{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:87078e49-782a-53d8-b970-9cb7602d3254", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "django", "purl": "pkg:pypi/django@4.0.post25+tuxcare", "type": "library", "bom-ref": "pkg:pypi/django@4.0.post25+tuxcare", "version": "4.0.post25+tuxcare", "pedigree": { "ancestors": [ { "name": "django", "purl": "pkg:pypi/django@4.0", "type": "library", "version": "4.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2021-45115", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:f2282569-92fc-5c35-bd3c-372a1cbbba54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45115 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2021-45116", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:3fd8e154-96b9-536a-872b-66445dcf17b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45116 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2021-45452", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:f642b999-78de-56d0-9aa5-b0ac16255e6d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-45452 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2022-22818", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:75ea487b-3bcf-59c6-82c2-3ac6c03a54e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22818 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2022-23833", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:21b44e93-b038-5973-89bd-dfbb6d35f419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-23833 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2022-28346", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:c7d8c759-dea6-59fa-86eb-c68cb276205b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28346 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2022-28347", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:4e45f326-2abc-5d52-8ffe-196be455771f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-28347 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2022-34265", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:09cc3566-0282-583b-a386-a7d0fbfd932c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-34265 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2022-36359", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:cc6e3116-2fe1-5e2b-ab73-a5ede1cff80e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-36359 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2022-41323", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:bd4aa494-ed21-5faa-b749-45ad8a2aa46a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-41323 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2023-23969", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:a9530cc3-2059-5ea4-91ca-49b2dfecb2f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-23969 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2023-24580", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:8fd4fe89-8efd-59b0-9b29-4e9f2e395742", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-24580 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2023-31047", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:7ab9d4af-6824-58fd-b25d-1317526169c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-31047 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2023-36053", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:f4a95775-88c1-5001-9d27-8a71c6856183", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-36053 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2023-41164", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:4b0819e5-41a8-5123-84c7-934139936e09", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41164 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2023-43665", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:a6060de6-e6ca-5d6c-9325-59f2fefbdc89", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-43665 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2023-46695", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:2f0511e5-97b0-5de8-8e0f-f6804ee0d0d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-46695 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2024-24680", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:fe08d286-717f-5f18-b443-6712b05176bb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-24680 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2024-27351", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:88fabac9-533c-5870-a967-33b2cf18e9e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-27351 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2024-38875", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:e24d807d-5085-5620-bb83-6eaadd23a571", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38875 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2024-39329", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:05237275-1b93-55b7-b14f-6eba3db130ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39329 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2024-39330", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:ed8ea60c-d063-50bb-a3f6-6f9768ea8cfb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39330 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2024-39614", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:5b5b9317-0c6e-58e5-a37d-181d58254d25", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39614 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2024-41989", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:5fcd429a-27af-5333-ba12-5a3c4466febc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41989 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2024-41990", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:650fa360-6dbc-535b-a1e4-9247b7686dab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41990 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2024-41991", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:14ba65f6-cfae-56e7-b083-b32f089366c2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-41991 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2024-42005", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:7161d316-3b6a-51f2-9130-0574e951a6b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-42005 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2024-45230", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:95d228bf-3106-5a20-989e-d5d775e09022", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45230 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2024-45231", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:9c4ffc3f-7002-5601-a75d-35178b1e5df8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-45231 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2024-53907", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:9aca29f5-8879-5559-abf3-31d0271c73bb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53907 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2024-53908", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:f4ba05b3-2449-5b81-b9ca-201be201d968", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-53908 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2024-56374", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:f654e97a-e88c-5516-a122-4cd3d7f4cb94", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-56374 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2025-13372", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:cfa32fcb-3328-5838-b67e-e5ea31649afe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13372 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2025-13473", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:ec921328-9594-5473-bb52-2cb7957e1eb3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-13473 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2025-14550", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:1d5b421d-a0e2-54bd-a95a-f30ccf998b6f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-14550 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2025-26699", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:497f9467-3403-501e-bb94-fe3132205b3d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-26699 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2025-27556", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:3e403cea-39ff-5af8-a360-593f8931470f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27556 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2025-32873", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:cc97ba4f-81fc-59fd-ad68-f0c2017f8923", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32873 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2025-48432", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:159c3086-a8bc-5ac8-ba05-4dc491872e95", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48432 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2025-57833", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:711ef41e-84d0-5b88-a053-4306d5eff9fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57833 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2025-59681", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:cf304cab-c922-5114-b6dd-79dbf8041f0c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59681 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2025-59682", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:a2d6d649-531f-53fb-903b-9ee75705c1d4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59682 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2025-64458", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:bc05baeb-4278-59c1-8328-0ea0a6b40c43", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64458 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2025-64459", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:eb7e9bc2-be32-5af5-9136-0a1591beb453", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64459 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2025-64460", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:fa23a147-32ed-5185-ac8d-842cdd53e103", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64460 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-1207", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:087110f8-0810-556c-9076-aed8227af5dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1207 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-1285", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:00e62622-1b6f-5995-9b30-9987f883b456", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1285 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-1287", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:c1d095c0-5fb2-52a9-a008-d95bb9aa5255", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1287 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-1312", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:2ed4716e-465a-5343-b95a-2d0ab6c2949c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-1312 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-15307", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:a3feb88e-0ba6-5473-9c37-b253c690ed7d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15307 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-15830", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:782a6010-5305-5ab0-b747-88adf0e6021b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-15830 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-25673", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:0afb3426-a967-51dd-a0b5-4abdeb582079", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25673 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-25674", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:74a7be41-a9a2-55e0-b10f-60ce0b97c6a1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25674 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-33033", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:7d161ca0-f89c-5a9f-8f29-b415bf8daa98", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33033 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-33034", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:bb9d80df-24b5-59d7-9020-2f8de70e37af", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33034 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-3902", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:7ef32e91-3940-5a11-b5f8-58287befeab1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-3902 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-4277", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:b319cb8e-080e-550f-b69a-0e54dff3fed9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4277 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-4292", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:0b2d5681-1fd7-5d81-9522-c6f3be392824", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4292 affects version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-48587", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:1fd670e1-cbc3-57dd-a783-04bc92242a79", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48587 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-48588", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:47daaa3c-db9f-51a3-a471-8f74a4003484", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48588 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-53877", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:4cb4178a-719a-5bbe-821d-f94d454c4b12", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53877 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-53878", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:7b7c2498-84c4-5306-a04d-12c7acebccd1", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-53878 does not affect version 4.0.post25+tuxcare of django. not_affected \u2014 Django 4.0 is not affected by CVE-2026-53878. The vulnerable component DomainNameValidator does not exist in this version (it was introduced in Django 5.1). All domain validation in Django 4.0 is performed by EmailValidator, URLValidator, and _simple_domain_name_validator, which properly reject domain names containing newline characters through various mechanisms (regex anchors, explicit unsafe...", "justification": "protected_at_runtime" } }, { "id": "CVE-2026-6873", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:616fbb89-13da-5075-b5cb-b655eda5c405", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6873 is fixed in version 4.0.post25+tuxcare of django." } }, { "id": "CVE-2026-8404", "affects": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ], "bom-ref": "urn:uuid:e3f06a4c-4af5-54c7-ac47-7957177579a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-8404 is fixed in version 4.0.post25+tuxcare of django." } } ], "dependencies": [ { "ref": "pkg:pypi/django@4.0.post25+tuxcare" } ] }