{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:57bdb8c3-86c1-539d-821e-16bb473a16ef", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "pillow", "purl": "pkg:pypi/pillow@9.5.0.post5+tuxcare", "type": "library", "bom-ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare", "version": "9.5.0.post5+tuxcare", "pedigree": { "ancestors": [ { "name": "pillow", "purl": "pkg:pypi/pillow@9.5.0", "type": "library", "version": "9.5.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2023-44271", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:ce1adc89-8ba4-59f2-a91d-3d5f09b046c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-44271 is fixed in version 9.5.0.post5+tuxcare of pillow." } }, { "id": "CVE-2023-4863", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:9eb6b883-6f6d-5059-b1ef-9e9b7ae81a22", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-4863 is fixed in version 9.5.0.post5+tuxcare of pillow." } }, { "id": "CVE-2023-50447", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:93f3d5ef-798a-5915-85c0-d31a462ff329", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-50447 is fixed in version 9.5.0.post5+tuxcare of pillow." } }, { "id": "CVE-2024-28219", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:b943eeb6-ccb9-5144-8e15-850fb04b199b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-28219 is fixed in version 9.5.0.post5+tuxcare of pillow." } }, { "id": "CVE-2026-112390", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:39fcadc0-87c8-53fc-b293-3691b6f946de", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112390 affects version 9.5.0.post5+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112391", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:8d38b366-4652-55a0-9936-cd7d268d0b7c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112391 affects version 9.5.0.post5+tuxcare of pillow." } }, { "id": "CVE-2026-112392", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:741f6d6d-838b-5028-8935-74dd264eb63f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112392 affects version 9.5.0.post5+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112393", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:2d079338-c0d3-5eee-b2cf-a0eb4fb8aa50", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112393 affects version 9.5.0.post5+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112394", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:c5fc7827-5977-5d21-b511-0810bebda65a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112394 affects version 9.5.0.post5+tuxcare of pillow." } }, { "id": "CVE-2026-112395", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:1a1d11c8-82a4-5327-9972-8410084a3b5d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112395 affects version 9.5.0.post5+tuxcare of pillow, and is fixed in 9.5.0.post9+tuxcare." } }, { "id": "CVE-2026-112397", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:c4e2f6f3-8db3-58c4-8b5f-d2c4d1943569", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112397 affects version 9.5.0.post5+tuxcare of pillow, and is fixed in 9.5.0.post9+tuxcare." } }, { "id": "CVE-2026-112398", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:62b2158d-c944-5ee8-abb7-4e6a8ab7d8c7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112398 affects version 9.5.0.post5+tuxcare of pillow." } }, { "id": "CVE-2026-112399", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:819fd65b-b911-50c7-8ae6-7b237acd4b0e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112399 affects version 9.5.0.post5+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112400", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:4501142e-7100-553e-87d5-27c46a43a7ef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112400 affects version 9.5.0.post5+tuxcare of pillow, and is fixed in 9.5.0.post9+tuxcare." } }, { "id": "CVE-2026-112401", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:d8f67ca8-10c7-52a5-8f5b-97275af5b15c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112401 affects version 9.5.0.post5+tuxcare of pillow." } }, { "id": "CVE-2026-112402", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:bcc341a8-55f6-5858-b0cf-41b4e0f61dcd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112402 affects version 9.5.0.post5+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112403", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:b43f96a4-f5df-50f9-a469-2da007a14a03", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112403 affects version 9.5.0.post5+tuxcare of pillow, and is fixed in 9.5.0.post9+tuxcare." } }, { "id": "CVE-2026-112404", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:92e044fb-0258-5ad4-9570-5208e93faf5e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112404 affects version 9.5.0.post5+tuxcare of pillow, and is fixed in 9.5.0.post9+tuxcare." } }, { "id": "CVE-2026-112406", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:9b5af1fb-f28e-52cb-83f5-be74b9985bd7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112406 affects version 9.5.0.post5+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112891", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:122a0bad-ee2a-53e8-8743-fdc2bac5824c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112891 affects version 9.5.0.post5+tuxcare of pillow." } }, { "id": "CVE-2026-112892", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:03bc98e3-ed6a-5c18-b5bf-3eb4928ce421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112892 affects version 9.5.0.post5+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112894", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:37ec5334-a16b-53e5-aabf-ecfb0d827f74", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112894 affects version 9.5.0.post5+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112895", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:f78b54d8-2924-50c2-af55-e12fae4329e1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112895 affects version 9.5.0.post5+tuxcare of pillow, and is fixed in 9.5.0.post9+tuxcare." } }, { "id": "CVE-2026-112896", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:b1901945-491d-52b9-bce1-04d9fcdc1346", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112896 affects version 9.5.0.post5+tuxcare of pillow, and is fixed in 9.5.0.post9+tuxcare." } }, { "id": "CVE-2026-112897", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:7290de71-6b38-5b25-9c95-5a3560af4d1c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112897 affects version 9.5.0.post5+tuxcare of pillow, and is fixed in 9.5.0.post9+tuxcare." } }, { "id": "CVE-2026-112898", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:51cbd9ba-7f7c-5bc0-b593-d02b902bda8d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112898 affects version 9.5.0.post5+tuxcare of pillow." } }, { "id": "CVE-2026-112899", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:cf308a45-be47-5761-ac53-603945466711", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112899 affects version 9.5.0.post5+tuxcare of pillow, and is fixed in 9.5.0.post9+tuxcare." } }, { "id": "CVE-2026-112900", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:c9f6b525-6a7a-58b9-9c3f-02c0ecc38299", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112900 affects version 9.5.0.post5+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112901", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:1fa7f485-403e-5ade-8a5e-6d9996314dce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112901 affects version 9.5.0.post5+tuxcare of pillow." } }, { "id": "CVE-2026-112902", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:f8a97f6d-0e1e-5055-b75f-14044e9fb4d3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112902 affects version 9.5.0.post5+tuxcare of pillow." } }, { "id": "CVE-2026-42308", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:ad8e3304-4311-5191-9317-53b35c5d60ac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42308 affects version 9.5.0.post5+tuxcare of pillow, and is fixed in 9.5.0.post8+tuxcare." } }, { "id": "CVE-2026-42310", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:2afb2227-eb68-5bf6-a3db-8ef15e2dc4ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42310 is fixed in version 9.5.0.post5+tuxcare of pillow." } }, { "id": "CVE-2026-54058", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:dca5daeb-ae81-501e-a331-035e6818fac1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54058 is fixed in version 9.5.0.post5+tuxcare of pillow." } }, { "id": "CVE-2026-54059", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:8dd7733d-9ccd-5434-b7e3-345727f7ce20", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54059 is fixed in version 9.5.0.post5+tuxcare of pillow." } }, { "id": "CVE-2026-54060", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:945ab5ed-0a85-5e1d-a381-f03fb5b30598", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54060 is fixed in version 9.5.0.post5+tuxcare of pillow." } }, { "id": "CVE-2026-55379", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:817703db-5688-5273-bf4f-716e56b319fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55379 is fixed in version 9.5.0.post5+tuxcare of pillow." } }, { "id": "CVE-2026-55380", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:20802772-ef73-5b4e-9be6-5d6a82292c2c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55380 affects version 9.5.0.post5+tuxcare of pillow, and is fixed in 9.5.0.post8+tuxcare." } }, { "id": "CVE-2026-55798", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:a1c560f6-34b3-5f38-b491-8fe954401446", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55798 is fixed in version 9.5.0.post5+tuxcare of pillow." } }, { "id": "CVE-2026-59197", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:cfea5027-345d-5f83-86e3-9c183f451020", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59197 affects version 9.5.0.post5+tuxcare of pillow, and is fixed in 9.5.0.post7+tuxcare." } }, { "id": "CVE-2026-59198", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:131a9f01-474e-5891-896f-11e275432fa2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59198 affects version 9.5.0.post5+tuxcare of pillow, and is fixed in 9.5.0.post8+tuxcare." } }, { "id": "CVE-2026-59199", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:2acd203b-28e5-5883-9c8d-320363e7c08b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59199 affects version 9.5.0.post5+tuxcare of pillow, and is fixed in 9.5.0.post6+tuxcare." } }, { "id": "CVE-2026-59200", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:d678b6a3-21c0-5ac2-9da8-f07f00f51196", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59200 affects version 9.5.0.post5+tuxcare of pillow, and is fixed in 9.5.0.post6+tuxcare." } }, { "id": "CVE-2026-59204", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:8ebdc59a-68c1-51b7-87d6-5b655825538e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59204 affects version 9.5.0.post5+tuxcare of pillow, and is fixed in 9.5.0.post8+tuxcare." } }, { "id": "CVE-2026-59205", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:81a9046f-f590-5e9f-88c5-09439680b046", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59205 affects version 9.5.0.post5+tuxcare of pillow, and is fixed in 9.5.0.post7+tuxcare." } }, { "id": "CVE-2026-96636", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:66f63ecd-b208-5829-b29c-88b5f8ac228a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96636 affects version 9.5.0.post5+tuxcare of pillow." } }, { "id": "CVE-2026-96637", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:c1d19027-f68a-5e20-b035-020935251530", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96637 affects version 9.5.0.post5+tuxcare of pillow." } }, { "id": "CVE-2026-96638", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:94b246f4-b6ef-57c5-b843-d37d6150d34c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96638 affects version 9.5.0.post5+tuxcare of pillow." } }, { "id": "CVE-2026-96640", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:63a68de4-aab9-5108-bddb-d713e5891a45", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96640 affects version 9.5.0.post5+tuxcare of pillow, and is fixed in 9.5.0.post9+tuxcare." } }, { "id": "CVE-2026-96641", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:3f105b9e-1bb0-54ca-a5d8-c90e4b45dc3d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96641 affects version 9.5.0.post5+tuxcare of pillow." } }, { "id": "CVE-2026-96642", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:ddcc207b-dc63-549b-ab47-56a001dab515", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96642 affects version 9.5.0.post5+tuxcare of pillow." } }, { "id": "CVE-2026-96644", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:4f5358dd-57d1-521c-a0fe-bb98bce0ae7c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96644 affects version 9.5.0.post5+tuxcare of pillow." } }, { "id": "CVE-2026-96778", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:7f181fd5-00e9-5670-aa85-951a2cfbe64c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96778 affects version 9.5.0.post5+tuxcare of pillow." } }, { "id": "GHSA-56pw-mpj4-fxww", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ], "bom-ref": "urn:uuid:da733b68-a292-58a7-8e68-d9031f002ee2", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-56pw-mpj4-fxww is a false positive for pillow 9.5.0.post5+tuxcare." } } ], "dependencies": [ { "ref": "pkg:pypi/pillow@9.5.0.post5+tuxcare" } ] }