{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:6db8c63e-8734-59c4-ac5e-26c933c5b721", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "pillow", "purl": "pkg:pypi/pillow@9.5.0.post11+tuxcare", "type": "library", "bom-ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare", "version": "9.5.0.post11+tuxcare", "pedigree": { "ancestors": [ { "name": "pillow", "purl": "pkg:pypi/pillow@9.5.0", "type": "library", "version": "9.5.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2023-44271", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:f3eb9c82-7194-5b91-a170-2254d2cf35ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-44271 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2023-4863", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:a35446c5-d411-533f-80fb-e3267350e642", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-4863 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2023-50447", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:03a58f64-c0f2-5bd7-ac33-f92c43822e59", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-50447 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2024-28219", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:62c65e01-dac3-5c4b-beb6-a6e41ea6f6c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-28219 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112390", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:d20c4dda-d8f7-5312-b138-e5f06ac7ab27", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112390 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112391", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:55a94ead-aec3-5350-8790-c148dd18b9da", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112391 affects version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112392", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:363c3361-dec2-50df-af28-b170c630262c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112392 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112393", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:40c5313e-1c14-5b5d-921c-59e1f0a365a8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112393 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112394", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:b689c43f-42e7-5855-897b-c9463287a66b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112394 affects version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112395", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:ac7fcf84-3510-52e4-b4a2-cbc7d805ea40", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112395 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112397", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:ac5bc094-c6d3-55dd-8d29-51f27ee84362", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112397 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112398", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:fef7ac6d-3c3b-553b-a4a0-ea7e12165618", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112398 affects version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112399", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:363bd1cb-3399-56e9-b5e6-6d5a15344525", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112399 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112400", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:30239535-3c4f-51ed-9066-662f7f619642", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112400 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112401", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:6e154754-60af-55f0-8543-428454554fd7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112401 affects version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112402", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:decc9d04-a37d-59c8-a586-9a3708ce9734", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112402 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112403", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:e326a110-c88a-5b72-ab50-09affa0afc44", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112403 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112404", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:1419409b-6f64-521c-8af4-e2162c702b46", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112404 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112406", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:096fa974-28b2-5207-a020-706c694f408c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112406 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112891", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:efbbc986-8cab-5dae-afdd-1904052b080b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112891 affects version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112892", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:fbd87d3d-2c7a-5f61-ae95-232ba6e89dc6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112892 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112894", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:d31e752e-4910-5db3-a1af-5fbf234d24bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112894 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112895", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:adf6df76-486a-57eb-9df4-63695e4ecfa2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112895 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112896", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:d48551a4-7e6c-5ec6-bed6-957bfe1216ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112896 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112897", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:837d9ea5-98bc-52ce-b7e8-516a49b8854b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112897 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112898", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:e7a06331-0691-56fe-9685-da060878d14b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112898 affects version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112899", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:98b07e6f-f260-51a5-9048-a386f4371646", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112899 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112900", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:8d620d66-f6d5-5690-aa05-30a4457b7850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-112900 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112901", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:16495ad5-23a0-5ade-9b66-f6f62fe35c6e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112901 affects version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-112902", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:e0be7b7c-9085-53b3-98e2-a43959f04371", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-112902 affects version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-42308", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:661cef13-26c5-5762-b88a-753a209c712f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42308 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-42310", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:4bde92bd-c25c-57b1-b6a8-8feb471913d4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42310 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-54058", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:32058e6b-fc69-50b3-8a2e-1ad538f29e20", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54058 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-54059", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:862c066a-ed1e-541c-a28d-a91afae19b21", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54059 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-54060", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:7467a252-21ca-5016-945c-8b8e2de88d82", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54060 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-55379", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:e12af568-4251-5407-a641-ce8ac3455bed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55379 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-55380", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:bfd7fab6-580e-5b2b-ab06-df5b541ad12a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55380 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-55798", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:0b26287a-3460-513f-82ab-d3a335c038bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55798 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-59197", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:b454307c-7405-5eb4-b958-07b141d931c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59197 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-59198", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:d66a0271-7342-50bc-9aea-4d04e766fddd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59198 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-59199", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:f8b9ae35-4de9-5097-ad7d-de3ff10b602e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59199 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-59200", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:0d8a446f-cfbf-5c20-9370-e0038df2b4f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59200 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-59204", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:5966fddc-3ed3-58d1-97d9-7365efa904da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59204 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-59205", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:cadd3959-2acd-52b3-8a7b-5d5a81b3ccda", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59205 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-96636", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:fc2c13a0-6a10-5d38-ba5b-4f933564c315", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96636 affects version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-96637", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:eac868d3-22fd-5048-ba6a-bed3ee1cede6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96637 affects version 9.5.0.post11+tuxcare of pillow, and is fixed in 9.5.0.post12+tuxcare." } }, { "id": "CVE-2026-96638", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:d100e1a8-d770-5ade-a2d8-0be14e7ab462", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96638 affects version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-96640", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:c8decfbf-5eb8-597e-af9f-c3729d3b581e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-96640 is fixed in version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-96641", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:8e48d475-44d7-5be1-9dc7-e68e7e15a60c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96641 affects version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-96642", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:1b3d303c-d4f6-5360-9a75-ff0261908a46", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96642 affects version 9.5.0.post11+tuxcare of pillow, and is fixed in 9.5.0.post12+tuxcare." } }, { "id": "CVE-2026-96644", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:b1d194b5-b09b-5500-a7fd-6840fd67b529", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96644 affects version 9.5.0.post11+tuxcare of pillow." } }, { "id": "CVE-2026-96778", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:b72c4dfb-74de-579c-bc97-79a08a16268c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-96778 affects version 9.5.0.post11+tuxcare of pillow, and is fixed in 9.5.0.post12+tuxcare." } }, { "id": "GHSA-56pw-mpj4-fxww", "affects": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ], "bom-ref": "urn:uuid:aed97b1d-07e6-50bd-93ca-7a3356ff1be5", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-56pw-mpj4-fxww is a false positive for pillow 9.5.0.post11+tuxcare." } } ], "dependencies": [ { "ref": "pkg:pypi/pillow@9.5.0.post11+tuxcare" } ] }