{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:ff5530f0-c07b-562e-9a7a-4886e2e0cad7", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "pillow", "purl": "pkg:pypi/pillow@10.4.0.post12+tuxcare", "type": "library", "bom-ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare", "version": "10.4.0.post12+tuxcare", "pedigree": { "ancestors": [ { "name": "pillow", "purl": "pkg:pypi/pillow@10.4.0", "type": "library", "version": "10.4.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2026-112390", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:68f5acde-e087-5c63-bf90-0dad306c2174", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112390 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-112391", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:8e46fd79-fe97-5575-84a7-e0ce6c792982", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112391 affects version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-112392", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:ff6da7d6-cfc4-5e16-88f1-f4c4be9bc75f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112392 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-112393", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:8ad4d629-f767-59e2-990e-37afd78ba663", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112393 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-112394", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:58167293-5608-55be-988c-2ac29433b690", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112394 affects version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-112395", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:d6bd6b79-dec2-5478-9649-91ed47e18ebc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112395 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-112397", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:39fbfa17-2dc3-5959-85cf-b547853efedb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112397 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-112398", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:5df5ec16-df9e-5a5f-90f1-f655ef657db1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112398 affects version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-112399", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:5c9c6989-dcf4-5749-a5f5-6bfc3ba70767", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112399 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-112400", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:287cd013-d28f-5fda-9e7d-ce58aebb9124", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112400 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-112401", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:5eecee62-03a6-5ae1-8f69-2d45d8284c0b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112401 affects version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-112402", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:37554f28-deb8-5141-a161-7c1e39386f03", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112402 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-112403", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:17118a04-0bdd-5bb3-8442-119df96bd069", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112403 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-112404", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:5140ff28-bbd0-52d3-b6ea-fb2687b0fe00", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112404 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-112406", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:5c41724e-4258-5d00-9471-42a4f7e29f47", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112406 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-112891", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:6fe74feb-4f42-5b8f-b32f-f6acae38d9dc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112891 affects version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-112892", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:77e07707-1da3-50ae-a45b-637948602525", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112892 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-112893", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:aeebe6c5-b93d-510f-ade1-6ee7b5c7a2db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112893 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-112894", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:12e23777-0c1b-5447-bbfe-0339b5ee6ef1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112894 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-112895", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:686e5e85-96c2-5fcf-bec9-7a54b5392367", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112895 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-112896", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:b94ed2ee-884d-5509-9c1f-4f54f037658b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112896 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-112897", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:a2f6ddfb-7c5f-50b6-a5ca-7e9f0bc5839f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112897 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-112898", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:5a58532c-6758-5d6e-b66a-1b793deba663", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112898 affects version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-112899", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:6a38d461-136f-516c-9ebd-d975b60a4e23", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112899 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-112900", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:357018d7-b1a1-5ffa-81cb-90113a9d7870", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112900 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-112901", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:37bab52e-4898-5138-a63c-d820ab3f8405", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112901 affects version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-112902", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:77c516e6-7f9b-5270-80d1-f2c3d7320d04", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112902 affects version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-25990", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:e72dda58-ffb0-5bd6-915b-9509573ec5e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25990 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-40192", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:ee387574-7da8-51df-8751-2b56a5e0383e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40192 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-42308", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:bde9cade-3fff-5b50-a889-3c5240169fe3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42308 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-42310", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:9e79fd95-55e4-5f93-9f36-dcd002615dd6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42310 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-42311", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:59f54292-c131-5ff2-ad20-9ed8c307a630", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42311 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-54058", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:39aa7c1b-f3e8-5add-bdbe-b3c4816a3f4f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54058 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-54059", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:ca45694f-d089-54a1-84be-2a4d1d1559ea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54059 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-54060", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:7df1b2e9-fdd2-5c46-935b-516aef2a098d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54060 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-55379", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:57e85bfc-7225-5617-82fd-bd57f3bb3a09", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55379 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-55380", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:b5a511d5-f7a0-5829-954f-aa4088beddf9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55380 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-55798", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:f18f983c-ad79-5670-bf53-49298f4c4296", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55798 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-59197", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:9b831174-1b22-5fb7-a637-10c323f9a39f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59197 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-59198", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:39a9d11e-b54a-5b49-8f4f-92a9011aa18c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59198 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-59199", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:90bc0902-981a-5fca-a40a-43defdc793af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59199 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-59200", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:bcb3e1e9-c668-5321-aca2-553ef9eb1a53", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59200 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-59204", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:a566f4a7-d430-58b0-9abb-deb903308b62", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59204 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-59205", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:4ec75493-524e-5b4f-bfe7-562810d78277", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59205 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-96636", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:d2453837-6373-5096-a57a-64cf0c6c39dc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96636 affects version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-96637", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:778216cd-d65a-583a-b63e-5c55d9aa23d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96637 affects version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-96638", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:b34cfeca-b30b-5809-a323-cd6cb815036e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96638 affects version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-96640", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:752f55ec-9bd8-5477-9466-baf8cf67a28b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-96640 is fixed in version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-96641", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:084a1b96-fed1-5ea0-ace1-e1df2cbbd4bd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96641 affects version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-96642", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:f52ff1d1-8a96-5b99-b59d-27f3958c0438", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96642 affects version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-96644", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:185ffecd-7d6d-53b8-8cd8-44199dde5369", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96644 affects version 10.4.0.post12+tuxcare of pillow." } }, { "id": "CVE-2026-96778", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ], "bom-ref": "urn:uuid:1fae3fef-41ab-5012-815a-83af2b4ebdd4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96778 affects version 10.4.0.post12+tuxcare of pillow." } } ], "dependencies": [ { "ref": "pkg:pypi/pillow@10.4.0.post12+tuxcare" } ] }