{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:f6d40183-4371-560d-84fd-61fb67b115f5", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "pillow", "purl": "pkg:pypi/pillow@10.4.0.post14+tuxcare", "type": "library", "bom-ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare", "version": "10.4.0.post14+tuxcare", "pedigree": { "ancestors": [ { "name": "pillow", "purl": "pkg:pypi/pillow@10.4.0", "type": "library", "version": "10.4.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2026-112390", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:f64d1833-5e60-5757-8b83-f94a5308fe89", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112390 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-112391", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:6ffda4ac-1b9d-5c33-93d6-000868374004", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112391 affects version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-112392", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:ea91ef26-69f1-5243-8b25-c0a7898d3fb4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112392 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-112393", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:c175de04-f23b-5ae3-ba6a-a13375eb9102", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112393 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-112394", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:1f31e65a-9414-55ba-80f1-1c6bc62d301d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112394 affects version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-112395", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:22493027-fda5-52fd-9704-77a31fb5f04b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112395 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-112397", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:84b1ced3-d482-5f37-9530-df7505f2c541", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112397 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-112398", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:18992c64-fbe6-5d84-8b8d-056aa0569f68", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112398 affects version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-112399", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:d5c77820-1b10-56e7-bd79-e309513ce94b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112399 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-112400", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:da75386b-6c6d-5261-aa45-44421947885a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112400 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-112401", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:4dff8f99-d23d-5f2f-87e0-74511244cacb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112401 affects version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-112402", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:0c9ce482-61bf-504c-b1dc-07634a787c69", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112402 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-112403", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:715bb169-2aa0-5ff7-90de-841c459661d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112403 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-112404", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:7469b170-76db-50d3-8ded-cabfdc26bf8c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112404 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-112406", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:738bb8dc-51fb-56ab-9657-bdca3a543e46", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112406 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-112891", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:592d8d76-1c3a-58eb-9c57-d06c7d87a01a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112891 affects version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-112892", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:73effed3-0261-5bc5-ad95-68dd183b4d10", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112892 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-112893", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:0294ff5a-d398-5421-9fac-b556595d0080", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112893 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-112894", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:d0df0595-cfb9-572f-bf22-c348033bceaf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112894 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-112895", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:6eb585e3-140c-535a-94ac-2b7deb3730d7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112895 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-112896", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:10884117-e028-599b-9283-9732aeab0ee9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112896 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-112897", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:d2c138b6-e856-56f6-9986-a216fd9dc56c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112897 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-112898", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:df697be8-a7a9-575b-8c3a-1dded2c791f2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112898 affects version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-112899", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:ecfb010d-beed-5cd1-a4b6-456824ef9ed0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112899 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-112900", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:ac366784-6279-5b4b-b0bb-bad42092f49e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112900 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-112901", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:593156f1-e96b-5c32-8f56-95532fa84f95", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112901 affects version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-112902", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:0556ca2a-b78a-5991-8688-517e3efb0f4a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112902 affects version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-25990", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:2407c8ba-f64c-5c61-85a4-db0b6a1b87ba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25990 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-40192", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:573bc5d8-7a9a-549f-a313-6e0fafbc2db0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40192 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-42308", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:cc5a8f12-d519-5e94-98ac-2b81423ab8fe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42308 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-42310", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:3c2f363f-0492-5b6c-8b47-ae00cdc3e948", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42310 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-42311", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:54186878-4a4e-5716-ae92-0dc247722705", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42311 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-54058", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:2918c404-e114-5fd3-ae35-3d2560859129", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54058 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-54059", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:f09bc56d-8096-5eff-8946-4b42a8e95caf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54059 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-54060", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:edcdf66e-fa23-5a05-a96e-35b3c604e28f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54060 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-55379", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:8fe3cd0d-b32c-5f04-ad4c-bbbfbc30b085", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55379 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-55380", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:fee89cc1-e6a0-53f6-9bdf-1ed5dc42b503", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55380 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-55798", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:d713ba54-0d57-5378-a5b2-e96f220d0e17", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55798 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-59197", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:62ca8a1e-1ea2-55b5-9eec-6ee7b3edc692", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59197 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-59198", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:c1492c20-c065-5063-a0e4-c970926162d7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59198 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-59199", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:7974737c-010b-50bd-ab1b-f2692d028c7e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59199 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-59200", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:798279ee-22fe-5476-ab9b-c6c8e68603c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59200 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-59204", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:0e540d5e-7edf-5348-9d0d-627890db3ad0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59204 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-59205", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:932376de-8ce7-59ba-be7c-51f41eac5178", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59205 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-96636", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:920bb2e8-8a0c-5f8b-91e0-e34ccb33629f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96636 affects version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-96637", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:1f4ac12a-1815-5f95-b645-c2fd2e776c2a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-96637 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-96638", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:709de2bf-c1e4-5080-b86f-ca797bf6f5bb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96638 affects version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-96640", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:373e1783-48e0-5e74-b0c8-0f6e7b487102", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-96640 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-96641", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:c85f3b6f-ac9c-55e4-bfcd-bc8b57613a6c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96641 affects version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-96642", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:5805d0e2-7cab-5c98-b15e-2b6de7dac423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-96642 is fixed in version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-96644", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:100be2ea-a513-52e6-878d-2b6eb226f74c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96644 affects version 10.4.0.post14+tuxcare of pillow." } }, { "id": "CVE-2026-96778", "affects": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ], "bom-ref": "urn:uuid:028acfbd-eab6-5ecc-b137-46d5a9715397", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-96778 is fixed in version 10.4.0.post14+tuxcare of pillow." } } ], "dependencies": [ { "ref": "pkg:pypi/pillow@10.4.0.post14+tuxcare" } ] }