{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:cb63f078-a1b7-5862-ab31-cb73f76c4cc7", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "pillow", "purl": "pkg:pypi/pillow@9.5.0.post6+tuxcare", "type": "library", "bom-ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare", "version": "9.5.0.post6+tuxcare", "pedigree": { "ancestors": [ { "name": "pillow", "purl": "pkg:pypi/pillow@9.5.0", "type": "library", "version": "9.5.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2023-44271", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:6f472d62-6415-5efa-90ff-71a650108673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-44271 is fixed in version 9.5.0.post6+tuxcare of pillow." } }, { "id": "CVE-2023-4863", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:d62cfad1-35a6-5786-8183-6a2fb4787a41", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-4863 is fixed in version 9.5.0.post6+tuxcare of pillow." } }, { "id": "CVE-2023-50447", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:ce281152-de51-5c11-b370-a3f4ff411010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-50447 is fixed in version 9.5.0.post6+tuxcare of pillow." } }, { "id": "CVE-2024-28219", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:4bd0c4e5-ebad-5f0e-b2f8-4c081363e92b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-28219 is fixed in version 9.5.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-112390", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:8a39807a-d5b6-5ba4-aa1b-a8b6739518b5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112390 affects version 9.5.0.post6+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112391", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:221ceabc-aef0-53eb-851f-a8461ccbccc6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112391 affects version 9.5.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-112392", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:3fd79619-91bf-557c-aa99-47e56466a833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112392 affects version 9.5.0.post6+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112393", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:2e9bf7f3-cbb7-558e-95b7-2a2c0bd648f4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112393 affects version 9.5.0.post6+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112394", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:9506fa3c-ba10-5183-b5b6-e8c7568cd527", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112394 affects version 9.5.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-112395", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:6cb859e5-8ab3-5464-9cde-b9f11dad2f96", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112395 affects version 9.5.0.post6+tuxcare of pillow, and is fixed in 9.5.0.post9+tuxcare." } }, { "id": "CVE-2026-112397", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:f76f71ec-195b-5aa7-878d-3cfbcc04fb52", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112397 affects version 9.5.0.post6+tuxcare of pillow, and is fixed in 9.5.0.post9+tuxcare." } }, { "id": "CVE-2026-112398", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:ac3a3c53-d319-5994-b417-d713293791fe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112398 affects version 9.5.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-112399", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:4c945538-b8b9-5260-bcf7-e0f9613c5340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112399 affects version 9.5.0.post6+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112400", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:d292742d-9abc-50f3-a7cf-60e75dff20d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112400 affects version 9.5.0.post6+tuxcare of pillow, and is fixed in 9.5.0.post9+tuxcare." } }, { "id": "CVE-2026-112401", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:e1458262-c508-57dd-8b14-392cbc1b6ed5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112401 affects version 9.5.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-112402", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:ef904d16-cda2-591b-a1bd-3d0b8c40112d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112402 affects version 9.5.0.post6+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112403", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:22704357-edfe-5e8d-9453-c8a41a769772", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112403 affects version 9.5.0.post6+tuxcare of pillow, and is fixed in 9.5.0.post9+tuxcare." } }, { "id": "CVE-2026-112404", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:90224785-d631-51ba-b1db-a2c6654f8016", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112404 affects version 9.5.0.post6+tuxcare of pillow, and is fixed in 9.5.0.post9+tuxcare." } }, { "id": "CVE-2026-112406", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:4cbefbe4-5cbf-5142-ac05-b1b9b8e0f525", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112406 affects version 9.5.0.post6+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112891", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:3337b658-1d11-5255-b3ce-3f781ecd0075", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112891 affects version 9.5.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-112892", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:9cb81720-9e1b-5a94-8ffe-04fa943f3736", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112892 affects version 9.5.0.post6+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112894", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:19a05ca6-1aaa-562c-8595-2fa0b78a2e13", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112894 affects version 9.5.0.post6+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112895", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:ba268ca6-19f7-53a0-ad4b-989549019a04", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112895 affects version 9.5.0.post6+tuxcare of pillow, and is fixed in 9.5.0.post9+tuxcare." } }, { "id": "CVE-2026-112896", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:587aa418-1f74-5a40-a889-8a7813b757ed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112896 affects version 9.5.0.post6+tuxcare of pillow, and is fixed in 9.5.0.post9+tuxcare." } }, { "id": "CVE-2026-112897", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:7a7203b4-c19b-5069-bc01-cf7df4a1d0e7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112897 affects version 9.5.0.post6+tuxcare of pillow, and is fixed in 9.5.0.post9+tuxcare." } }, { "id": "CVE-2026-112898", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:337893e9-142d-5845-bafe-190c7b27f9ae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112898 affects version 9.5.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-112899", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:bae192b8-267f-57a4-ac8c-955279e2dfe6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112899 affects version 9.5.0.post6+tuxcare of pillow, and is fixed in 9.5.0.post9+tuxcare." } }, { "id": "CVE-2026-112900", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:181a8e65-04ab-5168-9451-e30fbe40ff3d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112900 affects version 9.5.0.post6+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112901", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:a58cf3f3-5a47-57a8-abac-093feef66b74", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112901 affects version 9.5.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-112902", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:cfa16f85-c984-50cf-b04f-adc26c28789e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112902 affects version 9.5.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-42308", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:daf37f38-586a-5291-b0cc-f7021e7a1133", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42308 affects version 9.5.0.post6+tuxcare of pillow, and is fixed in 9.5.0.post8+tuxcare." } }, { "id": "CVE-2026-42310", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:4c4bec9f-1d6c-50fe-a1bd-291fbebedd0a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42310 is fixed in version 9.5.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-54058", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:2be42159-b280-5c38-9a1d-fcda1f4d8dd8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54058 is fixed in version 9.5.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-54059", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:30bc30de-3582-5828-bde5-7e9cfdc56237", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54059 is fixed in version 9.5.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-54060", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:ec90e443-f280-500e-8f9d-a7e7761d2154", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54060 is fixed in version 9.5.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-55379", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:0d54db4a-bb05-5ad8-91fe-f83543da8b95", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55379 is fixed in version 9.5.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-55380", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:7c8b8e7d-11b6-50d1-bf47-51b6d97a89ba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55380 affects version 9.5.0.post6+tuxcare of pillow, and is fixed in 9.5.0.post8+tuxcare." } }, { "id": "CVE-2026-55798", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:f2ccf4ad-a249-542f-9665-5a77a8863edc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55798 is fixed in version 9.5.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-59197", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:a6b05784-3b88-5d8c-8838-8080652e2bd8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59197 affects version 9.5.0.post6+tuxcare of pillow, and is fixed in 9.5.0.post7+tuxcare." } }, { "id": "CVE-2026-59198", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:e7f4c199-a8d7-59de-b20a-4cb000dbe653", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59198 affects version 9.5.0.post6+tuxcare of pillow, and is fixed in 9.5.0.post8+tuxcare." } }, { "id": "CVE-2026-59199", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:bc5456d6-46d7-524a-846c-0317330f3959", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59199 is fixed in version 9.5.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-59200", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:4215558d-cedb-50ac-bb21-52e4b6717d42", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59200 is fixed in version 9.5.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-59204", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:2e03400e-4a17-59d2-909c-bea3e49fb4e0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59204 affects version 9.5.0.post6+tuxcare of pillow, and is fixed in 9.5.0.post8+tuxcare." } }, { "id": "CVE-2026-59205", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:9ec84de2-32c2-5506-83b7-a4c653ece018", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59205 affects version 9.5.0.post6+tuxcare of pillow, and is fixed in 9.5.0.post7+tuxcare." } }, { "id": "CVE-2026-96636", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:810389b7-3add-5475-a31f-a177544e0dfe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96636 affects version 9.5.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-96637", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:5773a7af-04d2-5434-a917-439382c04fea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96637 affects version 9.5.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-96638", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:40b2f268-d7d2-5ad7-b139-0f220ec1a059", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96638 affects version 9.5.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-96640", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:db3cd626-3cc1-579b-8ce2-fa1343cb76ed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96640 affects version 9.5.0.post6+tuxcare of pillow, and is fixed in 9.5.0.post9+tuxcare." } }, { "id": "CVE-2026-96641", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:d1e344d1-712c-5272-9daf-6fa8c26fc722", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96641 affects version 9.5.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-96642", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:fd5014a6-ac7e-5721-ba8d-56b78cfbd27e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96642 affects version 9.5.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-96644", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:d4f45a1a-e4b9-5e29-bcd6-e0ab4ff61241", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96644 affects version 9.5.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-96778", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:5bbfdfe3-e6b1-5d26-808f-e2726766c48c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96778 affects version 9.5.0.post6+tuxcare of pillow." } }, { "id": "GHSA-56pw-mpj4-fxww", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:c06f8d23-3ac3-5c79-82cb-d82eaaeac10b", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-56pw-mpj4-fxww is a false positive for pillow 9.5.0.post6+tuxcare." } } ], "dependencies": [ { "ref": "pkg:pypi/pillow@9.5.0.post6+tuxcare" } ] }