{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:bed94b57-4abd-5af8-b8ea-9d257a8079b4", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "pillow", "purl": "pkg:pypi/pillow@8.4.0.post6+tuxcare", "type": "library", "bom-ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare", "version": "8.4.0.post6+tuxcare", "pedigree": { "ancestors": [ { "name": "pillow", "purl": "pkg:pypi/pillow@8.4.0", "type": "library", "version": "8.4.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2022-22815", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:c500d5e1-4e17-58f7-b125-59e164ab100b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22815 is fixed in version 8.4.0.post6+tuxcare of pillow." } }, { "id": "CVE-2022-22816", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:3269c31f-4e48-5db1-9867-a87387812790", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22816 is fixed in version 8.4.0.post6+tuxcare of pillow." } }, { "id": "CVE-2022-22817", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:59ed8129-92c4-53a5-baea-eae13debfad2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22817 is fixed in version 8.4.0.post6+tuxcare of pillow." } }, { "id": "CVE-2022-24303", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:ad51bc30-ade9-58fd-a7bd-d6743329df6b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-24303 is fixed in version 8.4.0.post6+tuxcare of pillow." } }, { "id": "CVE-2022-45198", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:bbad34a8-7a3e-5b63-89b0-0a646aea0a81", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-45198 is fixed in version 8.4.0.post6+tuxcare of pillow." } }, { "id": "CVE-2023-44271", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:c8e53488-6835-553d-95d9-9aff800d53cf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-44271 is fixed in version 8.4.0.post6+tuxcare of pillow." } }, { "id": "CVE-2023-4863", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:18c0ffd9-1747-5eda-836e-470244d48d65", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-4863 affects version 8.4.0.post6+tuxcare of pillow, and is fixed in 8.4.0.post10+tuxcare." } }, { "id": "CVE-2023-50447", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:37610424-84ba-5c10-bfe3-b5e65a672ba2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-50447 is fixed in version 8.4.0.post6+tuxcare of pillow." } }, { "id": "CVE-2024-28219", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:2ca35b3e-9b15-57a1-94e7-21ab4c0b7069", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-28219 is fixed in version 8.4.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-112390", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:5894496e-214a-5c5f-b6e3-76a129ae1528", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112390 affects version 8.4.0.post6+tuxcare of pillow, and is fixed in 8.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112391", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:f577aefc-98e2-55f7-ac4b-965a30e2a386", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112391 affects version 8.4.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-112392", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:ab1e16f1-c695-57be-bdc5-faa2a85432f5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112392 affects version 8.4.0.post6+tuxcare of pillow, and is fixed in 8.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112393", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:7be50682-1bbc-5c4b-a315-215896639f41", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112393 affects version 8.4.0.post6+tuxcare of pillow, and is fixed in 8.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112394", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:887d7d6f-c177-59ea-a33a-dfd34acbc9b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112394 affects version 8.4.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-112395", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:99a7848e-705e-55db-b92e-1e772851ce66", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112395 affects version 8.4.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-112397", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:616a7589-2911-5a62-9b24-d8e89933bc4a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112397 affects version 8.4.0.post6+tuxcare of pillow, and is fixed in 8.4.0.post9+tuxcare." } }, { "id": "CVE-2026-112398", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:80e35ca3-76f6-56da-a58b-77a6cc2d130e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112398 affects version 8.4.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-112399", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:13a698d6-234c-5c20-97fe-0cbd5c102b49", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112399 affects version 8.4.0.post6+tuxcare of pillow, and is fixed in 8.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112401", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:bbdda1d6-8655-5d89-8130-70a621813dca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112401 affects version 8.4.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-112402", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:19f9d044-08b0-59d3-bf91-9aff67c5869d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112402 affects version 8.4.0.post6+tuxcare of pillow, and is fixed in 8.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112403", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:c96a745d-1bf1-50eb-945a-dcf8eab65346", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112403 affects version 8.4.0.post6+tuxcare of pillow, and is fixed in 8.4.0.post9+tuxcare." } }, { "id": "CVE-2026-112404", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:9b7fe045-e465-52e0-9163-eb078e3beeb1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112404 affects version 8.4.0.post6+tuxcare of pillow, and is fixed in 8.4.0.post9+tuxcare." } }, { "id": "CVE-2026-112406", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:003ae0a1-de90-5c47-88e7-e2e744290a41", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112406 affects version 8.4.0.post6+tuxcare of pillow, and is fixed in 8.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112892", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:eaa4c738-b3ed-5fbd-9d71-d7063cd7d8ac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112892 affects version 8.4.0.post6+tuxcare of pillow, and is fixed in 8.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112894", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:3aaf3de6-2895-5969-a993-49f10f0c7139", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112894 affects version 8.4.0.post6+tuxcare of pillow, and is fixed in 8.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112895", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:5048282c-f7c3-534e-b808-9154d74c0781", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112895 affects version 8.4.0.post6+tuxcare of pillow, and is fixed in 8.4.0.post9+tuxcare." } }, { "id": "CVE-2026-112896", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:e027ddc2-21cb-5ac9-b04b-b15ad0a42400", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112896 affects version 8.4.0.post6+tuxcare of pillow, and is fixed in 8.4.0.post9+tuxcare." } }, { "id": "CVE-2026-112897", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:043bf63d-d065-582f-8222-f2ebecb04bbb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112897 affects version 8.4.0.post6+tuxcare of pillow, and is fixed in 8.4.0.post9+tuxcare." } }, { "id": "CVE-2026-112899", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:43a9d1e5-cc75-58e7-a52b-42af9ff13c23", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112899 affects version 8.4.0.post6+tuxcare of pillow, and is fixed in 8.4.0.post9+tuxcare." } }, { "id": "CVE-2026-112900", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:96618c10-1245-5af1-8134-26624d1039e9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112900 affects version 8.4.0.post6+tuxcare of pillow, and is fixed in 8.4.0.post11+tuxcare." } }, { "id": "CVE-2026-112901", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:f46ed2a7-adf4-571a-b59e-e5083074a75f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112901 affects version 8.4.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-112902", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:eec19485-6f54-5672-8bde-d290f4a7086e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112902 affects version 8.4.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-42308", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:acb705fd-5861-58a8-bfbb-921ed24de754", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42308 affects version 8.4.0.post6+tuxcare of pillow, and is fixed in 8.4.0.post8+tuxcare." } }, { "id": "CVE-2026-42310", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:4a0b2349-97d2-5bff-820f-7fdaa52100ae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42310 affects version 8.4.0.post6+tuxcare of pillow, and is fixed in 8.4.0.post7+tuxcare." } }, { "id": "CVE-2026-54058", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:505500c5-eda3-550a-adda-6a3bbdcaed6e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54058 is fixed in version 8.4.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-54059", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:93a5ed2c-dc4d-5620-9c92-13d74a6288e5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54059 is fixed in version 8.4.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-54060", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:52f8e4aa-daa5-5b48-bfcf-080e9e35c2b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54060 is fixed in version 8.4.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-55379", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:e37ed3e4-844d-50b3-a221-15b34ec4ec5f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55379 is fixed in version 8.4.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-55380", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:63a8eaa5-71b1-5a1b-b0a8-6126fc44a578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55380 affects version 8.4.0.post6+tuxcare of pillow, and is fixed in 8.4.0.post8+tuxcare." } }, { "id": "CVE-2026-55798", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:8e0bbe7d-1945-5d6e-8c90-f413972cbd4b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55798 is fixed in version 8.4.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-59197", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:f7e9f372-9c6f-5583-a1c9-43cf33a5d8f8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59197 affects version 8.4.0.post6+tuxcare of pillow, and is fixed in 8.4.0.post8+tuxcare." } }, { "id": "CVE-2026-59198", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:bc35d71f-8011-54d4-8a36-82964a58719a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59198 affects version 8.4.0.post6+tuxcare of pillow, and is fixed in 8.4.0.post8+tuxcare." } }, { "id": "CVE-2026-59199", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:772e3a88-bd73-524c-b650-e54d0f80bba1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59199 affects version 8.4.0.post6+tuxcare of pillow, and is fixed in 8.4.0.post8+tuxcare." } }, { "id": "CVE-2026-59200", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:1d5e3e92-ccd0-5245-86f3-cae2c2391bee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59200 affects version 8.4.0.post6+tuxcare of pillow, and is fixed in 8.4.0.post8+tuxcare." } }, { "id": "CVE-2026-59204", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:00ed7489-0248-5c59-a478-c17a5977cdb2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59204 affects version 8.4.0.post6+tuxcare of pillow, and is fixed in 8.4.0.post8+tuxcare." } }, { "id": "CVE-2026-59205", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:23066668-aa7c-5f36-96cf-be6882da9102", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59205 affects version 8.4.0.post6+tuxcare of pillow, and is fixed in 8.4.0.post8+tuxcare." } }, { "id": "CVE-2026-96636", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:36457fd6-ab5f-5988-b203-73d4bd656f8b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96636 affects version 8.4.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-96637", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:ce9f7f3f-95f4-5f6c-ac68-8553c9cfec59", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96637 affects version 8.4.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-96640", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:3239a8c9-44b5-5867-8914-5ce92e7b8a0f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96640 affects version 8.4.0.post6+tuxcare of pillow, and is fixed in 8.4.0.post9+tuxcare." } }, { "id": "CVE-2026-96641", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:6e575c1a-4be9-5b91-8f7e-2885609ea3fb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96641 affects version 8.4.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-96642", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:d78ef931-d7a2-52c8-af7a-31c999fee79c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96642 affects version 8.4.0.post6+tuxcare of pillow." } }, { "id": "CVE-2026-96644", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:4ec549e6-06f8-5c4f-be1f-c6b55f1fd552", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96644 affects version 8.4.0.post6+tuxcare of pillow." } }, { "id": "GHSA-4fx9-vc88-q2xc", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:52925304-5abe-52fa-8ce2-48aa2bd5f870", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-4fx9-vc88-q2xc is fixed in version 8.4.0.post6+tuxcare of pillow." } }, { "id": "GHSA-56pw-mpj4-fxww", "affects": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ], "bom-ref": "urn:uuid:9e773da8-f468-5b2e-9f15-d04bd505e335", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-56pw-mpj4-fxww is a false positive for pillow 8.4.0.post6+tuxcare." } } ], "dependencies": [ { "ref": "pkg:pypi/pillow@8.4.0.post6+tuxcare" } ] }