{"url":"https://pypi.sbomify.com/package/django-language-server/6.1.1","markdown_url":"https://pypi.sbomify.com/package/django-language-server/6.1.1.md","name":"django-language-server","version":"6.1.1","purl":"pkg:pypi/django-language-server@6.1.1","summary":"A language server for the Django web framework","author":null,"project_urls":{"Documentation":"https://djls.joshthomas.dev","Issues":"https://github.com/joshuadavidthomas/django-language-server/issues","Source":"https://github.com/joshuadavidthomas/django-language-server"},"requires_python":">=3.10","license":null,"classifiers":["Development Status :: 4 - Beta","Framework :: Django","Framework :: Django :: 5.2","Framework :: Django :: 6.0","Framework :: Django :: 6.1","Intended Audience :: Developers","License :: OSI Approved :: Apache Software License","Operating System :: OS Independent","Programming Language :: Python","Programming Language :: Python :: 3","Programming Language :: Python :: 3 :: Only","Programming Language :: Python :: 3.10","Programming Language :: Python :: 3.11","Programming Language :: Python :: 3.12","Programming Language :: Python :: 3.13","Programming Language :: Python :: 3.14","Programming Language :: Python :: Implementation :: CPython","Programming Language :: Rust","Topic :: Software Development","Topic :: Text Editors :: Integrated Development Environments (IDE)"],"wheels":[{"filename":"django_language_server-6.1.1-py3-none-macosx_10_12_x86_64.whl","url":"https://files.pythonhosted.org/packages/04/b3/ff196aab6d0fa7cb3410d6cf5d2825735ebc883813e802849a67e1e8118b/django_language_server-6.1.1-py3-none-macosx_10_12_x86_64.whl","sboms":[{"artifact_uuid":"4d671263-555d-576b-a4bb-fb6d487ab2b1","path":"django_language_server-6.1.1.dist-info/sboms/djls.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/4d671263-555d-576b-a4bb-fb6d487ab2b1/download","vulnerability_count":14,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"django_language_server-6.1.1-py3-none-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/e1/15/22473ba69ce8e30dc3debe2ad69ba7470b4df0d0de3008f3d77deb192630/django_language_server-6.1.1-py3-none-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"fe01a5dc-6024-54dd-a382-7a640e6a8af7","path":"django_language_server-6.1.1.dist-info/sboms/djls.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/fe01a5dc-6024-54dd-a382-7a640e6a8af7/download","vulnerability_count":14,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"django_language_server-6.1.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","url":"https://files.pythonhosted.org/packages/2f/80/90853cfa2f2a63c19506afd3d673af420c9d718ef66b7332de779a383882/django_language_server-6.1.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","sboms":[{"artifact_uuid":"1332292c-f8f6-50af-a8c2-e657ef476847","path":"django_language_server-6.1.1.dist-info/sboms/djls.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/1332292c-f8f6-50af-a8c2-e657ef476847/download","vulnerability_count":14,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"django_language_server-6.1.1-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","url":"https://files.pythonhosted.org/packages/78/13/a48c84e7d71fe02641f85453b91686b0a11e65e15bdd3d3e0cac7324d982/django_language_server-6.1.1-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","sboms":[{"artifact_uuid":"02d70e42-2c10-5e78-856a-43b3a3fe9702","path":"django_language_server-6.1.1.dist-info/sboms/djls.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/02d70e42-2c10-5e78-856a-43b3a3fe9702/download","vulnerability_count":14,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"django_language_server-6.1.1-py3-none-musllinux_1_2_aarch64.whl","url":"https://files.pythonhosted.org/packages/86/80/b41f738bbb46892c2b57181cd0761d5f9b910b18628435573034554fec44/django_language_server-6.1.1-py3-none-musllinux_1_2_aarch64.whl","sboms":[{"artifact_uuid":"7a11df40-94b2-5c66-a9bc-e78ddb9c9804","path":"django_language_server-6.1.1.dist-info/sboms/djls.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/7a11df40-94b2-5c66-a9bc-e78ddb9c9804/download","vulnerability_count":14,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"django_language_server-6.1.1-py3-none-musllinux_1_2_x86_64.whl","url":"https://files.pythonhosted.org/packages/9f/ad/02c105ce4b29df379d70326c0a7dc0bffecf3405efb6e327168408b07de2/django_language_server-6.1.1-py3-none-musllinux_1_2_x86_64.whl","sboms":[{"artifact_uuid":"36c33cce-ca39-59e9-9877-33075bfac6ce","path":"django_language_server-6.1.1.dist-info/sboms/djls.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/36c33cce-ca39-59e9-9877-33075bfac6ce/download","vulnerability_count":14,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"django_language_server-6.1.1-py3-none-win_amd64.whl","url":"https://files.pythonhosted.org/packages/89/a0/017e3c6420bbb7c4cbd9d5ed538ab53b9d162ac1cab186fe58858ec5f00c/django_language_server-6.1.1-py3-none-win_amd64.whl","sboms":[{"artifact_uuid":"81fa96b2-66a4-5dd9-afa2-51dbd342e8d6","path":"django_language_server-6.1.1.dist-info/sboms/djls.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/81fa96b2-66a4-5dd9-afa2-51dbd342e8d6/download","vulnerability_count":14,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":7,"has_attestation":false,"vulnerabilities":[{"id":"CVE-2026-115905","aliases":["GHSA-m665-v7pm-7grj"],"summary":"zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE","severity":"critical","score":10.0,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.5"],"url":"https://insights.sbomify.com/CVE-2026-115905/","wheels":["django_language_server-6.1.1-py3-none-macosx_10_12_x86_64.whl","django_language_server-6.1.1-py3-none-macosx_11_0_arm64.whl","django_language_server-6.1.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","django_language_server-6.1.1-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","django_language_server-6.1.1-py3-none-musllinux_1_2_aarch64.whl","django_language_server-6.1.1-py3-none-musllinux_1_2_x86_64.whl","django_language_server-6.1.1-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0369","aliases":["GHSA-4684-h2q9-2vcp"],"summary":"ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the target","severity":"critical","score":9.1,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0369","wheels":["django_language_server-6.1.1-py3-none-macosx_10_12_x86_64.whl","django_language_server-6.1.1-py3-none-macosx_11_0_arm64.whl","django_language_server-6.1.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","django_language_server-6.1.1-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","django_language_server-6.1.1-py3-none-musllinux_1_2_aarch64.whl","django_language_server-6.1.1-py3-none-musllinux_1_2_x86_64.whl","django_language_server-6.1.1-py3-none-win_amd64.whl"]},{"id":"CVE-2026-115907","aliases":["GHSA-9hj8-73fh-9963"],"summary":"zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed size","severity":"high","score":7.5,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.0"],"url":"https://insights.sbomify.com/CVE-2026-115907/","wheels":["django_language_server-6.1.1-py3-none-macosx_10_12_x86_64.whl","django_language_server-6.1.1-py3-none-macosx_11_0_arm64.whl","django_language_server-6.1.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","django_language_server-6.1.1-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","django_language_server-6.1.1-py3-none-musllinux_1_2_aarch64.whl","django_language_server-6.1.1-py3-none-musllinux_1_2_x86_64.whl","django_language_server-6.1.1-py3-none-win_amd64.whl"]},{"id":"CVE-2026-115909","aliases":["GHSA-q7v9-x93c-xqv3","RUSTSEC-2026-0429"],"summary":"zip: `ZipArchive::extract` aborts the process on a symlink entry with a large declared size","severity":"high","score":7.5,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.0"],"url":"https://insights.sbomify.com/CVE-2026-115909/","wheels":["django_language_server-6.1.1-py3-none-macosx_10_12_x86_64.whl","django_language_server-6.1.1-py3-none-macosx_11_0_arm64.whl","django_language_server-6.1.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","django_language_server-6.1.1-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","django_language_server-6.1.1-py3-none-musllinux_1_2_aarch64.whl","django_language_server-6.1.1-py3-none-musllinux_1_2_x86_64.whl","django_language_server-6.1.1-py3-none-win_amd64.whl"]},{"id":"CVE-2026-115908","aliases":["GHSA-hjqx-j4rw-g7xv"],"summary":"zip: Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically. ","severity":"high","score":7.4,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.0"],"url":"https://insights.sbomify.com/CVE-2026-115908/","wheels":["django_language_server-6.1.1-py3-none-macosx_10_12_x86_64.whl","django_language_server-6.1.1-py3-none-macosx_11_0_arm64.whl","django_language_server-6.1.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","django_language_server-6.1.1-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","django_language_server-6.1.1-py3-none-musllinux_1_2_aarch64.whl","django_language_server-6.1.1-py3-none-musllinux_1_2_x86_64.whl","django_language_server-6.1.1-py3-none-win_amd64.whl"]},{"id":"CVE-2026-6654","aliases":["GHSA-xphw-cqx3-667j","RUSTSEC-2026-0103"],"summary":"Use-After-Free and Double Free in IntoIter::drop When Element Drop Panics","severity":"high","score":7.3,"package":"thin-vec","version":"0.2.14","ecosystem":"crates.io","purl":"pkg:cargo/thin-vec@0.2.14","fixed":["0.2.16"],"url":"https://insights.sbomify.com/CVE-2026-6654/","wheels":["django_language_server-6.1.1-py3-none-macosx_10_12_x86_64.whl","django_language_server-6.1.1-py3-none-macosx_11_0_arm64.whl","django_language_server-6.1.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","django_language_server-6.1.1-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","django_language_server-6.1.1-py3-none-musllinux_1_2_aarch64.whl","django_language_server-6.1.1-py3-none-musllinux_1_2_x86_64.whl","django_language_server-6.1.1-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0367","aliases":["GHSA-vv5m-jxxh-4627"],"summary":" Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege Escalation","severity":"high","score":7.3,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0367","wheels":["django_language_server-6.1.1-py3-none-macosx_10_12_x86_64.whl","django_language_server-6.1.1-py3-none-macosx_11_0_arm64.whl","django_language_server-6.1.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","django_language_server-6.1.1-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","django_language_server-6.1.1-py3-none-musllinux_1_2_aarch64.whl","django_language_server-6.1.1-py3-none-musllinux_1_2_x86_64.whl","django_language_server-6.1.1-py3-none-win_amd64.whl"]},{"id":"CVE-2026-25727","aliases":["GHSA-r6v5-fh4h-64xc","RUSTSEC-2026-0009"],"summary":"Denial of Service via Stack Exhaustion","severity":"medium","score":6.8,"package":"time","version":"0.3.44","ecosystem":"crates.io","purl":"pkg:cargo/time@0.3.44","fixed":["0.3.47"],"url":"https://insights.sbomify.com/CVE-2026-25727/","wheels":["django_language_server-6.1.1-py3-none-macosx_10_12_x86_64.whl","django_language_server-6.1.1-py3-none-macosx_11_0_arm64.whl","django_language_server-6.1.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","django_language_server-6.1.1-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","django_language_server-6.1.1-py3-none-musllinux_1_2_aarch64.whl","django_language_server-6.1.1-py3-none-musllinux_1_2_x86_64.whl","django_language_server-6.1.1-py3-none-win_amd64.whl"]},{"id":"CVE-2026-115906","aliases":["GHSA-8hxf-qr8p-62x4"],"summary":"zip: AES Entry HMAC Authentication Bypass on Premature EOF","severity":"medium","score":6.5,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.0"],"url":"https://insights.sbomify.com/CVE-2026-115906/","wheels":["django_language_server-6.1.1-py3-none-macosx_10_12_x86_64.whl","django_language_server-6.1.1-py3-none-macosx_11_0_arm64.whl","django_language_server-6.1.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","django_language_server-6.1.1-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","django_language_server-6.1.1-py3-none-musllinux_1_2_aarch64.whl","django_language_server-6.1.1-py3-none-musllinux_1_2_x86_64.whl","django_language_server-6.1.1-py3-none-win_amd64.whl"]},{"id":"CVE-2026-25541","aliases":["GHSA-434x-w66g-qw3r","RUSTSEC-2026-0007"],"summary":"Integer overflow in `BytesMut::reserve`","severity":"medium","score":5.5,"package":"bytes","version":"1.10.1","ecosystem":"crates.io","purl":"pkg:cargo/bytes@1.10.1","fixed":["1.11.1"],"url":"https://insights.sbomify.com/CVE-2026-25541/","wheels":["django_language_server-6.1.1-py3-none-macosx_10_12_x86_64.whl","django_language_server-6.1.1-py3-none-macosx_11_0_arm64.whl","django_language_server-6.1.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","django_language_server-6.1.1-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","django_language_server-6.1.1-py3-none-musllinux_1_2_aarch64.whl","django_language_server-6.1.1-py3-none-musllinux_1_2_x86_64.whl","django_language_server-6.1.1-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0204","aliases":[],"summary":"Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid","severity":"unknown","score":null,"package":"crossbeam-epoch","version":"0.9.18","ecosystem":"crates.io","purl":"pkg:cargo/crossbeam-epoch@0.9.18","fixed":["0.9.20"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0204","wheels":["django_language_server-6.1.1-py3-none-macosx_10_12_x86_64.whl","django_language_server-6.1.1-py3-none-macosx_11_0_arm64.whl","django_language_server-6.1.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","django_language_server-6.1.1-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","django_language_server-6.1.1-py3-none-musllinux_1_2_aarch64.whl","django_language_server-6.1.1-py3-none-musllinux_1_2_x86_64.whl","django_language_server-6.1.1-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0097","aliases":["GHSA-cq8v-f236-94qc"],"summary":"Rand is unsound with a custom logger using `rand::rng()`","severity":"unknown","score":null,"package":"rand","version":"0.8.5","ecosystem":"crates.io","purl":"pkg:cargo/rand@0.8.5","fixed":["0.8.6"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0097","wheels":["django_language_server-6.1.1-py3-none-macosx_10_12_x86_64.whl","django_language_server-6.1.1-py3-none-macosx_11_0_arm64.whl","django_language_server-6.1.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","django_language_server-6.1.1-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","django_language_server-6.1.1-py3-none-musllinux_1_2_aarch64.whl","django_language_server-6.1.1-py3-none-musllinux_1_2_x86_64.whl","django_language_server-6.1.1-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0386","aliases":[],"summary":"`AsyncFd::new` and related constructors violate I/O safety","severity":"unknown","score":null,"package":"tokio","version":"1.53.1","ecosystem":"crates.io","purl":"pkg:cargo/tokio@1.53.1","fixed":["1.53.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0386","wheels":["django_language_server-6.1.1-py3-none-macosx_10_12_x86_64.whl","django_language_server-6.1.1-py3-none-macosx_11_0_arm64.whl","django_language_server-6.1.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","django_language_server-6.1.1-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","django_language_server-6.1.1-py3-none-musllinux_1_2_aarch64.whl","django_language_server-6.1.1-py3-none-musllinux_1_2_x86_64.whl","django_language_server-6.1.1-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0368","aliases":["GHSA-4v9h-p7m9-rh26"],"summary":"zip: `ZipArchive::extract` creates symbolic links whose attacker-controlled targets are outside the destination directory","severity":"unknown","score":null,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0368","wheels":["django_language_server-6.1.1-py3-none-macosx_10_12_x86_64.whl","django_language_server-6.1.1-py3-none-macosx_11_0_arm64.whl","django_language_server-6.1.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","django_language_server-6.1.1-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","django_language_server-6.1.1-py3-none-musllinux_1_2_aarch64.whl","django_language_server-6.1.1-py3-none-musllinux_1_2_x86_64.whl","django_language_server-6.1.1-py3-none-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":7,"total_sboms":7,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"critical":2,"high":5,"medium":3,"unknown":4}}}