{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:6daaaa54-0723-5f9f-ac80-296b9bcbd9c1",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "django",
      "purl": "pkg:pypi/django@4.0.post23+tuxcare",
      "type": "library",
      "bom-ref": "pkg:pypi/django@4.0.post23+tuxcare",
      "version": "4.0.post23+tuxcare",
      "pedigree": {
        "ancestors": [
          {
            "name": "django",
            "purl": "pkg:pypi/django@4.0",
            "type": "library",
            "version": "4.0"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2021-45115",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:f4ae8da7-2ef6-5c9f-9b6a-477bef336344",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-45115 is fixed in version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2021-45116",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:360e50f4-6a46-5312-9522-71e25f8439c0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-45116 is fixed in version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2021-45452",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:b78a4c94-cdd6-5132-b85a-d81d9e5d4a24",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-45452 is fixed in version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2022-22818",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:c7161655-4a8e-55f5-bfaa-5922081187ad",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22818 is fixed in version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2022-23833",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:c4525f1f-026f-585b-9c18-5eb981dcde0a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-23833 is fixed in version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2022-28346",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:b03bb16c-5da4-5ea4-b746-d5fdb2df477f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-28346 is fixed in version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2022-28347",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:8c1f9305-032f-5973-b8b4-3472f5f01c83",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-28347 is fixed in version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2022-34265",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:199eacf1-e137-54b5-92da-46b70a16037c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-34265 is fixed in version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2022-36359",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:d83639b6-e972-5dcf-8f98-9bc8978e22c1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-36359 is fixed in version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2022-41323",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:769a15e8-4a64-59f5-b165-5fdfaff6d391",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-41323 is fixed in version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2023-23969",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:3077a5c4-6f6a-5501-8359-adaf79237274",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-23969 is fixed in version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2023-24580",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:1f756c51-3c04-55d4-ac38-a7ce2edab2c1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-24580 is fixed in version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2023-31047",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:e9b3c4dc-7c38-55c2-98e4-b261a4d710b2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-31047 is fixed in version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2023-36053",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:cda34600-c531-512d-85d9-c8872514537b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-36053 is fixed in version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2023-41164",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:951641ec-3b32-5b2d-817b-74e653b1e580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-41164 affects version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2023-43665",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:91b24ccd-2145-5d69-a145-2e532e07172d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-43665 is fixed in version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2023-46695",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:1b2862ea-8c0c-5d55-b155-dd1c81d3bffb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-46695 is fixed in version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2024-24680",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:a1a320ef-4508-5afb-868f-e07a6dfe20a1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-24680 affects version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2024-27351",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:d90e863e-83ca-5532-9e38-c33de5d8728b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-27351 affects version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2024-38875",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:0702d47d-6912-5d81-9804-a9dffc76e672",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38875 affects version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2024-39329",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:cc14c6df-5ea2-5395-a5b9-c0fb4c24f699",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-39329 affects version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2024-39330",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:b7a4c9ce-eeb2-56a7-80b8-8ef6f4eecc70",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-39330 affects version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2024-39614",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:70f84b37-a9ec-5d73-b70d-5b035ec5d8b9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-39614 affects version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2024-41989",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:404d2cb5-c844-5c47-aacb-4f95784d4654",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-41989 affects version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2024-41990",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:9f07827f-21fd-5b15-9c8d-beefa208e33f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-41990 affects version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2024-41991",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:2643b698-0945-5b95-8bff-be69885481b3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-41991 affects version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2024-42005",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:2c0bc101-6a3d-52cf-acaf-82453c9fcc2f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-42005 affects version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2024-45230",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:9ba15af8-84ae-5e71-9d1e-90c4ae0e03a3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-45230 affects version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2024-45231",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:d67b634c-6b4d-5e03-aace-c14a8f885865",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-45231 is fixed in version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2024-53907",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:4c0d03a1-8b34-570e-a057-20339c209d8f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-53907 affects version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2024-53908",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:786bdced-c80a-5bb7-86f6-21dba42db286",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-53908 affects version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2024-56374",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:70b0c9c1-4cc6-55c6-9f7a-7de74d0f422c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56374 affects version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2025-13372",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:dfcc0eee-3ab3-5d5e-b050-f783dedd12ab",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-13372 is fixed in version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2025-13473",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:76b08d1d-128f-5261-8d0a-13392ae9b408",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-13473 is fixed in version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2025-14550",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:1c742a71-4809-5d10-b341-20c693fc3124",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-14550 is fixed in version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2025-26699",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:ad549150-ddb2-5172-95fe-463623ea4c7a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-26699 affects version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2025-27556",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:adb42db4-2e07-5ba8-80bc-b63e6334a129",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27556 affects version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2025-32873",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:d3300f2d-3fd5-50ad-9929-ddaefa0ca5b7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-32873 affects version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2025-48432",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:19fdc5a1-8766-5bc9-82d7-ba54bec8894e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48432 is fixed in version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2025-57833",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:a82fcb60-3844-55ef-bda8-6e3fb2c11dbf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-57833 is fixed in version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2025-59681",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:187523d7-95cc-5593-810d-6d8c4a3e8ec6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59681 affects version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2025-59682",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:7b5c635a-10cb-5203-b904-985482a62660",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59682 affects version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2025-64458",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:1dae725f-1a7e-5bd6-b156-9ffe76486ddd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64458 is fixed in version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2025-64459",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:c9245511-4b2d-511a-9e0d-aeaafe2413e9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64459 is fixed in version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2025-64460",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:1610f00e-a34a-5e0f-9325-05257a77e3d3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64460 is fixed in version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2026-1207",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:64b9aba7-b092-551c-bc11-dd0043dd233f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-1207 is fixed in version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2026-1285",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:4f61fbe5-e276-59e1-845d-64077a4d10e6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-1285 is fixed in version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2026-1287",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:6f5aa6fb-1161-581c-a6c7-17d32b64da0a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-1287 is fixed in version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2026-1312",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:408b8f97-fbcb-5629-a405-fc6efb717d83",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-1312 is fixed in version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2026-15307",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:b21fb9f6-bbb5-5203-8d24-520ea2c1c017",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-15307 is fixed in version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2026-15830",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:af269681-25cd-57d6-820d-7a8ea82b2bc2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-15830 is fixed in version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2026-25673",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:ecf284d3-538a-58bc-89ff-b253692932cb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-25673 affects version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2026-25674",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:e9e7aab7-6c1b-5fa9-8172-16fa5a88a44d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-25674 affects version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2026-33033",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:48b5cbbb-9fa9-5629-a63a-2a3df4fab48d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33033 affects version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2026-33034",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:16b8306a-d060-561a-8289-f7781b650109",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33034 affects version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2026-3902",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:e94b7199-8b38-5524-bcc3-87b210dcce7d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-3902 affects version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2026-4277",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:cd422bf6-b072-5def-9826-918b122f5372",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-4277 affects version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2026-4292",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:d507ad3d-13c0-559e-b026-f1541bf1b7a2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-4292 affects version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2026-48587",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:75a8face-c54e-58fc-9db5-aa3e6d26a933",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48587 is fixed in version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2026-48588",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:00bacb98-a1af-58ea-963f-bd4071a96f18",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48588 is fixed in version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2026-53877",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:8844050d-9fbb-5d33-ae1d-3e810a52dd76",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-53877 is fixed in version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2026-53878",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:ec45e2bc-6599-590c-9982-e5c678802fef",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-53878 does not affect version 4.0.post23+tuxcare of django. not_affected \u2014 Django 4.0 is not affected by CVE-2026-53878. The vulnerable component DomainNameValidator does not exist in this version (it was introduced in Django 5.1). All domain validation in Django 4.0 is performed by EmailValidator, URLValidator, and _simple_domain_name_validator, which properly reject domain names containing newline characters through various mechanisms (regex anchors, explicit unsafe...",
        "justification": "protected_at_runtime"
      }
    },
    {
      "id": "CVE-2026-6873",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:3f32bfdb-9561-5f7c-8197-41541cf86ca2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-6873 is fixed in version 4.0.post23+tuxcare of django."
      }
    },
    {
      "id": "CVE-2026-8404",
      "affects": [
        {
          "ref": "pkg:pypi/django@4.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:8bc4ca16-9624-5e01-8d71-2927890372f9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-8404 is fixed in version 4.0.post23+tuxcare of django."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:pypi/django@4.0.post23+tuxcare"
    }
  ]
}