{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:95c85aea-7657-504f-8978-9bae7a43cf86",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "tornado",
      "purl": "pkg:pypi/tornado@5.1.1.post7+tuxcare",
      "type": "library",
      "bom-ref": "pkg:pypi/tornado@5.1.1.post7+tuxcare",
      "version": "5.1.1.post7+tuxcare",
      "pedigree": {
        "ancestors": [
          {
            "name": "tornado",
            "purl": "pkg:pypi/tornado@5.1.1",
            "type": "library",
            "version": "5.1.1"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2023-28370",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:c679db33-1092-53f4-ac7e-f15aa1cbabc3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-28370 is fixed in version 5.1.1.post7+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2024-52804",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:f2a75e2a-7f2f-5398-92f7-486609abd9b4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52804 is fixed in version 5.1.1.post7+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2025-47287",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:5df629f6-0107-513f-ac24-f67f7b44282b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-47287 is fixed in version 5.1.1.post7+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2025-67724",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:a6da0096-007d-599f-8c22-addf50b38c27",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67724 is fixed in version 5.1.1.post7+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2025-67725",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:fb8b024a-b006-5beb-9f9b-6a1ba1edb91d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67725 is fixed in version 5.1.1.post7+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2025-67726",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:0c97a371-3278-53bd-9610-7e62ecf2f2fc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67726 is fixed in version 5.1.1.post7+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2026-115927",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:3c9a03ee-f060-51ec-841c-b0721fa82439",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-115927 is fixed in version 5.1.1.post7+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2026-116577",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:7b91d623-f6e5-5404-b948-0ea5b26cf481",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-116577 is fixed in version 5.1.1.post7+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2026-116578",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:91c138f3-3f51-5f90-873e-f92a9124bef8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-116578 is fixed in version 5.1.1.post7+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2026-123534",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:56684ec7-30cf-51fb-921e-aea5c104b23e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-123534 affects version 5.1.1.post7+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2026-123535",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:246be233-6424-5e51-b8f4-07b3e163ace6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-123535 affects version 5.1.1.post7+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2026-31958",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:21740928-22d7-5d0e-a1f7-3e8f0c8afd8f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-31958 is fixed in version 5.1.1.post7+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2026-35536",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:c1db708f-7cd1-58c3-bc5d-c9d2bffb779a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-35536 is fixed in version 5.1.1.post7+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2026-49853",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:20ca22cf-b0a4-5722-91b4-62781effa5b6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49853 is fixed in version 5.1.1.post7+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2026-49854",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:50a58622-32cb-594d-ac4c-3138f500229c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49854 is fixed in version 5.1.1.post7+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2026-49855",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:589dc967-6b1e-5f74-ac85-23604e15b905",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49855 is fixed in version 5.1.1.post7+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2026-82397",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:fd4fabc4-e9c4-5bc7-9c7e-d72879429261",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-82397 is fixed in version 5.1.1.post7+tuxcare of tornado."
      }
    },
    {
      "id": "GHSA-3hv7-mjh2-fv65",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:5ab147f7-852d-5631-9560-91a3e4dce5eb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-3hv7-mjh2-fv65 is fixed in version 5.1.1.post7+tuxcare of tornado."
      }
    },
    {
      "id": "GHSA-753j-mpmx-qq6g",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:fb77d23e-66cb-53f2-b9e9-ec399e3bccf3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-753j-mpmx-qq6g is fixed in version 5.1.1.post7+tuxcare of tornado."
      }
    },
    {
      "id": "GHSA-78cv-mqj4-43f7",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:177fc39d-5ada-5519-b871-f8647d5f8639",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-78cv-mqj4-43f7 is fixed in version 5.1.1.post7+tuxcare of tornado."
      }
    },
    {
      "id": "GHSA-8423-8fgw-73vq",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:76837624-9bfe-514b-bea5-773cad71b0d8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-8423-8fgw-73vq is fixed in version 5.1.1.post7+tuxcare of tornado."
      }
    },
    {
      "id": "GHSA-c2m8-h5v5-343r",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:2e0be9f3-bf70-51d0-85e7-0d3e19fbfce9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-c2m8-h5v5-343r is fixed in version 5.1.1.post7+tuxcare of tornado."
      }
    },
    {
      "id": "GHSA-chx6-46f5-w4vp",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:84595f85-f8b8-5323-b248-fc6ef2cf3ed0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-chx6-46f5-w4vp is fixed in version 5.1.1.post7+tuxcare of tornado."
      }
    },
    {
      "id": "GHSA-pw6j-qg29-8w7f",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:b72c374f-3ba3-5916-98d5-7ec2c01161a7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-pw6j-qg29-8w7f is fixed in version 5.1.1.post7+tuxcare of tornado."
      }
    },
    {
      "id": "GHSA-qppv-j76h-2rpx",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:78ed31e7-1fdf-5d8e-9588-fe0ca7ae8cbf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-qppv-j76h-2rpx is fixed in version 5.1.1.post7+tuxcare of tornado."
      }
    },
    {
      "id": "GHSA-w235-7p84-xx57",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:1dd8bc77-65c8-5197-b8b4-a757ec4bb9df",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-w235-7p84-xx57 is fixed in version 5.1.1.post7+tuxcare of tornado."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:pypi/tornado@5.1.1.post7+tuxcare"
    }
  ]
}