{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a5789843-81e2-5577-a806-f4052c4bb118", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "pillow", "purl": "pkg:pypi/pillow@10.4.0.post10+tuxcare", "type": "library", "bom-ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare", "version": "10.4.0.post10+tuxcare", "pedigree": { "ancestors": [ { "name": "pillow", "purl": "pkg:pypi/pillow@10.4.0", "type": "library", "version": "10.4.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2026-112390", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:b8eb640b-2636-5263-8796-7d88cc4fcb29", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112390 affects version 10.4.0.post10+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112391", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:54d60781-2694-5b8b-8acd-2d634a25c416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112391 affects version 10.4.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-112392", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:033132c3-11e9-55b6-a9e7-7021c34371c1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112392 affects version 10.4.0.post10+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112393", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:6b151b2c-cbdc-5419-88ec-143472b6d8bb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112393 affects version 10.4.0.post10+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112394", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:56f47799-4a96-50b0-86c8-3cee4f40e23a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112394 affects version 10.4.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-112395", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:049a9b1c-287e-50c2-83b3-66de4319b2a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112395 affects version 10.4.0.post10+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112397", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:a6c0c597-6575-5ea3-8723-d15383c7c5f4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112397 affects version 10.4.0.post10+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112398", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:1863dd85-6ff7-5e60-b252-bc004b7b5a52", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112398 affects version 10.4.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-112399", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:c2b04f5c-1ca7-5943-83c2-f547673420c8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112399 affects version 10.4.0.post10+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112400", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:7c608712-411c-5217-a055-c9b6301daf19", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112400 affects version 10.4.0.post10+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112401", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:e7100968-438f-5d1c-8fcd-09f575d42cc9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112401 affects version 10.4.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-112402", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:f9337e31-f8e9-52c2-b33e-d6817d01ea76", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112402 affects version 10.4.0.post10+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112403", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:86f4722c-e995-5b29-9e44-c3ee1b664523", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112403 affects version 10.4.0.post10+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112404", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:462c15b6-422c-59bf-ba3f-841e1909de0a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112404 affects version 10.4.0.post10+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112406", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:fac4d8fb-3080-5e42-ada4-bda0ca52c1f2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112406 affects version 10.4.0.post10+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112891", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:b7b59fd2-30f0-5c05-b0cd-91d20a3575a3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112891 affects version 10.4.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-112892", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:60c1ba97-a473-52aa-a8c6-83bf10a95e95", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112892 affects version 10.4.0.post10+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112893", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:02f91574-47b4-5b75-a775-98258d84bd46", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112893 affects version 10.4.0.post10+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112894", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:cce9ef32-53f6-5788-9129-aa46125efc66", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112894 affects version 10.4.0.post10+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112895", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:bb6e3303-15a0-555d-b473-1d21575df664", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112895 affects version 10.4.0.post10+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112896", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:259067e3-e5f3-5bcb-9910-d0bc28dc79b2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112896 affects version 10.4.0.post10+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112897", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:1208f25b-52ba-5aa7-b4be-bc5b70132c3e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112897 affects version 10.4.0.post10+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112898", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:c9f856f4-bf27-5d87-8a62-b0dc88d23b65", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112898 affects version 10.4.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-112899", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:bf3e3ea0-e60a-5cf9-b141-07770af0a4e0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112899 affects version 10.4.0.post10+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112900", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:81c7cac9-ca3a-51c4-8bac-d1f06b4ede6b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112900 affects version 10.4.0.post10+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112901", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:210fc775-310f-596a-b797-00003551128e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112901 affects version 10.4.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-112902", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:ab38449d-d70e-541b-9580-0575817e2f4b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112902 affects version 10.4.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-25990", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:6b9031ee-0b00-5d2c-bc6a-ed884884b98d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25990 is fixed in version 10.4.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-40192", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:9070be22-cf65-5ac2-b5d1-772868bc06c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40192 is fixed in version 10.4.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-42308", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:dcb6f3ec-d5ad-58ff-b28e-a391962e4ae9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42308 is fixed in version 10.4.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-42310", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:f5c20e83-340f-53c1-9030-066a31f0c969", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42310 is fixed in version 10.4.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-42311", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:b1f404f6-26cf-5c20-8b7f-2a40bbdcde0b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42311 is fixed in version 10.4.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-54058", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:c3542b7d-7c8d-5e26-a454-b3c071f91c6e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54058 is fixed in version 10.4.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-54059", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:a1c1825b-fe9a-5f14-8a3f-71119e319f76", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54059 is fixed in version 10.4.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-54060", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:62b54c33-1bb1-56f9-9ced-ee5b9e157968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54060 is fixed in version 10.4.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-55379", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:dd92230b-c125-5982-8e7b-1571d89f1142", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55379 is fixed in version 10.4.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-55380", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:64544a92-4b26-543f-a879-3889e45c78c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55380 is fixed in version 10.4.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-55798", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:aa9d9ba0-017b-5a5a-bd90-167b85de4790", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55798 is fixed in version 10.4.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-59197", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:f4e326cd-c0fd-5f46-bec9-6174794c1339", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59197 is fixed in version 10.4.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-59198", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:c5501d5b-9dbb-550f-8203-7c89bf1286e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59198 is fixed in version 10.4.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-59199", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:9b4702c8-74c7-5eb9-80d3-03dec14d9790", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59199 is fixed in version 10.4.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-59200", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:e6751e26-0800-598e-bb85-1a775a653443", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59200 is fixed in version 10.4.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-59204", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:51e8aa2d-8121-56af-8f51-b73f1b0eaea9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59204 is fixed in version 10.4.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-59205", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:3000d132-f759-52b3-b3e8-62bb4de1f938", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59205 is fixed in version 10.4.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-96636", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:332a55ce-2304-50a6-ad4d-884dffff8788", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96636 affects version 10.4.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-96637", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:80167638-56f5-5a19-99b3-8e5f69604254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96637 affects version 10.4.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-96638", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:996221aa-2b19-5b06-86fc-fca46e94367a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96638 affects version 10.4.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-96640", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:3342d90e-91a8-5a81-afb0-83180cb0418e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96640 affects version 10.4.0.post10+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-96641", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:9a40bae3-6f6f-500c-a3f2-b71cf9bcf1b3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96641 affects version 10.4.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-96642", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:23d9599c-9565-53bc-97d1-e55416135ccb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96642 affects version 10.4.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-96644", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:bec9b1dd-0598-51a8-a485-e2474e9310aa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96644 affects version 10.4.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-96778", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:f6574fd4-3926-5eef-bc3a-efbc1b139082", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96778 affects version 10.4.0.post10+tuxcare of pillow." } } ], "dependencies": [ { "ref": "pkg:pypi/pillow@10.4.0.post10+tuxcare" } ] }