{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:d0c8bf8c-3ade-51ab-9487-dc438ef3f63f", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "pillow", "purl": "pkg:pypi/pillow@10.4.0.post11+tuxcare", "type": "library", "bom-ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare", "version": "10.4.0.post11+tuxcare", "pedigree": { "ancestors": [ { "name": "pillow", "purl": "pkg:pypi/pillow@10.4.0", "type": "library", "version": "10.4.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2026-112390", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:bee30b84-93c7-51de-aa1f-94c9335a68a1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112390 affects version 10.4.0.post11+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112391", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:66d80b74-3d06-5063-91d8-db2e3e93c07c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112391 affects version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112392", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:d8fd0bb4-140b-5ffc-9cf0-76cf0ed0f783", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112392 affects version 10.4.0.post11+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112393", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:c4cf82a3-7e00-5a89-a0f4-2df2157402f4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112393 affects version 10.4.0.post11+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112394", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:6ff4021f-c9ee-5d4c-b5c3-05aaab0d752b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112394 affects version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112395", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:d1e47c40-200e-5032-8cdb-14501b9dfc09", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112395 is fixed in version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112397", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:37665386-903b-5dc0-89fc-843f237f13ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112397 is fixed in version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112398", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:be8eb567-81f3-557b-ba9b-0954cdb8e12d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112398 affects version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112399", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:0e489f41-b413-5fb0-b919-cc84398faffa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112399 affects version 10.4.0.post11+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112400", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:a0469602-88bb-55d0-9836-8e80dd53917e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112400 is fixed in version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112401", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:6672dd02-9993-5fcb-b9da-f90a595ef30d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112401 affects version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112402", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:e90c89b8-77f4-5adc-905b-04f089fec11f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112402 affects version 10.4.0.post11+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112403", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:53808dbd-73c2-5dff-8fb0-cc1800495554", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112403 is fixed in version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112404", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:92ca75d3-cced-5b88-b028-988aa574ed80", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112404 is fixed in version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112406", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:5702ca07-d37e-586e-abf9-071809ab54df", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112406 affects version 10.4.0.post11+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112891", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:127a39bf-17b7-5306-8591-d1eb4beda34f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112891 affects version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112892", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:2f2f2d5e-840e-5be0-94ed-ec9e3d542d54", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112892 affects version 10.4.0.post11+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112893", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:a12873f7-00a9-5299-837f-0a3fba9fb123", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112893 affects version 10.4.0.post11+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112894", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:f6e2c4f5-c01f-5cde-8cbf-5a58f0b74cc0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112894 affects version 10.4.0.post11+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112895", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:16fac506-86fb-50b1-a1bb-4f5b1271bae9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112895 is fixed in version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112896", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:985ce153-f33f-5e8f-8d36-303d61cef820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112896 is fixed in version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112897", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:6c448474-c3ff-5b85-854a-335ca12063b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112897 is fixed in version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112898", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:c76b71db-7bdd-5e8c-9e67-b1d8f7faeb31", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112898 affects version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112899", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:8280e689-ddfc-5737-b7ef-dcd32d954c57", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112899 is fixed in version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112900", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:eabdad20-af9f-5e9c-922e-e8fa3f5fa1c8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112900 affects version 10.4.0.post11+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112901", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:09124281-f9c3-5963-978d-ef21df4bcdf6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112901 affects version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112902", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:ae66dfcc-ca78-5bcd-81eb-3452c8cecc3c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112902 affects version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-25990", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:1e69b978-d344-5b22-b798-55934689b407", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25990 is fixed in version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-40192", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:51420e7c-3d63-5319-8852-9ddfc80adc44", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40192 is fixed in version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-42308", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:f4cbc0aa-6454-5de4-a35d-7b184ed11e1a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42308 is fixed in version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-42310", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:b94b9ca5-53d6-513b-a027-bb37c64db876", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42310 is fixed in version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-42311", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:b6c912a0-6969-585a-ac27-bd0eaa548feb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42311 is fixed in version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-54058", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:674143d4-80f4-5f36-a461-7580709778f0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54058 is fixed in version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-54059", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:71fb64e0-eb10-546f-b631-793b8813bb4f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54059 is fixed in version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-54060", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:d6997718-d3e6-5274-902f-08a2a97d92dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54060 is fixed in version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-55379", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:924b3d88-b95e-56a8-b514-21ca933a9f4b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55379 is fixed in version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-55380", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:07789275-8842-5c85-8ec9-d14c9463574e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55380 is fixed in version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-55798", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:2f3d2024-baae-5add-9289-eddae9ff0ee3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55798 is fixed in version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-59197", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:f7800425-6a16-57b2-a300-475a06179d83", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59197 is fixed in version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-59198", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:28cd2687-da8c-55d9-9c82-37c287c5b50a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59198 is fixed in version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-59199", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:f96b9167-536f-56a0-890b-ff726b6cb7d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59199 is fixed in version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-59200", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:a4ec2268-af6d-591f-bdb1-7717d230dbd1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59200 is fixed in version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-59204", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:9a686396-282f-5e77-9365-d4bd8d4ea275", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59204 is fixed in version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-59205", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:1c804d42-4a64-58fb-832e-2977827dc582", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59205 is fixed in version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-96636", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:c8dbd9eb-041d-5dd1-a366-f7a20bbcc486", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96636 affects version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-96637", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:fd43a50e-8241-5d9c-a250-525646eb0af2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96637 affects version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-96638", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:ce983548-ff69-523f-b1a7-dcb91109ba25", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96638 affects version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-96640", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:5f2abdda-6f95-5f45-8833-d87d9345c3a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-96640 is fixed in version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-96641", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:67ef330a-7d6c-5bc3-b1ad-56f6dde3bdb5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96641 affects version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-96642", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:e571e445-891c-59a7-960a-2a6d3ed1bcff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96642 affects version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-96644", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:612de61d-3bfd-5186-a31a-19f8de9dd22c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96644 affects version 10.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-96778", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:c7e38eb1-16cc-5867-a4c2-29eef9c54e1d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96778 affects version 10.4.0.post11+tuxcare of pillow." } } ], "dependencies": [ { "ref": "pkg:pypi/pillow@10.4.0.post11+tuxcare" } ] }