.post21+tuxcare of django, and is fixed in 4.0.post22+tuxcare." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:0b67a8fd-a935-5854-bb22-1b5001bbdcf9", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 4.0.post21+tuxcare of django. not_affected \u2014 Django 4.0 is not affected by CVE-2026-53878. The vulnerable component DomainNameValidator does not exist in this version (it was introduced in Django 5.1). All domain validation in Django 4.0 is performed by EmailValidator, URLValidator, and _simple_domain_name_validator, which properly reject domain names containing newline characters through various mechanisms (regex anchors, explicit unsafe...", "justification": "protected_at_runtime" } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:5a68dfdd-7697-5e76-b494-fb8e5a44f405", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6873 affects version 4.0.post21+tuxcare of django, and is fixed in 4.0.post22+tuxcare." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ], "bom-ref": "urn:uuid:2add7bc0-98b8-5dbc-89de-8d71d33e14f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 4.0.post21+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@4.0.post21+tuxcare" } ] }