{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:565ce98a-f075-5a9e-a4cc-3e004bf885eb", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "pillow", "purl": "pkg:pypi/pillow@9.5.0.post7+tuxcare", "type": "library", "bom-ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare", "version": "9.5.0.post7+tuxcare", "pedigree": { "ancestors": [ { "name": "pillow", "purl": "pkg:pypi/pillow@9.5.0", "type": "library", "version": "9.5.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2023-44271", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:4f52d2b5-3450-5281-b8c0-3e16a9f87f11", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-44271 is fixed in version 9.5.0.post7+tuxcare of pillow." } }, { "id": "CVE-2023-4863", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:bbd60caa-a04a-56a2-b775-eeb7cb0eff3b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-4863 is fixed in version 9.5.0.post7+tuxcare of pillow." } }, { "id": "CVE-2023-50447", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:976e62ad-5590-573a-ba90-aa84e0a2bf83", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-50447 is fixed in version 9.5.0.post7+tuxcare of pillow." } }, { "id": "CVE-2024-28219", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:19517c2f-5ad6-5471-88b9-8fb742cb142a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-28219 is fixed in version 9.5.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-112390", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:9093f89d-2c6f-5947-82cc-95953b8259a2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112390 affects version 9.5.0.post7+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112391", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:dd702705-217f-5d3c-a3c7-8ab6132108ba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112391 affects version 9.5.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-112392", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:422c5ddf-17d8-5461-bdbc-3cd607a27558", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112392 affects version 9.5.0.post7+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112393", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:e403a35f-fffe-5e49-9159-2294e1d09326", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112393 affects version 9.5.0.post7+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112394", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:28c01549-0e3f-534a-8d45-e51d9b2c0298", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112394 affects version 9.5.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-112395", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:8be73762-f0be-55ec-84e4-5d977a1f8354", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112395 affects version 9.5.0.post7+tuxcare of pillow, and is fixed in 9.5.0.post9+tuxcare." } }, { "id": "CVE-2026-112397", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:d6e758cf-435a-5bfb-b896-df51e1080f2d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112397 affects version 9.5.0.post7+tuxcare of pillow, and is fixed in 9.5.0.post9+tuxcare." } }, { "id": "CVE-2026-112398", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:d1ecc449-125d-55fc-93c5-92be662a61d3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112398 affects version 9.5.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-112399", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:4d732f69-ab79-5ba2-84d9-8f4cff63ea21", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112399 affects version 9.5.0.post7+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112400", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:7ef4455a-e646-5472-a6c4-5e3f988c3b5d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112400 affects version 9.5.0.post7+tuxcare of pillow, and is fixed in 9.5.0.post9+tuxcare." } }, { "id": "CVE-2026-112401", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:6f9ed5c7-6ca7-538d-8a77-c6624a14444b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112401 affects version 9.5.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-112402", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:bbf1a5db-a2eb-5ef1-9a82-1ce502d67ff7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112402 affects version 9.5.0.post7+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112403", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:7e50563a-2614-5d0f-9e3d-50bc984e66d3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112403 affects version 9.5.0.post7+tuxcare of pillow, and is fixed in 9.5.0.post9+tuxcare." } }, { "id": "CVE-2026-112404", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:7ee69223-f5e9-5ed4-908b-14139082b7d2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112404 affects version 9.5.0.post7+tuxcare of pillow, and is fixed in 9.5.0.post9+tuxcare." } }, { "id": "CVE-2026-112406", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:e9e77a4a-4cea-5796-a874-7617b74b05eb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112406 affects version 9.5.0.post7+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112891", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:211a1488-c6a1-5469-adcc-c98cd6eea62b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112891 affects version 9.5.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-112892", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:829b46ca-bc39-582b-91f0-f88856a492d9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112892 affects version 9.5.0.post7+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112894", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:0b5561ed-e5ff-5187-acc6-5ee82f974a4b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112894 affects version 9.5.0.post7+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112895", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:d2207a66-38c8-5c24-be2c-33536da8497f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112895 affects version 9.5.0.post7+tuxcare of pillow, and is fixed in 9.5.0.post9+tuxcare." } }, { "id": "CVE-2026-112896", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:1ebceafd-4930-5130-b2fe-c007a4d86f42", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112896 affects version 9.5.0.post7+tuxcare of pillow, and is fixed in 9.5.0.post9+tuxcare." } }, { "id": "CVE-2026-112897", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:158946bb-49d8-56e6-bdd5-f1d0c4656091", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112897 affects version 9.5.0.post7+tuxcare of pillow, and is fixed in 9.5.0.post9+tuxcare." } }, { "id": "CVE-2026-112898", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:75705455-a82f-582e-b656-4bf9b116f1af", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112898 affects version 9.5.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-112899", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:d350db91-7767-509b-8ec8-311e9e54b85c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112899 affects version 9.5.0.post7+tuxcare of pillow, and is fixed in 9.5.0.post9+tuxcare." } }, { "id": "CVE-2026-112900", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:a7980d2b-51bb-5565-ad34-8eb2ef87dc12", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112900 affects version 9.5.0.post7+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112901", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:a0394ce4-f447-5721-b85b-b7beed484561", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112901 affects version 9.5.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-112902", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:c6fc6c26-2e2c-5565-b157-4dd48b887e82", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112902 affects version 9.5.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-42308", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:e143837d-4111-5cf7-b4b0-dd6f2d561869", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42308 affects version 9.5.0.post7+tuxcare of pillow, and is fixed in 9.5.0.post8+tuxcare." } }, { "id": "CVE-2026-42310", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:9ca369d3-de82-5722-b33b-b34222f2b886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42310 is fixed in version 9.5.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-54058", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:5abf588a-cff1-5d81-be62-9c618f34bef6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54058 is fixed in version 9.5.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-54059", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:f1a28454-a5f5-54de-a139-6cad1bf0fd2a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54059 is fixed in version 9.5.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-54060", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:04852e9a-f033-5d60-a224-8e3f64d257a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54060 is fixed in version 9.5.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-55379", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:d01ef85d-6569-5a84-8a92-19d3239cb378", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55379 is fixed in version 9.5.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-55380", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:626fa0d8-770e-5cdf-bac7-1b5e6424132f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55380 affects version 9.5.0.post7+tuxcare of pillow, and is fixed in 9.5.0.post8+tuxcare." } }, { "id": "CVE-2026-55798", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:3a2e06f1-7f27-5473-a251-418720d99b47", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55798 is fixed in version 9.5.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-59197", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:6dc040f5-4bc9-5c4d-bd4a-0df3341f8042", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59197 is fixed in version 9.5.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-59198", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:653ce561-5ee1-5a29-9f7f-8b1a2d436500", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59198 affects version 9.5.0.post7+tuxcare of pillow, and is fixed in 9.5.0.post8+tuxcare." } }, { "id": "CVE-2026-59199", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:cead8370-0f64-58e6-bc5e-090c82f77e40", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59199 is fixed in version 9.5.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-59200", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:8fc87cd4-37d4-5ac4-9c7b-bbfa8611cc8c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59200 is fixed in version 9.5.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-59204", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:48bddf05-8818-5ed2-a105-3bf3a7cfebb5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59204 affects version 9.5.0.post7+tuxcare of pillow, and is fixed in 9.5.0.post8+tuxcare." } }, { "id": "CVE-2026-59205", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:63509f88-91d1-5992-ba10-1ef1f2af2b24", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59205 is fixed in version 9.5.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-96636", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:b2deb6a7-05c8-5869-8eaa-c5f4bc3ac727", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96636 affects version 9.5.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-96637", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:89ab611a-cdd9-5a67-9fac-715bd20a1d71", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96637 affects version 9.5.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-96638", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:189c38af-0ad9-5be2-953a-d181af6226c1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96638 affects version 9.5.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-96640", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:13654a0d-c944-51ab-a0dd-4ec66bdf5282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96640 affects version 9.5.0.post7+tuxcare of pillow, and is fixed in 9.5.0.post9+tuxcare." } }, { "id": "CVE-2026-96641", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:817f1fa6-5b32-510e-b6de-f6f7eb435321", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96641 affects version 9.5.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-96642", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:b021be77-15eb-5b51-9094-7a0ef3d01e53", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96642 affects version 9.5.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-96644", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:b2af0e23-e03e-51cf-a999-3a15c4872938", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96644 affects version 9.5.0.post7+tuxcare of pillow." } }, { "id": "CVE-2026-96778", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:6a67dbbd-bd03-5abc-a063-392ad3324b3d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96778 affects version 9.5.0.post7+tuxcare of pillow." } }, { "id": "GHSA-56pw-mpj4-fxww", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:bda0df80-25f2-513c-8813-f6232671d59e", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-56pw-mpj4-fxww is a false positive for pillow 9.5.0.post7+tuxcare." } } ], "dependencies": [ { "ref": "pkg:pypi/pillow@9.5.0.post7+tuxcare" } ] }