{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8d848836-5f10-5562-84d6-a6e08ba6a53b", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "pillow", "purl": "pkg:pypi/pillow@9.5.0.post9+tuxcare", "type": "library", "bom-ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare", "version": "9.5.0.post9+tuxcare", "pedigree": { "ancestors": [ { "name": "pillow", "purl": "pkg:pypi/pillow@9.5.0", "type": "library", "version": "9.5.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2023-44271", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:8f52f586-b7f4-5b27-90de-dbe825d1d517", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-44271 is fixed in version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2023-4863", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:f2f7ff8b-f5c2-57f2-997e-e25ecf0a2915", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-4863 is fixed in version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2023-50447", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:3f1c2b2a-5d28-504c-bf95-a60a6cc586e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-50447 is fixed in version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2024-28219", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:dddcc60f-58e5-5b30-a3b6-df6919cb19d2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-28219 is fixed in version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-112390", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:c46c3d24-6eb6-5cf0-a249-76939da7db44", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112390 affects version 9.5.0.post9+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112391", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:69fd01fb-2670-5a7a-a2bb-6a1aa823bb04", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112391 affects version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-112392", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:bedf3abf-83a2-533e-8c3c-f8e10830d4d6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112392 affects version 9.5.0.post9+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112393", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:8727623f-27af-5bc8-bdfc-af5c1655d92d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112393 affects version 9.5.0.post9+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112394", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:3b006325-3a97-5cb4-b2c0-cd6d619de0ed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112394 affects version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-112395", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:c3389880-d1fe-58a2-b506-2831f1a370ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112395 is fixed in version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-112397", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:13fc722f-0e83-5103-b981-29fd418da4a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112397 is fixed in version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-112398", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:b7b3fa67-237a-50b0-96a9-1aae818f7225", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112398 affects version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-112399", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:4dc355a5-aa75-5b94-9a84-d70c461c3905", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112399 affects version 9.5.0.post9+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112400", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:21db561a-0f9e-532f-bc5f-c6d0750768fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112400 is fixed in version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-112401", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:66583904-1c8a-56b7-a37a-56cd55a31dc2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112401 affects version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-112402", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:542a3d50-b7ac-5112-9236-7751ffcec505", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112402 affects version 9.5.0.post9+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112403", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:f555858d-f3aa-5835-aaf5-6368f355d50c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112403 is fixed in version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-112404", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:50ee2fcf-4d6f-5c61-9152-7cd4efab2060", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112404 is fixed in version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-112406", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:f8bd51a7-5d72-5ef9-b1f4-9328c8ef817e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112406 affects version 9.5.0.post9+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112891", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:ac3fd411-0322-50ae-b5db-b8c6f725ac9f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112891 affects version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-112892", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:0cef617d-cbce-5a3c-bbad-aeeb707085e3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112892 affects version 9.5.0.post9+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112894", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:820a46a4-4524-5c43-b4f9-43bf8d1cf52c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112894 affects version 9.5.0.post9+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112895", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:890815d2-3df0-5df7-bced-e10d12683f5f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112895 is fixed in version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-112896", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:16125098-de58-5127-91b6-255561a8dd2f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112896 is fixed in version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-112897", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:075f03a4-f441-550e-9379-91eb192c1b34", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112897 is fixed in version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-112898", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:99a3cc60-b6d5-54e9-84a4-f254013d5214", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112898 affects version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-112899", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:fb876a86-5568-5e5c-9e91-a800fab4519b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112899 is fixed in version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-112900", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:1d2122b4-6574-59ff-ae86-cc6c233165a0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112900 affects version 9.5.0.post9+tuxcare of pillow, and is fixed in 9.5.0.post10+tuxcare." } }, { "id": "CVE-2026-112901", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:b19ad27c-deaa-5e29-a4da-ad0e4366bb5a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112901 affects version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-112902", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:7e50c359-8d60-542d-92ce-1bb4696f0279", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112902 affects version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-42308", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:22c83a6c-fb00-567a-bc92-f6c892365636", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42308 is fixed in version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-42310", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:73d82cd0-2207-5e73-851b-f7729a87fc2f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42310 is fixed in version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-54058", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:b28da7e3-f202-5394-a58f-8dbfee5f14c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54058 is fixed in version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-54059", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:f8b8a372-2cf6-5c95-bd74-95ecebdac6df", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54059 is fixed in version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-54060", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:63ba6df7-87b8-51fa-8cab-a3b7d895620e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54060 is fixed in version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-55379", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:83987475-6f17-5e3d-88d9-4ec38bd276cc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55379 is fixed in version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-55380", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:230a6e25-61e8-5652-8515-6142275172ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55380 is fixed in version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-55798", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:e556b79b-202a-55a3-baf6-342049a4ff77", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55798 is fixed in version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-59197", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:46dd424e-f63d-5751-b33f-4bf5f8111d71", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59197 is fixed in version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-59198", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:d393ee7e-ac79-5c6b-84d9-50d0e6258e33", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59198 is fixed in version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-59199", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:77732bb5-457b-5a32-94e8-addbea27682b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59199 is fixed in version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-59200", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:9cb62b90-95ff-5df1-9ee1-83c135ee2a1b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59200 is fixed in version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-59204", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:69ce2284-0820-56dc-9107-163809ee799f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59204 is fixed in version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-59205", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:7af3c3ef-bfee-5a5d-8317-445fe7045908", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59205 is fixed in version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-96636", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:99fd1092-d3d6-5484-a753-ec7b8f6dcd78", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96636 affects version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-96637", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:370aab5d-6bd3-53dc-b2c2-1c0b3363cc57", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96637 affects version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-96638", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:d7823eaf-dbd9-5daa-a367-9d440a648ec2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96638 affects version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-96640", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:2ec35b35-e17d-5335-b82c-668347a5c57c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-96640 is fixed in version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-96641", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:8deece23-1fcb-5562-b5f6-466312926edd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96641 affects version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-96642", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:79265506-d625-51f8-a5fc-e14366321792", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96642 affects version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-96644", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:c6c1cb22-3f04-5305-80eb-e1999b7f1f14", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96644 affects version 9.5.0.post9+tuxcare of pillow." } }, { "id": "CVE-2026-96778", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:d0219178-b1a0-5052-9d27-008f7efbba22", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96778 affects version 9.5.0.post9+tuxcare of pillow." } }, { "id": "GHSA-56pw-mpj4-fxww", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ], "bom-ref": "urn:uuid:56ff29c9-700e-59a4-ae15-deca5329c224", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-56pw-mpj4-fxww is a false positive for pillow 9.5.0.post9+tuxcare." } } ], "dependencies": [ { "ref": "pkg:pypi/pillow@9.5.0.post9+tuxcare" } ] }