{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:f9f41ed8-a4cb-5fb5-89ff-78af90001a00", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "pillow", "purl": "pkg:pypi/pillow@10.4.0.post8+tuxcare", "type": "library", "bom-ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare", "version": "10.4.0.post8+tuxcare", "pedigree": { "ancestors": [ { "name": "pillow", "purl": "pkg:pypi/pillow@10.4.0", "type": "library", "version": "10.4.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2026-112390", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:b65a7f41-dec8-505c-b860-24a3eba3b945", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112390 affects version 10.4.0.post8+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112391", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:a9e9cd0e-ff35-514d-9038-c8c185b5bd2f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112391 affects version 10.4.0.post8+tuxcare of pillow." } }, { "id": "CVE-2026-112392", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:6f3d429a-6d6b-5c7a-b5a1-65829b57a06d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112392 affects version 10.4.0.post8+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112393", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:c83b4daf-353f-5d9f-92af-68c61dc841be", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112393 affects version 10.4.0.post8+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112394", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:efdde57a-17f3-5978-9970-693efe4b51fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112394 affects version 10.4.0.post8+tuxcare of pillow." } }, { "id": "CVE-2026-112395", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:2afc66d0-26af-548c-a93e-22bb82e597e8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112395 affects version 10.4.0.post8+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112397", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:a5b7f1ae-4915-55bf-a83b-2022254053f5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112397 affects version 10.4.0.post8+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112398", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:892656d4-7b98-5834-adc9-9fdb16daf32e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112398 affects version 10.4.0.post8+tuxcare of pillow." } }, { "id": "CVE-2026-112399", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:52a3abcb-5a04-50f3-8c08-a2d3565d7486", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112399 affects version 10.4.0.post8+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112400", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:3d7c0adf-b1b0-555c-9226-e88910aac808", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112400 affects version 10.4.0.post8+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112401", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:09f1f960-f70e-5b0f-86b6-3dfa1b7a75a8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112401 affects version 10.4.0.post8+tuxcare of pillow." } }, { "id": "CVE-2026-112402", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:f6040275-0b59-5dab-8a77-1c319bb6b0ea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112402 affects version 10.4.0.post8+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112403", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:3e7814f9-4820-5370-8a85-f95021d1d86e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112403 affects version 10.4.0.post8+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112404", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:f0c7a291-1cd7-5b50-a198-e7107dd06c37", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112404 affects version 10.4.0.post8+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112406", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:aa4af4e1-d1de-59c8-8636-b131bef2bdd7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112406 affects version 10.4.0.post8+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112891", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:fc3f3989-48b8-5a6c-b9b9-bcf6182cf957", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112891 affects version 10.4.0.post8+tuxcare of pillow." } }, { "id": "CVE-2026-112892", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:3ba50d2f-d0ee-50cd-ab6e-e4c1171476d7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112892 affects version 10.4.0.post8+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112893", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:45052d6e-b301-5966-91c8-322eaa9fb6e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112893 affects version 10.4.0.post8+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112894", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:527800d7-c741-51d8-9518-ffe5a7165f9b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112894 affects version 10.4.0.post8+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112895", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:1fb15a74-22ba-5f93-973e-60bf5eaed82e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112895 affects version 10.4.0.post8+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112896", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:10dffdd8-fb1c-569f-9022-51a4b7554811", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112896 affects version 10.4.0.post8+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112897", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:66c4041d-6717-5b41-b44d-5886acb313bb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112897 affects version 10.4.0.post8+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112898", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:870c6500-54c5-5e27-8fd8-866969c31d12", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112898 affects version 10.4.0.post8+tuxcare of pillow." } }, { "id": "CVE-2026-112899", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:e4280924-0178-5125-b66c-244b9617d46b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112899 affects version 10.4.0.post8+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112900", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:883048a2-88a4-57d0-aedc-131619574ea1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112900 affects version 10.4.0.post8+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112901", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:1e87e191-98f7-50fb-8525-0233d9cc4641", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112901 affects version 10.4.0.post8+tuxcare of pillow." } }, { "id": "CVE-2026-112902", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:ceb1cc2e-2a83-5413-8a4b-9b9b868b1318", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112902 affects version 10.4.0.post8+tuxcare of pillow." } }, { "id": "CVE-2026-25990", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:8a561bc2-d214-5b8c-8668-02eac60354cf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25990 is fixed in version 10.4.0.post8+tuxcare of pillow." } }, { "id": "CVE-2026-40192", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:6db342fc-8315-566a-b587-869bd3e28029", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40192 is fixed in version 10.4.0.post8+tuxcare of pillow." } }, { "id": "CVE-2026-42308", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:e6a2bf60-2cea-53c1-996a-00e21259ee5f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42308 affects version 10.4.0.post8+tuxcare of pillow, and is fixed in 10.4.0.post10+tuxcare." } }, { "id": "CVE-2026-42310", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:85ca4a9a-9135-5a46-9c13-ab970eac54d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42310 is fixed in version 10.4.0.post8+tuxcare of pillow." } }, { "id": "CVE-2026-42311", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:ae4817eb-5389-5060-8921-7fe58262e4a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42311 is fixed in version 10.4.0.post8+tuxcare of pillow." } }, { "id": "CVE-2026-54058", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:1d180934-f9f1-5830-bb84-f19289fb137a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54058 is fixed in version 10.4.0.post8+tuxcare of pillow." } }, { "id": "CVE-2026-54059", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:f2acc14c-531c-5d31-a933-7359e78daba9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54059 is fixed in version 10.4.0.post8+tuxcare of pillow." } }, { "id": "CVE-2026-54060", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:6330c658-cf8f-57e0-a3c8-b8b0c468297e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54060 is fixed in version 10.4.0.post8+tuxcare of pillow." } }, { "id": "CVE-2026-55379", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:9a762a90-531b-506c-a193-c6e451378878", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55379 is fixed in version 10.4.0.post8+tuxcare of pillow." } }, { "id": "CVE-2026-55380", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:c8d3c803-cfc9-50d7-bb92-e484154046dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55380 affects version 10.4.0.post8+tuxcare of pillow, and is fixed in 10.4.0.post10+tuxcare." } }, { "id": "CVE-2026-55798", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:bfedef0d-69a3-50b7-b6b2-305d8e4b4f90", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55798 is fixed in version 10.4.0.post8+tuxcare of pillow." } }, { "id": "CVE-2026-59197", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:9adab01d-3980-5661-9915-8e6aed8bea02", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59197 affects version 10.4.0.post8+tuxcare of pillow, and is fixed in 10.4.0.post9+tuxcare." } }, { "id": "CVE-2026-59198", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:aff8845f-8989-56b1-84d6-bccece4cabff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59198 affects version 10.4.0.post8+tuxcare of pillow, and is fixed in 10.4.0.post10+tuxcare." } }, { "id": "CVE-2026-59199", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:164d8794-9ec0-57e5-a993-2152da2815c4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59199 is fixed in version 10.4.0.post8+tuxcare of pillow." } }, { "id": "CVE-2026-59200", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:eacdff26-d7bf-5138-a366-d0890b60ba26", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59200 is fixed in version 10.4.0.post8+tuxcare of pillow." } }, { "id": "CVE-2026-59204", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:c6247313-1430-54a6-821a-a21ecdd05ecc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59204 affects version 10.4.0.post8+tuxcare of pillow, and is fixed in 10.4.0.post10+tuxcare." } }, { "id": "CVE-2026-59205", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:41802d3e-3aaf-5364-9d7d-6326fd8b2f33", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59205 affects version 10.4.0.post8+tuxcare of pillow, and is fixed in 10.4.0.post9+tuxcare." } }, { "id": "CVE-2026-96636", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:aad5ca37-a577-5d63-97c0-3306154d8b70", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96636 affects version 10.4.0.post8+tuxcare of pillow." } }, { "id": "CVE-2026-96637", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:66c15ad5-202a-5661-be61-5122785c354b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96637 affects version 10.4.0.post8+tuxcare of pillow." } }, { "id": "CVE-2026-96638", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:2d9c6dd0-631b-5bcb-a036-730785c56645", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96638 affects version 10.4.0.post8+tuxcare of pillow." } }, { "id": "CVE-2026-96640", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:0a5a0573-9f67-56f4-8161-e798b1dc11ad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96640 affects version 10.4.0.post8+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-96641", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:62e91545-1a61-537a-ba3c-dbed4f611b19", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96641 affects version 10.4.0.post8+tuxcare of pillow." } }, { "id": "CVE-2026-96642", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:fd961584-e9d6-54de-9710-7bb9f24b788c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96642 affects version 10.4.0.post8+tuxcare of pillow." } }, { "id": "CVE-2026-96644", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:7aeb04de-84c6-5258-8081-54f10882de81", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96644 affects version 10.4.0.post8+tuxcare of pillow." } }, { "id": "CVE-2026-96778", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:80d8fdf7-4abf-5237-9032-921629e4b254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96778 affects version 10.4.0.post8+tuxcare of pillow." } } ], "dependencies": [ { "ref": "pkg:pypi/pillow@10.4.0.post8+tuxcare" } ] }