{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:648cdbb5-5720-5655-a7dc-95b0f60ef7c3", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "pillow", "purl": "pkg:pypi/pillow@10.4.0.post13+tuxcare", "type": "library", "bom-ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare", "version": "10.4.0.post13+tuxcare", "pedigree": { "ancestors": [ { "name": "pillow", "purl": "pkg:pypi/pillow@10.4.0", "type": "library", "version": "10.4.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2026-112390", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:b64daef6-59f6-5efe-83fa-3d4ab1209361", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112390 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-112391", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:26283298-2403-58e9-b166-555ddd4bd810", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112391 affects version 10.4.0.post13+tuxcare of pillow, and is fixed in 10.4.0.post15+tuxcare." } }, { "id": "CVE-2026-112392", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:2eeffc1e-b323-5538-af97-7155f6dc8c61", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112392 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-112393", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:4e8d1842-68ac-587e-a6b7-904e3eb81c0a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112393 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-112394", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:c1ed47df-650e-5406-b70b-50bb75259bc6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112394 affects version 10.4.0.post13+tuxcare of pillow, and is fixed in 10.4.0.post15+tuxcare." } }, { "id": "CVE-2026-112395", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:ddc0c372-f389-5b23-9acb-e53d706ec2cf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112395 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-112397", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:7a04f98e-c5c8-5365-a6cd-e7bb980dfaa1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112397 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-112398", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:3ffff0fb-5180-52b8-b305-d5494c158e15", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112398 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-112399", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:f83c1cdb-a222-5a86-b0a6-9034926b2e6b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112399 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-112400", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:503b3d17-456c-5a3c-ad41-ce9ffcf7e106", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112400 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-112401", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:6303a16b-87d8-569c-bb28-39d35c54844e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112401 affects version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-112402", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:ba8d0aea-b442-5528-8e69-98ecdd0e773b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112402 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-112403", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:39f9c8a4-3a95-5f09-a0be-2e7785b9091c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112403 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-112404", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:c0426f8d-2e5a-5d7d-b8e5-643e3cf95d6b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112404 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-112406", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:c7575709-bd97-5995-b760-9138226cc90c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112406 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-112891", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:4c52d336-fcee-520c-9346-fa6be1f289c8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112891 affects version 10.4.0.post13+tuxcare of pillow, and is fixed in 10.4.0.post15+tuxcare." } }, { "id": "CVE-2026-112892", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:35139fa0-28a3-5cfb-8872-882204f94636", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112892 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-112893", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:ceb2f8a9-6c49-523e-900e-aa78f88cbe4d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112893 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-112894", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:0076e7a3-66b7-5281-bff4-d48a0ae3fe91", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112894 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-112895", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:ad3f3127-2b2b-5d84-a9b8-1d28c39b1e54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112895 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-112896", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:12e994e0-561d-5227-989b-66afa5765037", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112896 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-112897", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:90cfb3c6-4b1b-51e5-9ff9-e67090d09e82", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112897 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-112898", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:961e9178-e4af-5081-8e09-657ac0cdb150", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112898 affects version 10.4.0.post13+tuxcare of pillow, and is fixed in 10.4.0.post15+tuxcare." } }, { "id": "CVE-2026-112899", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:7665a67a-afc3-5dff-8bbe-e2d834ef156f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112899 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-112900", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:14bffc42-3089-55f3-8d94-a8ef0f87a573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112900 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-112901", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:59d7397e-8e27-573a-9163-f3701b70c5b6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112901 affects version 10.4.0.post13+tuxcare of pillow, and is fixed in 10.4.0.post15+tuxcare." } }, { "id": "CVE-2026-112902", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:99c6a82a-a45d-5898-8237-74061538b32c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112902 affects version 10.4.0.post13+tuxcare of pillow, and is fixed in 10.4.0.post16+tuxcare." } }, { "id": "CVE-2026-25990", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:5ddaab75-7715-5ec3-a56d-3f2bc25570b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25990 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-40192", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:c686c658-7353-5b7c-9940-c72561e4975d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40192 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-42308", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:a9a0fda7-d0f8-5bf3-81f4-2003aec3118c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42308 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-42310", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:90c7cd18-2a47-52ac-a1ab-604b4181d35b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42310 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-42311", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:7b95297d-b261-5670-bb7f-dd73b094d18a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42311 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-54058", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:c78610ae-e79e-5c98-91f2-92cc29a1f18e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54058 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-54059", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:a52d84eb-3df0-5ae5-ac6c-dda010f06e58", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54059 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-54060", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:7872ef7d-407b-5515-9f93-70252ebee7d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54060 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-55379", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:f05f98bf-9a8d-5dea-9611-4d13e46ebdd6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55379 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-55380", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:f23cf7b2-5dd6-5c0a-93b1-b5fbd9ade142", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55380 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-55798", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:254e5d61-3f3a-538d-b1d4-d410a94a8dac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55798 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-59197", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:4cb6c002-bd8e-527f-a8f0-e90911934afd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59197 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-59198", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:499441af-427c-54dc-9712-5c0e5ab2dda3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59198 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-59199", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:277f40e8-e69d-56db-b5ba-cda034511be1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59199 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-59200", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:d778028e-a20d-5be6-b655-144ac4ba2c05", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59200 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-59204", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:49d35349-35e1-574d-9f87-e0d531b023db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59204 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-59205", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:e372044e-9b6d-5c81-a8ce-601c3b1dc463", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59205 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-96636", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:4aec0b44-32b0-5da5-a72c-cf0207072e26", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96636 affects version 10.4.0.post13+tuxcare of pillow, and is fixed in 10.4.0.post15+tuxcare." } }, { "id": "CVE-2026-96637", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:58033fc4-7fc4-5804-b950-06d08436f7b1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96637 affects version 10.4.0.post13+tuxcare of pillow, and is fixed in 10.4.0.post14+tuxcare." } }, { "id": "CVE-2026-96638", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:bba1fa07-e8ce-5578-823d-4df5a0aa54d6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96638 affects version 10.4.0.post13+tuxcare of pillow, and is fixed in 10.4.0.post15+tuxcare." } }, { "id": "CVE-2026-96640", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:94debf6b-b7cf-5106-b06f-a0ae09bd182e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-96640 is fixed in version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-96641", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:8f85b5bc-6fcf-5aaa-8410-1517c8c59a3d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96641 affects version 10.4.0.post13+tuxcare of pillow, and is fixed in 10.4.0.post15+tuxcare." } }, { "id": "CVE-2026-96642", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:4eeb81bb-d372-53b4-ae30-79e9c428f2d2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96642 affects version 10.4.0.post13+tuxcare of pillow, and is fixed in 10.4.0.post14+tuxcare." } }, { "id": "CVE-2026-96644", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:f2bec787-a766-52b8-b833-ca4260f1df82", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96644 affects version 10.4.0.post13+tuxcare of pillow." } }, { "id": "CVE-2026-96778", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ], "bom-ref": "urn:uuid:94358c92-eb2d-5748-8a5a-dac51759c883", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96778 affects version 10.4.0.post13+tuxcare of pillow, and is fixed in 10.4.0.post14+tuxcare." } } ], "dependencies": [ { "ref": "pkg:pypi/pillow@10.4.0.post13+tuxcare" } ] }