{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:c6fb724a-e538-5916-a6c5-4fc9b12ba8fa", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "pillow", "purl": "pkg:pypi/pillow@8.4.0.post11+tuxcare", "type": "library", "bom-ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare", "version": "8.4.0.post11+tuxcare", "pedigree": { "ancestors": [ { "name": "pillow", "purl": "pkg:pypi/pillow@8.4.0", "type": "library", "version": "8.4.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2022-22815", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:cc40fa65-dfcd-5a6c-a931-842884c5aec4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22815 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2022-22816", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:83a37f0b-3e48-57fd-a435-21f6eae1cc81", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22816 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2022-22817", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:cb8193ca-4f9c-5c38-b58f-611dfc1eb9de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22817 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2022-24303", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:7c6a6d92-827c-5d63-bac5-605c5cbc7b55", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-24303 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2022-45198", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:0a85aa65-5aac-5937-8603-88d0aab2d6d5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-45198 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2023-44271", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:cd8be2f3-4af2-557c-ab3b-e2d126d82107", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-44271 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2023-4863", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:94a90a77-bc48-56e5-bfee-0070c8930221", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-4863 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2023-50447", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:2560f6ed-43ad-5e6d-a4bd-3cb7c556ae26", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-50447 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2024-28219", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:b21eb0d6-6a39-5006-bb3b-e8a52be83852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-28219 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112390", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:0eebb87a-bbef-54a5-a501-5679497c884a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112390 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112391", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:51654784-36dd-5850-900f-13762fd195fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112391 affects version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112392", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:7f8f8049-7f5f-5eef-bb74-2ad90e11250e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112392 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112393", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:ab88be5d-6fcd-5ccc-a105-db7c640e2c1e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112393 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112394", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:3ed6bb83-dfd0-5c81-a814-ad88fe70fd7c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112394 affects version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112395", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:f2d471a5-b657-5088-b183-23a42f66360c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112395 affects version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112397", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:e22c2a04-7394-5d3b-ae01-42ec004f86c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112397 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112398", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:75cfa829-c6c4-5fe6-8713-c9ecb3473c98", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112398 affects version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112399", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:9b74c506-7cb8-503d-8759-57fbc1da703f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112399 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112401", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:835a7061-973e-5ce8-a9fc-430f254d21aa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112401 affects version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112402", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:a9a956c0-6244-5c55-95c4-1f4a079e6a47", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112402 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112403", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:673310f2-c9c9-5794-a3d3-443619871461", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112403 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112404", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:001db899-eb13-5138-a62a-b837eb644513", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112404 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112406", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:fd888a8f-ec49-5302-8a5d-3be97bce462f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112406 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112892", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:adeb1ec4-e5db-58f7-9b6c-d62e7bb5678c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112892 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112894", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:dfc28754-023d-5c56-960a-3c3fc887375e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112894 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112895", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:c0f2151b-5778-539f-aa3d-d30c1175f75e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112895 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112896", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:09ceff8e-3d8a-50f7-87f4-3e81b94fe1c6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112896 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112897", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:f2cb8bb9-388e-55f8-bba4-21dc920b3f50", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112897 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112899", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:42ac4b89-a7cc-58f6-b31e-4142c97ce5c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112899 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112900", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:2cfa4c89-f09f-5ddf-8f85-97409f65ef7b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112900 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112901", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:4375c864-3dce-51be-89f8-837496663262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112901 affects version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112902", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:4ded9694-fbad-5c8f-91bb-642bc827c704", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112902 affects version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-42308", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:de7af8f9-ff1c-53e5-ba8b-6552e9489b78", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42308 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-42310", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:5598d33b-991b-5ab9-808f-1f7e729fe93d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42310 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-54058", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:e155d021-cf0e-598d-a30c-f43fd5ea11dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54058 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-54059", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:70bf2e51-f9e1-5596-8964-49eb304163f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54059 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-54060", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:9503c7ce-aebd-5c34-a5da-6aba76b5675e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54060 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-55379", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:7a68faad-80f0-5fec-b4dd-8d7bdee44649", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55379 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-55380", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:a3434ecf-09c8-5255-bf6f-c86992a1144a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55380 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-55798", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:020d2be3-a44c-50cc-90a0-f6a779d1b306", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55798 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-59197", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:645b2bad-4bbb-5c1a-919a-7b9850d641eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59197 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-59198", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:71619c7a-2cae-5855-8333-3481955f3555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59198 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-59199", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:3fab64f5-f492-5f35-a61a-cc40ff7460e0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59199 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-59200", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:bdd1d5a7-e02b-5d6b-954c-badea75e343d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59200 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-59204", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:1e6e9400-e29b-54d0-9535-09ed6dc3a124", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59204 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-59205", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:57e3830f-64ed-5c54-b99d-91ce2166c98e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59205 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-96636", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:96adde23-1b49-53d1-a0cf-01ac7cb349c9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96636 affects version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-96637", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:1cab1f65-ded0-5dbe-814e-0efff45aa046", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96637 affects version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-96640", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:5912fc3f-3cf7-536f-934f-be0eb6f0c378", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-96640 is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-96641", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:8458ca5f-e846-5b56-94a9-67d74f705cbb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96641 affects version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-96642", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:6acaee4b-bdea-5c22-aaa9-3bd2c792c408", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96642 affects version 8.4.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-96644", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:fda6df4f-44d0-5d87-99a5-469a94bb3e33", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96644 affects version 8.4.0.post11+tuxcare of pillow." } }, { "id": "GHSA-4fx9-vc88-q2xc", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:b04e5483-d154-5828-9c50-77b7de35e871", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-4fx9-vc88-q2xc is fixed in version 8.4.0.post11+tuxcare of pillow." } }, { "id": "GHSA-56pw-mpj4-fxww", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:2dc4ea55-2e60-52a1-8e22-79d38dfcb888", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-56pw-mpj4-fxww is a false positive for pillow 8.4.0.post11+tuxcare." } } ], "dependencies": [ { "ref": "pkg:pypi/pillow@8.4.0.post11+tuxcare" } ] }