{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:9c5ee1bf-ed9a-568f-ad75-e975a65ecd19", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "pillow", "purl": "pkg:pypi/pillow@11.2.1.post7+tuxcare", "type": "library", "bom-ref": "pkg:pypi/pillow@11.2.1.post7+tuxcare", "version": "11.2.1.post7+tuxcare", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-48379", "affects": [ { "ref": "pkg:pypi/pillow@11.2.1.post7+tuxcare" } ], "bom-ref": "urn:uuid:2cb93b71-754f-5a7b-a8a1-7fdc4783dec3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48379 is fixed in version 11.2.1.post7+tuxcare of pillow." } }, { "id": "CVE-2026-25990", "affects": [ { "ref": "pkg:pypi/pillow@11.2.1.post7+tuxcare" } ], "bom-ref": "urn:uuid:e5d86f50-8351-5d59-b149-497035d4883a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25990 is fixed in version 11.2.1.post7+tuxcare of pillow." } }, { "id": "CVE-2026-40192", "affects": [ { "ref": "pkg:pypi/pillow@11.2.1.post7+tuxcare" } ], "bom-ref": "urn:uuid:50b4fddb-b136-5c41-82d5-400cfa3a27da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40192 is fixed in version 11.2.1.post7+tuxcare of pillow." } }, { "id": "CVE-2026-42308", "affects": [ { "ref": "pkg:pypi/pillow@11.2.1.post7+tuxcare" } ], "bom-ref": "urn:uuid:9c0c6be9-c1e8-50a0-ab98-63550b4fa675", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42308 is fixed in version 11.2.1.post7+tuxcare of pillow." } }, { "id": "CVE-2026-42309", "affects": [ { "ref": "pkg:pypi/pillow@11.2.1.post7+tuxcare" } ], "bom-ref": "urn:uuid:f45e040c-6f1e-5046-800a-19911d7eb2c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42309 is fixed in version 11.2.1.post7+tuxcare of pillow." } }, { "id": "CVE-2026-42310", "affects": [ { "ref": "pkg:pypi/pillow@11.2.1.post7+tuxcare" } ], "bom-ref": "urn:uuid:fddcfcdf-bb45-5bc4-a896-b8e715c91056", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42310 is fixed in version 11.2.1.post7+tuxcare of pillow." } }, { "id": "CVE-2026-42311", "affects": [ { "ref": "pkg:pypi/pillow@11.2.1.post7+tuxcare" } ], "bom-ref": "urn:uuid:613a2952-b9ee-53e6-998a-36eb338b9205", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42311 is fixed in version 11.2.1.post7+tuxcare of pillow." } }, { "id": "CVE-2026-54058", "affects": [ { "ref": "pkg:pypi/pillow@11.2.1.post7+tuxcare" } ], "bom-ref": "urn:uuid:b7e15a27-9587-5c81-9ef2-8e940b94a16a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54058 is fixed in version 11.2.1.post7+tuxcare of pillow." } }, { "id": "CVE-2026-54059", "affects": [ { "ref": "pkg:pypi/pillow@11.2.1.post7+tuxcare" } ], "bom-ref": "urn:uuid:0faf383f-1d19-5fd1-9dd4-a5e481b7d524", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54059 is fixed in version 11.2.1.post7+tuxcare of pillow." } }, { "id": "CVE-2026-54060", "affects": [ { "ref": "pkg:pypi/pillow@11.2.1.post7+tuxcare" } ], "bom-ref": "urn:uuid:87105a47-1041-591c-8ab5-3d7e36c2e6bd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54060 is fixed in version 11.2.1.post7+tuxcare of pillow." } }, { "id": "CVE-2026-55379", "affects": [ { "ref": "pkg:pypi/pillow@11.2.1.post7+tuxcare" } ], "bom-ref": "urn:uuid:652adb40-7ffd-5829-a02b-52a4a98fbd5f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55379 is fixed in version 11.2.1.post7+tuxcare of pillow." } }, { "id": "CVE-2026-55380", "affects": [ { "ref": "pkg:pypi/pillow@11.2.1.post7+tuxcare" } ], "bom-ref": "urn:uuid:34c36524-480a-5b9c-a0c4-0630b6f866a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55380 is fixed in version 11.2.1.post7+tuxcare of pillow." } }, { "id": "CVE-2026-55798", "affects": [ { "ref": "pkg:pypi/pillow@11.2.1.post7+tuxcare" } ], "bom-ref": "urn:uuid:0779141c-c690-50aa-92a8-ee398ca01104", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55798 is fixed in version 11.2.1.post7+tuxcare of pillow." } }, { "id": "CVE-2026-59197", "affects": [ { "ref": "pkg:pypi/pillow@11.2.1.post7+tuxcare" } ], "bom-ref": "urn:uuid:8ef724a5-32c3-55d4-82bd-bff4b543b2d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59197 is fixed in version 11.2.1.post7+tuxcare of pillow." } }, { "id": "CVE-2026-59198", "affects": [ { "ref": "pkg:pypi/pillow@11.2.1.post7+tuxcare" } ], "bom-ref": "urn:uuid:856aa696-5dac-596d-91bf-bb4d65c8b766", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59198 is fixed in version 11.2.1.post7+tuxcare of pillow." } }, { "id": "CVE-2026-59199", "affects": [ { "ref": "pkg:pypi/pillow@11.2.1.post7+tuxcare" } ], "bom-ref": "urn:uuid:7d9820ee-5c53-5975-a802-f2c8ac5d44b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59199 is fixed in version 11.2.1.post7+tuxcare of pillow." } }, { "id": "CVE-2026-59200", "affects": [ { "ref": "pkg:pypi/pillow@11.2.1.post7+tuxcare" } ], "bom-ref": "urn:uuid:dd68f303-da50-53b7-b7b4-d42f4a2c2d8d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59200 is fixed in version 11.2.1.post7+tuxcare of pillow." } }, { "id": "CVE-2026-59204", "affects": [ { "ref": "pkg:pypi/pillow@11.2.1.post7+tuxcare" } ], "bom-ref": "urn:uuid:a2778dce-1f2a-5a1f-9137-1457aad8215f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59204 is fixed in version 11.2.1.post7+tuxcare of pillow." } }, { "id": "CVE-2026-59205", "affects": [ { "ref": "pkg:pypi/pillow@11.2.1.post7+tuxcare" } ], "bom-ref": "urn:uuid:aca154f4-4198-5c02-9b5c-f7bd46e5ba05", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59205 is fixed in version 11.2.1.post7+tuxcare of pillow." } } ], "dependencies": [ { "ref": "pkg:pypi/pillow@11.2.1.post7+tuxcare" } ] }