{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:0f25c5c0-09cc-53d4-b0c8-38df100f0f4a",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "tornado",
      "purl": "pkg:pypi/tornado@6.1.0.post11+tuxcare",
      "type": "library",
      "bom-ref": "pkg:pypi/tornado@6.1.0.post11+tuxcare",
      "version": "6.1.0.post11+tuxcare",
      "pedigree": {
        "ancestors": [
          {
            "name": "tornado",
            "purl": "pkg:pypi/tornado@6.1.0",
            "type": "library",
            "version": "6.1.0"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2023-28370",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:bf3f9b14-671d-5ef2-bf9f-fc56e741417d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-28370 is fixed in version 6.1.0.post11+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2024-52804",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:0fb21f21-6525-5153-857a-14e39e4fa200",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52804 is fixed in version 6.1.0.post11+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2025-47287",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:593e2d1a-f086-59fc-86a3-6271989c876b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-47287 is fixed in version 6.1.0.post11+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2025-67724",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:24a33732-776a-57fb-990c-f47c093b292a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67724 is fixed in version 6.1.0.post11+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2025-67725",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:a85f99ab-a584-5482-96a7-01ffde2642b8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67725 is fixed in version 6.1.0.post11+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2025-67726",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:fb259c37-0871-5cf3-af0a-2c151b4c0274",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67726 is fixed in version 6.1.0.post11+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2026-115927",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:3a6b0238-9970-58f5-9252-c8835858d998",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-115927 is fixed in version 6.1.0.post11+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2026-116577",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:808d0b70-e942-5553-ba32-2b063ddede3b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-116577 is fixed in version 6.1.0.post11+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2026-116578",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:484cf49e-f5a9-564f-9917-12cc94a7206d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-116578 is fixed in version 6.1.0.post11+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2026-123534",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:9fe40788-68f5-5525-af7e-199629c5b132",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-123534 affects version 6.1.0.post11+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2026-123535",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:6a4e9567-858a-5376-b18f-7a9f3e8af9a4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-123535 affects version 6.1.0.post11+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2026-31958",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:8bbd297c-5a11-55e4-b688-4c8e176e70f2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-31958 is fixed in version 6.1.0.post11+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2026-35536",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:8ce9a480-5a8c-5b0c-81b6-6a10c671b031",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-35536 is fixed in version 6.1.0.post11+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2026-49853",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:b9a6539a-67d6-5c02-8e99-5fdeacc9c323",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49853 is fixed in version 6.1.0.post11+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2026-49854",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:a80fe06c-8a16-557e-808b-6c0facfa5e9a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49854 is fixed in version 6.1.0.post11+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2026-49855",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:f61d5e5a-40ae-56b9-833e-233b42167c81",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49855 is fixed in version 6.1.0.post11+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2026-82397",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:5cdd5905-452b-5b23-b5ce-06843a7876f0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-82397 is fixed in version 6.1.0.post11+tuxcare of tornado."
      }
    },
    {
      "id": "GHSA-3hv7-mjh2-fv65",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:29c5fe95-e89e-5b25-82ec-75369838649d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-3hv7-mjh2-fv65 is fixed in version 6.1.0.post11+tuxcare of tornado."
      }
    },
    {
      "id": "GHSA-753j-mpmx-qq6g",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:dea3655f-fa51-56c7-8a54-0cf24629fe13",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-753j-mpmx-qq6g is fixed in version 6.1.0.post11+tuxcare of tornado."
      }
    },
    {
      "id": "GHSA-78cv-mqj4-43f7",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:7676f554-72c7-5f0d-8ac3-71f0b1d9cdc6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-78cv-mqj4-43f7 is fixed in version 6.1.0.post11+tuxcare of tornado."
      }
    },
    {
      "id": "GHSA-8423-8fgw-73vq",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:3206bc4f-76e9-5537-a6d6-24c4cf6a1fef",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-8423-8fgw-73vq is fixed in version 6.1.0.post11+tuxcare of tornado."
      }
    },
    {
      "id": "GHSA-c2m8-h5v5-343r",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:95f6d036-1e3a-56f8-b525-6e3ca5028575",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-c2m8-h5v5-343r is fixed in version 6.1.0.post11+tuxcare of tornado."
      }
    },
    {
      "id": "GHSA-chx6-46f5-w4vp",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:caeb7f21-4eda-5338-823d-1f5ca885d4f9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-chx6-46f5-w4vp is fixed in version 6.1.0.post11+tuxcare of tornado."
      }
    },
    {
      "id": "GHSA-pw6j-qg29-8w7f",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:8a476c72-a1d3-5a8c-835b-37f259dca136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-pw6j-qg29-8w7f is fixed in version 6.1.0.post11+tuxcare of tornado."
      }
    },
    {
      "id": "GHSA-qppv-j76h-2rpx",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:af09f60b-f48d-5c5d-86f0-5dbc81f177f6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-qppv-j76h-2rpx is fixed in version 6.1.0.post11+tuxcare of tornado."
      }
    },
    {
      "id": "GHSA-w235-7p84-xx57",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:423a8a66-5779-5d41-829d-de430a76fd2c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-w235-7p84-xx57 is fixed in version 6.1.0.post11+tuxcare of tornado."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:pypi/tornado@6.1.0.post11+tuxcare"
    }
  ]
}