{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:7d8aa0e7-34d5-5856-8655-7db0662a1a73", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "pillow", "purl": "pkg:pypi/pillow@9.5.0.post10+tuxcare", "type": "library", "bom-ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare", "version": "9.5.0.post10+tuxcare", "pedigree": { "ancestors": [ { "name": "pillow", "purl": "pkg:pypi/pillow@9.5.0", "type": "library", "version": "9.5.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2023-44271", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:d18acd93-7b72-5bf7-94b2-9684f0d0c54a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-44271 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2023-4863", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:38250180-1a8a-50d0-88b6-0f5d4ca765f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-4863 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2023-50447", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:7618a775-1bbc-546c-b63b-171ed8d1f782", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-50447 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2024-28219", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:1a127c31-f7e6-5644-80ea-bfca917a6538", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-28219 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-112390", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:7c80d82a-b986-549d-9cc3-3a392d7f840a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112390 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-112391", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:dbeeab1d-1407-578f-a02a-6d42945879c0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112391 affects version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-112392", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:4742f0cf-4617-5469-8a68-86329932027e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112392 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-112393", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:8e65911f-33d1-5020-9088-3fa8a2f17d82", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112393 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-112394", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:4fad8eb1-a81b-561c-8acc-46012be024c0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112394 affects version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-112395", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:4263132e-d2b1-511d-9a99-5ef2c2889c75", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112395 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-112397", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:df71e4d5-7c7e-5260-a3c9-219bc51f32e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112397 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-112398", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:45782e21-3e9a-50c6-863c-026d85359a68", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112398 affects version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-112399", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:4945219f-2c97-5b60-b313-cd47dcfea3f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112399 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-112400", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:097640aa-4eba-5036-acab-9834de958940", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112400 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-112401", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:d0059f67-a2ac-53f6-8a7c-43387f99b836", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112401 affects version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-112402", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:6f2d5279-2268-5140-871a-412a4152421e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112402 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-112403", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:ad7404e1-6f98-5500-81f7-d3812b8e13ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112403 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-112404", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:0a29c539-9d54-5e25-91a8-38fff3e545cf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112404 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-112406", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:af38af48-7b0f-5564-8744-f13128a56356", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112406 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-112891", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:8037407c-46df-5a37-9622-125f0d3dc0bb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112891 affects version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-112892", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:9d3373be-d68e-522a-977f-e9f19a8fc1c3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112892 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-112894", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:819760c3-5b9d-5ca2-98be-24a8b559815d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112894 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-112895", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:e9451e40-012c-5d53-8e5b-fd24e171016e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112895 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-112896", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:05b0563c-cd32-5daa-ba11-bfb9880cb6f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112896 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-112897", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:36efa84c-c5b6-5de1-8ec1-21765a7d1fe2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112897 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-112898", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:28719a8a-ba0b-5153-9db4-3d7e3fa2dfa5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112898 affects version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-112899", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:1fea5760-1e3b-5d3a-bb78-e8c088b6f50c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112899 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-112900", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:46f8c9a8-6f48-52eb-84ad-66efded98904", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112900 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-112901", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:917de537-7195-5305-9ca9-40fe46b5cfeb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112901 affects version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-112902", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:4b89e79c-6653-525e-8654-3cd92e902506", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112902 affects version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-42308", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:7eb4a5e3-8562-597b-ac78-13618ca09c0f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42308 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-42310", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:4d6770b2-8ea3-5f16-a07f-4d6453f1c529", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42310 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-54058", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:19fa3d1d-2b98-55a6-9e2a-f5916a176e6a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54058 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-54059", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:30843732-7186-52a1-8689-99c9192434b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54059 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-54060", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:0a0a0381-a736-5446-9f94-ecbb1ef2828d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54060 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-55379", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:28b6c766-8d94-53ef-9bc2-04a01bb8639b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55379 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-55380", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:29f43af0-a4b1-541f-be78-4dfa987b2af0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55380 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-55798", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:c140bfd1-b4dc-5d9e-bdf7-bd13048c6e3a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55798 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-59197", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:5155c714-92c1-5fef-b345-cca1584d63e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59197 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-59198", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:dfed6fe9-cacb-503a-b034-3665cab0c455", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59198 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-59199", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:7ea8a3b8-4187-52be-b4c8-dc40924b20ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59199 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-59200", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:a1cb7d02-e2f6-547f-9187-6265d0936ef8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59200 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-59204", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:c92abe3b-cd8d-5b6e-97d1-a5c4634a5846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59204 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-59205", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:f25dab7f-5a90-518b-b91a-8c66bff5736f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59205 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-96636", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:b83078ef-24fd-56f2-a8c9-5d98df313ac9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96636 affects version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-96637", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:29bfb900-6444-53c4-8e31-4983e6206cd1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96637 affects version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-96638", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:feec1f8a-3937-56ad-bfd0-e5501af29f13", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96638 affects version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-96640", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:b5cecb2a-4c79-55af-be41-50247a81aefa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-96640 is fixed in version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-96641", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:940af44c-9def-5133-8fe0-879a58ef188c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96641 affects version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-96642", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:5806d7cc-efa2-51ac-9635-83ba5dbd36e8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96642 affects version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-96644", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:8652814a-d9d3-543e-9f24-3743996df962", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96644 affects version 9.5.0.post10+tuxcare of pillow." } }, { "id": "CVE-2026-96778", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:a4779515-dc08-5133-b8f4-753954175f80", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96778 affects version 9.5.0.post10+tuxcare of pillow." } }, { "id": "GHSA-56pw-mpj4-fxww", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ], "bom-ref": "urn:uuid:2d5c6cee-6662-57a3-bbb7-b7a2c2108a22", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-56pw-mpj4-fxww is a false positive for pillow 9.5.0.post10+tuxcare." } } ], "dependencies": [ { "ref": "pkg:pypi/pillow@9.5.0.post10+tuxcare" } ] }