{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:d77b7d03-1a00-5193-9f17-e7a40dd5bfd8", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "pillow", "purl": "pkg:pypi/pillow@10.4.0.post9+tuxcare", "type": "library", "bom-ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare", "version": "10.4.0.post9+tuxcare", "pedigree": { "ancestors": [ { "name": "pillow", "purl": "pkg:pypi/pillow@10.4.0", "type": "library", "version": "10.4.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2026-112390", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:c66f6edd-9757-5f63-8322-02d07499b5ac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112390 affects version 10.4.0.post9+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112391", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:133c5aac-f46f-55bf-afd4-c0cd4a6e3944", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112391 affects version 10.4.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-112392", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:4adf9ee3-4f4c-546e-a13e-cbb7d2fc9979", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112392 affects version 10.4.0.post9+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112393", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:47ce21d6-d3bb-5104-a243-9d86fe9dc59c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112393 affects version 10.4.0.post9+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112394", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:e9e5bb7a-44f0-5673-b4c5-55147a792414", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112394 affects version 10.4.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-112395", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:3d937d3b-d4e2-5ef3-a207-5b03ed62a380", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112395 affects version 10.4.0.post9+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112397", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:29784e3e-d1e8-5a78-8ae0-71de0d403235", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112397 affects version 10.4.0.post9+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112398", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:67002ec0-7c29-5c34-9af1-65de9b5316b2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112398 affects version 10.4.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-112399", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:e6410d91-8bb7-5980-81c6-3d9c74973dff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112399 affects version 10.4.0.post9+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112400", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:1cd591c8-fc0f-5709-b112-2a989f892c77", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112400 affects version 10.4.0.post9+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112401", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:c7218d1d-da61-5961-9d99-3e26b308d5b6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112401 affects version 10.4.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-112402", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:24d7bbd2-1eb4-5c37-bce5-99bfdc63534a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112402 affects version 10.4.0.post9+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112403", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:e61ac414-82a3-5c03-bac4-ab126eba07c5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112403 affects version 10.4.0.post9+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112404", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:174f9228-7a97-54b2-9ec7-3d3f96d4c3f1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112404 affects version 10.4.0.post9+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112406", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:7b08f4ea-14e6-5316-a5ce-c173eb181cd7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112406 affects version 10.4.0.post9+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112891", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:125d2e58-d64d-5d37-b63d-2e8f1b49e556", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112891 affects version 10.4.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-112892", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:6c8c1964-969c-5961-adde-9a7efb6752ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112892 affects version 10.4.0.post9+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112893", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:615a189f-7cb4-52fd-a5a0-c510aaa48863", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112893 affects version 10.4.0.post9+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112894", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:a0a9827d-0f7e-57cc-aedc-5e81c0a01cb9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112894 affects version 10.4.0.post9+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112895", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:28907322-a9b0-58c6-a932-9b5d5156fce2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112895 affects version 10.4.0.post9+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112896", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:ec80d1fc-4de1-5c88-a098-e6e48a863f03", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112896 affects version 10.4.0.post9+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112897", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:d078b30d-8d5c-5f7e-b449-a0eff4b06a03", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112897 affects version 10.4.0.post9+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112898", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:7a6a0ba3-c78f-5023-841a-060327dca40f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112898 affects version 10.4.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-112899", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:949a8803-0131-5051-b4fc-716a086ea806", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112899 affects version 10.4.0.post9+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112900", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:44d5d220-632d-512b-a4dd-e68afed57113", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112900 affects version 10.4.0.post9+tuxcare of pillow, and is fixed in 10.4.0.post12+tuxcare." } }, { "id": "CVE-2026-112901", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:186814b0-1b9d-5f02-b1d1-5a356782b6c8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112901 affects version 10.4.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-112902", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:b52be274-cd9a-548e-a7cd-30dd262b20ae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112902 affects version 10.4.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-25990", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:cbb68fb8-57b5-5e23-8910-a982ea2b0764", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25990 is fixed in version 10.4.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-40192", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:b36e7acf-f90b-5766-bbaa-581b82d99d6f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40192 is fixed in version 10.4.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-42308", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:f6e2a11a-d1b4-599e-a42d-464ed9f6e61c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42308 affects version 10.4.0.post9+tuxcare of pillow, and is fixed in 10.4.0.post10+tuxcare." } }, { "id": "CVE-2026-42310", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:1eb325b6-19f2-5219-be70-e689462e7fd6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42310 is fixed in version 10.4.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-42311", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:6ccabfed-a136-5f9e-8afd-0d8da1d16954", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42311 is fixed in version 10.4.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-54058", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:abb0a729-1bf1-53ac-9005-efb264479f44", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54058 is fixed in version 10.4.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-54059", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:0c29c9c9-8993-559a-92f9-b72abb8fe3ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54059 is fixed in version 10.4.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-54060", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:85553e66-5f1a-5e4e-8474-ef953ef5027e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54060 is fixed in version 10.4.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-55379", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:91a0326c-2cce-53ac-ba17-a315ea45befc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55379 is fixed in version 10.4.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-55380", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:4811ceaa-7eb1-59ce-8268-f9fa362a7240", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55380 affects version 10.4.0.post9+tuxcare of pillow, and is fixed in 10.4.0.post10+tuxcare." } }, { "id": "CVE-2026-55798", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:93b9fd5d-0510-5592-957d-fe7ff82abff4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55798 is fixed in version 10.4.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-59197", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:67d9d444-f71d-5df7-80a2-5d233c1456b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59197 is fixed in version 10.4.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-59198", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:83bbe532-4349-5103-b404-54dfc2d42c2a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59198 affects version 10.4.0.post9+tuxcare of pillow, and is fixed in 10.4.0.post10+tuxcare." } }, { "id": "CVE-2026-59199", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:d0753636-a252-5558-9d59-5de0b9107967", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59199 is fixed in version 10.4.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-59200", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:ba5472df-1a31-5eb8-9933-6c6ded3cbef1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59200 is fixed in version 10.4.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-59204", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:12d537b8-ca3c-5f30-9298-fc90cdb8b329", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59204 affects version 10.4.0.post9+tuxcare of pillow, and is fixed in 10.4.0.post10+tuxcare." } }, { "id": "CVE-2026-59205", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:535edfad-bc53-5c8c-863d-9211b4229a72", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59205 is fixed in version 10.4.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-96636", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:a937d105-0568-5fca-adbd-c5e56b0896c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96636 affects version 10.4.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-96637", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:83a8afb8-90c7-5c48-96f1-a1966adb7c10", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96637 affects version 10.4.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-96638", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:1bc59b1a-e32f-5f0a-ac19-a13eedad42d9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96638 affects version 10.4.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-96640", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:da07e9f3-7e3a-5564-8cfa-77f1273b7c0d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96640 affects version 10.4.0.post9+tuxcare of pillow, and is fixed in 10.4.0.post11+tuxcare." } }, { "id": "CVE-2026-96641", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:1bc95eaf-d74f-52ba-99cc-800928b6638c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96641 affects version 10.4.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-96642", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:de29de82-48d7-58f4-91f3-9dfd5281f07b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96642 affects version 10.4.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-96644", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:bc837ffa-9b70-52bf-a94d-c3862704e71d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96644 affects version 10.4.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-96778", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:5f179d90-9815-5db9-81af-aaf8eec02085", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96778 affects version 10.4.0.post9+tuxcare of pillow." } } ], "dependencies": [ { "ref": "pkg:pypi/pillow@10.4.0.post9+tuxcare" } ] }