{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:9973ab00-6c6f-5c9a-a93c-bd68f8da931b", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "pillow", "purl": "pkg:pypi/pillow@10.4.0.post7+tuxcare", "type": "library", "bom-ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare", "version": "10.4.0.post7+tuxcare", "pedigree": { "ancestors": [ { "name": "pillow", "purl": "pkg:pypi/pillow@10.4.0", "type": "library", "version": "10.4.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2026-112390", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:d1104fdf-2087-57f9-a39b-c9e52caf91f5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112390 affects version 10.4.0.post7+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112391", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:4adf9744-82d8-50b6-ba78-db224ac391fe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112391 affects version 10.4.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-112392", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:e1e46606-26a4-5233-a456-4ce4f521cd5f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112392 affects version 10.4.0.post7+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112393", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:5e9d3bee-4db6-50a8-a979-7048082c227f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112393 affects version 10.4.0.post7+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112394", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:d0a8bbb5-c6cc-5565-af85-6bee49258c4a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112394 affects version 10.4.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-112395", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:aea05135-326f-5722-8d24-48cef0ad464e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112395 affects version 10.4.0.post7+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112397", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:d3766085-967e-5a88-bea4-263a934be02b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112397 affects version 10.4.0.post7+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112398", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:ca6fec7f-2aed-54e2-9fd9-b45c8c12f756", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112398 affects version 10.4.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-112399", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:6ae5f923-af6e-509e-9a3d-5011adfe2e56", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112399 affects version 10.4.0.post7+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112400", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:1071db7c-efde-5ca6-98a0-7370b8de6a8d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112400 affects version 10.4.0.post7+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112401", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:9528c62d-a8dd-5cdf-a57a-80d752f83fad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112401 affects version 10.4.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-112402", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:07c3a4a6-2623-5673-817d-1949b1dbf9ec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112402 affects version 10.4.0.post7+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112403", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:1db18a54-165a-582d-8f0f-7fe3e292fd1b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112403 affects version 10.4.0.post7+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112404", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:d9c0038a-6aa8-5ff2-bace-731ab03629ac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112404 affects version 10.4.0.post7+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112406", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:35e65f71-f371-54fc-b59d-d6459ee9a19b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112406 affects version 10.4.0.post7+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112891", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:ab187040-19c8-537e-b73f-3166c82f66c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112891 affects version 10.4.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-112892", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:d20b8d2e-5c76-5568-a623-83e04c544b39", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112892 affects version 10.4.0.post7+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112893", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:9caeb9d4-e79b-5dfc-a883-9dc61ba9f0ba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112893 affects version 10.4.0.post7+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112894", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:7c3685b9-0bd7-5a6a-bef7-1ab32726a857", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112894 affects version 10.4.0.post7+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112895", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:c583d696-a354-590c-847b-c31fd9f00a9d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112895 affects version 10.4.0.post7+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112896", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:66171cb7-fc96-57c1-ace9-c47ffcc2fbe1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112896 affects version 10.4.0.post7+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112897", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:09176e45-cb96-58d7-af8a-4c8b476fcb62", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112897 affects version 10.4.0.post7+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112898", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:c6fc94bf-b5d2-519b-89ab-da59ea39db03", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112898 affects version 10.4.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-112899", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:50d8af83-d213-5563-8fbc-43713a19bfef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112899 affects version 10.4.0.post7+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112900", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:0aa7485b-6eb6-583c-9c87-34d6d221c451", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112900 affects version 10.4.0.post7+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112901", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:748897fc-9468-5a17-a092-f47e80ce5a52", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112901 affects version 10.4.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-112902", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:361f483a-08ac-5bf9-897b-e2448abd5ff0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112902 affects version 10.4.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-25990", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:b6210c1c-4567-5810-95fc-9806d43c1ec1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25990 is fixed in version 10.4.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-40192", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:af7012a0-fdd3-5085-999e-fa2bf4c917df", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40192 is fixed in version 10.4.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-42308", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:278fbfb0-d0e7-50f5-993f-4f724a5049aa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42308 affects version 10.4.0.post7+tuxcare of pillow, and is fixed in 10.4.0.post10+tuxcare." } }, { "id": "CVE-2026-42310", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:855f1653-d152-5eda-ae13-e8a8bfd1a343", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42310 is fixed in version 10.4.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-42311", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:69673790-a964-50d2-949b-8efb89dc8bf2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42311 affects version 10.4.0.post7+tuxcare of pillow, and is fixed in 10.4.0.post8+tuxcare." } }, { "id": "CVE-2026-54058", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:1035db83-be87-5a5d-bfc9-a16b4ac2901f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54058 is fixed in version 10.4.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-54059", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:15b4a82d-e268-5240-b66d-cd64987a8af0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54059 is fixed in version 10.4.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-54060", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:e5883b3a-855e-5b90-aaa8-3048519d73d2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54060 is fixed in version 10.4.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-55379", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:32f209cf-a3db-565b-9db1-6f2edfd9eea8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55379 is fixed in version 10.4.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-55380", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:f084596f-2222-58af-9cd8-c3b218ea9aa5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55380 affects version 10.4.0.post7+tuxcare of pillow, and is fixed in 10.4.0.post10+tuxcare." } }, { "id": "CVE-2026-55798", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:712b0245-20c9-5a99-8b4e-c0fb35022f90", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55798 is fixed in version 10.4.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-59197", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:5612a9bd-4b98-567a-aee8-2d0899352831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59197 affects version 10.4.0.post7+tuxcare of pillow, and is fixed in 10.4.0.post9+tuxcare." } }, { "id": "CVE-2026-59198", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:4e5d9080-7ce1-532c-b2b0-92ad9c73276a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59198 affects version 10.4.0.post7+tuxcare of pillow, and is fixed in 10.4.0.post10+tuxcare." } }, { "id": "CVE-2026-59199", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:b330cfe1-3344-52ad-b1e4-1daaac5a0b23", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59199 is fixed in version 10.4.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-59200", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:f0f92f81-8c07-5db6-9767-633b14e35fde", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59200 is fixed in version 10.4.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-59204", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:9bb7ae4b-331b-5b22-ab02-074a64410970", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59204 affects version 10.4.0.post7+tuxcare of pillow, and is fixed in 10.4.0.post10+tuxcare." } }, { "id": "CVE-2026-59205", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:32e27dce-206c-58e4-9d4f-9de9a7d5ceb5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59205 affects version 10.4.0.post7+tuxcare of pillow, and is fixed in 10.4.0.post9+tuxcare." } }, { "id": "CVE-2026-96636", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:839153dd-5c2c-560f-ad68-a5464504b268", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96636 affects version 10.4.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-96637", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:03dfa21a-7ff5-552a-8cb2-1ff8f9dda510", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96637 affects version 10.4.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-96638", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:47469fb4-66fb-5b2a-b5f6-18353ab83258", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96638 affects version 10.4.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-96640", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:cefe3270-7157-5198-983e-cab0449811cb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96640 affects version 10.4.0.post7+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-96641", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:1bd3dc99-c116-59be-a6ac-3e0836b99a86", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96641 affects version 10.4.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-96642", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:5d50e7b0-e968-5379-9f4b-b869c55010d7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96642 affects version 10.4.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-96644", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:c453fb2a-c169-50c8-b4a0-875d62c6ff13", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96644 affects version 10.4.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-96778", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:0224add5-e322-5443-986b-902f60e2b683", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96778 affects version 10.4.0.post7+tuxcare of pillow." } } ], "dependencies": [ { "ref": "pkg:pypi/pillow@10.4.0.post7+tuxcare" } ] }