{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:4a95b700-3156-599f-bdb9-006482ac1e30", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@4.0.post24+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@4.0.post24+tuxcare", "version": "4.0.post24+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@4.0", "type": "library", "version": "4.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:301c50dc-860f-545e-a842-139525d37b55", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45115 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:f07ff56d-a964-585f-84d5-86b3955840d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45116 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:5fa7ea5a-2aef-5055-9c12-2cc445d3a9ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45452 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:ccf84c22-a509-5686-8020-7ed65c040a0e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22818 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:747f50f4-6f06-5a8e-852a-a2c850c61bd6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-23833 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:583a66b8-4af9-5fea-b8af-3e9f63839b20", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28346 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:3a2cff39-a794-5ed4-846b-2db677d68a36", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28347 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:e2340c10-7441-590b-b8db-e6f6780224f0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-34265 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:126bf89d-352d-5d92-8498-53d8023fbdac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-36359 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:8b336a6a-1eeb-5afa-bef4-5825834ed495", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41323 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:27686d5b-6bb0-5e16-a634-111a2424806a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-23969 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:97e2e059-3032-5540-987e-fdb89b6af687", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-24580 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:0a0c48e5-3f60-5baa-9993-2dd04f806580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-31047 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:aa60e544-f87d-5b20-9c3d-f3b86fc8383f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-36053 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:49c20450-0918-58b2-acb3-4392193b06f9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:ae1681e8-a4d7-5a1c-bb40-e511f7971cfa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-43665 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:0de163f6-6480-57a7-8d57-1f3824f33757", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-46695 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:5ab16bfd-a44b-5c0b-81ff-45a18c336f8d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-24680 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:db373aff-3831-5b4b-8f95-26b60a98bd82", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-27351 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:c5c8a4c1-65b0-5892-86e6-49ae3d80c37a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38875 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:e4105051-a773-5e20-9a7d-48ad7fbb648f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39329 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:13df6753-4f3d-58da-892f-ba87d2a6b5b2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39330 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:26eca1a7-d9c3-5072-9655-f2c1751f2593", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39614 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:04b5afeb-6976-567c-b070-69b136fa7caf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41989 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:b955ab58-a315-5bb0-9a81-dfd6c240eaf5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41990 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:0d41de25-ae96-5933-96f7-c5bb68746519", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41991 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:71cb3179-6c72-5a91-9202-5923f4ea00fb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-42005 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:8ccc0952-5e6d-5581-8053-ee7a19202501", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45230 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:356a3c6a-9f85-5db6-bc8e-81c7676f4359", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:6e8db1a2-27ed-5b71-96c4-6064fac32416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53907 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:1038fa25-43c3-5b1b-aefd-39395b249558", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53908 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:68edf04e-73f8-5774-bf70-ae15b59b07ef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-56374 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:0e5f3b2c-0679-57d7-80c9-8e30054c7e05", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:a8312e54-0005-574d-825a-00fa830ac134", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:846082e2-aea1-546e-ac92-38212c81a953", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:a67f40d3-23ff-5e11-b657-a30cc0252dd5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-26699 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:c4506458-10e5-56fa-9447-8f8654a316f1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27556 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:04e30c09-aac0-5a43-866c-8e65f441282e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32873 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:58e79cb6-d9ab-57fc-8653-edbd235a0098", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:c9b068e6-2c1b-5bc7-8878-acc9556748e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:e86b3ff5-db39-59fe-999e-2118ca3ccfdf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59681 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:782129d9-4fef-5d51-a7ad-863a19c79730", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59682 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:e601f331-6074-549e-b88f-f3c45c9a82f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:d6ef68e9-703b-5b13-a877-29f5887409ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:f629897d-3054-5819-a270-b3453c31e22a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:c7e944d8-7291-5b41-b964-3785fa0c2ae0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:655ac469-6cbc-5351-b36c-0d5ec3d31ffc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:a05ae4b4-a7b4-5598-adce-996404a201ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:8d8810bb-1b86-5834-8ea0-44e991ceaa1a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:81e4e7d3-4c65-5c32-b6d0-3239e7279e11", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15307 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:ddbf47e3-ed98-5a28-97b6-b3d3d7ef7862", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15830 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:583d9c4c-9f88-5886-b611-0ae5833e37ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25673 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:8241c0f1-4938-549e-9374-672f7d9700ab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25674 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:6bd4807e-98a7-5ad4-a1fb-bce5c382e139", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33033 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:850bbea4-f5ad-5330-a39f-783a2cfc1e80", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:654b97eb-3da1-59e0-be3b-744271b5bf0d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-3902 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:544f702c-0224-5655-9cdb-ce8411dbdac0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4277 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:5a26066f-5e00-545c-9522-89ca7c6a66e9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4292 affects version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:77e16cd1-ca14-5937-9b5f-4fc4f770eb6b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:ed494160-c298-5631-8cb1-85a6781dbb4a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:a3efa6e2-ed69-5b8c-ac48-b6264d726eba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:58065daf-8334-53df-85f0-5dc2cb3e61e9", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 4.0.post24+tuxcare of django. not_affected \u2014 Django 4.0 is not affected by CVE-2026-53878. The vulnerable component DomainNameValidator does not exist in this version (it was introduced in Django 5.1). All domain validation in Django 4.0 is performed by EmailValidator, URLValidator, and _simple_domain_name_validator, which properly reject domain names containing newline characters through various mechanisms (regex anchors, explicit unsafe...", "justification": "protected_at_runtime" } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:8b06150e-aa67-5aeb-9402-5928f845b041", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 4.0.post24+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ], "bom-ref": "urn:uuid:c745d2a5-46f6-51bb-a6fd-f4af82914ddd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 4.0.post24+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@4.0.post24+tuxcare" } ] }