{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:64dc736e-11bb-572c-ad12-ff53732b9c1a", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "aiohttp", "purl": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare", "type": "library", "bom-ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare", "version": "3.10.11.post3+tuxcare", "pedigree": { "ancestors": [ { "name": "aiohttp", "purl": "pkg:pypi/aiohttp@3.10.11", "type": "library", "version": "3.10.11" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2023-37276", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:0468136d-94e5-5e79-9d08-b5cab1bc4aec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-37276 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2023-47627", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:6d5e3084-1d48-58a1-8301-e990dbf1b28f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-47627 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2023-49081", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:24be5f27-7385-5356-8a4c-04bb4dccf998", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-49081 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2023-49082", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:f5a3ea3b-dc73-59fd-aa04-979d2f6d0c39", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-49082 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2024-23334", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:9381bec6-fab0-5f55-a5b2-3db29d471467", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-23334 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2024-23829", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:07f83390-30e9-537c-bcb4-da2006defbf3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-23829 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2024-27306", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:b6a76b6a-60ef-5d70-a21b-0039049032da", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-27306 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2024-30251", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:3573cd42-514d-5cd7-a4c4-473656150b0b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-30251 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2024-52304", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:22d327f8-fdb2-5a21-a6c5-805942e7a63d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-52304 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2025-53643", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:bd398544-0cfe-54f8-ba4a-353a62a59c58", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-53643 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2025-69223", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:c9c71dfe-6665-5c12-90dd-0c5adbff396e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-69223 is fixed in version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2025-69224", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:95080bfc-4923-582e-accf-a520f6a70458", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-69224 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2025-69225", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:2d61e895-827b-55ea-baaf-765675444fb3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-69225 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2025-69226", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:0b07c841-70fb-5073-81bf-59df1970bd12", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-69226 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2025-69227", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:5d4339b5-a25a-508e-a321-9618ff831dae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-69227 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2025-69228", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:a397e67a-e444-5b39-9a30-b6df02867ff8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-69228 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2025-69229", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:87e811a3-8833-5fc2-a7a0-8211f4105743", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-69229 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2025-69230", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:25784a73-0dbf-575a-8f05-c8fe83dc3c11", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-69230 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2026-111063", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:eb59a5b9-b59e-597b-b06b-ce6ed33f446a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111063 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2026-111064", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:43bd884c-5a87-5479-bc74-3c77af149e68", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-111064 is fixed in version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2026-111065", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:94e604ac-996b-5fc5-aae4-43d6277a2436", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111065 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2026-111066", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:3fceb9e5-30f5-58c8-a4ea-f390dd4c3cef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-111066 is fixed in version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2026-111748", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:65f864d6-797b-5e2b-aa02-9865e3250a26", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111748 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2026-111749", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:16034106-d390-57ae-bdb1-bed526aeff68", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111749 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2026-111750", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:da84b519-a898-59ad-9a67-194a78b5df25", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111750 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2026-123817", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:f33d24f0-98f6-548e-84b3-ac193afa3b03", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-123817 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2026-22815", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:f6dc1179-d9e5-553d-b670-6f06d37998ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22815 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2026-34513", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:69356e65-6482-5311-b830-eba794373d38", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34513 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2026-34514", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:47c688f8-4606-56ca-ad7f-5d36a2de41a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34514 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2026-34515", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:a674b1a7-a5e1-57b2-ab64-3a1441be392d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34515 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2026-34516", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:68e4416b-6959-5171-8c5b-e3b94aefe8e0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34516 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2026-34517", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:cfbd4e7c-44fa-5ca7-ba00-943a748dd77f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34517 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2026-34518", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:f30e7018-b758-5715-943f-86a5baf6689d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34518 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2026-34519", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:57994e56-8b07-5dee-a7d9-631b8e220bf1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34519 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2026-34520", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:334ad8bd-9188-5b2c-b78f-28c0cb18943c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34520 is fixed in version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2026-34525", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:9c5f7df5-53be-5017-b891-131de5bd256c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34525 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2026-34993", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:d85ca3b2-0af1-5dbc-9bca-feb1e39b9967", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34993 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2026-47265", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:0e301e45-6413-51d8-9b06-2234b1fce48a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47265 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2026-50269", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:1b41ea82-775e-5351-97d9-aa077cc2e865", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50269 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2026-54273", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:b93d87e5-f2b3-53b5-a8ec-b1a5d3b5964b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54273 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2026-54274", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:03bdff7e-cab7-53c2-a626-bea5ee0819ca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54274 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2026-54275", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:b095044d-d087-51eb-8a6d-3eb822e4905c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54275 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2026-54276", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:c08e4f07-96a3-5678-81e1-cb1f65bf9388", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54276 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2026-54277", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:5d1a2d86-7f80-54b3-b213-dca50757a8aa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54277 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2026-54278", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:713c4fc2-c488-5faf-b9df-ec0a5eea3f5d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54278 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2026-54279", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:1b9093c3-4d55-59bb-af83-775acde68314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54279 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2026-54280", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:fc25f416-4560-5ada-8db3-c01ebcaeb305", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54280 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2026-59881", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:8a59e522-2ea3-5604-9219-91642621e1ae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59881 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2026-69243", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:9c4495d4-c115-5a1b-a877-595ebb6db558", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69243 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "CVE-2026-69244", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:082cb03e-0114-5b2d-9dc7-3b40827317d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69244 is fixed in version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "GHSA-2g87-pp6c-29x5", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:c3472ce8-0c5f-53dc-9b08-0c306143f05e", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-2g87-pp6c-29x5 affects version 3.10.11.post3+tuxcare of aiohttp." } }, { "id": "GHSA-pjjw-qhg8-p2p9", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ], "bom-ref": "urn:uuid:272205e6-e092-536b-90ca-dbe8617f9bfb", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-pjjw-qhg8-p2p9 affects version 3.10.11.post3+tuxcare of aiohttp." } } ], "dependencies": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post3+tuxcare" } ] }