{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:5e06c387-aa4d-54fe-9386-5402213cb7a8", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "tornado", "purl": "pkg:pypi/tornado@6.1.0.post7+tuxcare", "type": "library", "bom-ref": "pkg:pypi/tornado@6.1.0.post7+tuxcare", "version": "6.1.0.post7+tuxcare", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2023-28370", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:0507d64c-7bbf-506f-b694-2da8b790c110", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-28370 is fixed in version 6.1.0.post7+tuxcare of tornado." } }, { "id": "CVE-2024-52804", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:17c1bee7-3df3-5ff8-8248-388e6d117c7c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-52804 is fixed in version 6.1.0.post7+tuxcare of tornado." } }, { "id": "CVE-2025-47287", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:52551cc8-2412-56e3-9eaf-07f6463deb9f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-47287 is fixed in version 6.1.0.post7+tuxcare of tornado." } }, { "id": "CVE-2025-67724", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:379efdc3-12aa-5472-9fd2-677cf1ac6330", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67724 is fixed in version 6.1.0.post7+tuxcare of tornado." } }, { "id": "CVE-2025-67725", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:a99f88a1-41f3-50f3-940b-2cdfc62a9ddb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67725 is fixed in version 6.1.0.post7+tuxcare of tornado." } }, { "id": "CVE-2025-67726", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:9114c933-3498-5b23-8eb5-c8690d424f3a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67726 affects version 6.1.0.post7+tuxcare of tornado." } }, { "id": "CVE-2026-31958", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:8e19de72-e624-5d85-9afe-5771c6ac11c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-31958 is fixed in version 6.1.0.post7+tuxcare of tornado." } }, { "id": "CVE-2026-35536", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:1614993d-028b-593f-bca4-53b582e50633", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-35536 is fixed in version 6.1.0.post7+tuxcare of tornado." } }, { "id": "CVE-2026-49853", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:7fda8aec-d94c-570b-8a59-416f240882cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-49853 is fixed in version 6.1.0.post7+tuxcare of tornado." } }, { "id": "CVE-2026-49854", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:e37d1169-e95b-5055-9535-8c0271c75d5d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-49854 is fixed in version 6.1.0.post7+tuxcare of tornado." } }, { "id": "CVE-2026-49855", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:58ecfe0e-104a-5eb7-b52d-5444b89a0bbd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-49855 is fixed in version 6.1.0.post7+tuxcare of tornado." } }, { "id": "CVE-2026-82397", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:652d3bfe-bb74-5640-a83a-9a2b8ee74c78", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-82397 affects version 6.1.0.post7+tuxcare of tornado, and is fixed in 6.1.0.post8+tuxcare." } }, { "id": "GHSA-753j-mpmx-qq6g", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:7d288c83-c4f7-5043-a356-fc035e60f84b", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-753j-mpmx-qq6g is fixed in version 6.1.0.post7+tuxcare of tornado." } }, { "id": "GHSA-78cv-mqj4-43f7", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:0f155eb7-c986-59be-986b-fd14a70333b8", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-78cv-mqj4-43f7 is fixed in version 6.1.0.post7+tuxcare of tornado." } }, { "id": "GHSA-8423-8fgw-73vq", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:32fa0f89-1e2b-5fe4-b75c-a62d1dc4b8ed", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-8423-8fgw-73vq affects version 6.1.0.post7+tuxcare of tornado, and is fixed in 6.1.0.post8+tuxcare." } }, { "id": "GHSA-pw6j-qg29-8w7f", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:7fc05792-2e39-5b17-b416-47308f574a26", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-pw6j-qg29-8w7f is fixed in version 6.1.0.post7+tuxcare of tornado." } }, { "id": "GHSA-qppv-j76h-2rpx", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:ddf62b15-d217-58fe-9244-e2f65a62e84b", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-qppv-j76h-2rpx is fixed in version 6.1.0.post7+tuxcare of tornado." } }, { "id": "GHSA-w235-7p84-xx57", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post7+tuxcare" } ], "bom-ref": "urn:uuid:acab4fff-06e1-5f19-a082-a309c23b41e2", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-w235-7p84-xx57 is fixed in version 6.1.0.post7+tuxcare of tornado." } } ], "dependencies": [ { "ref": "pkg:pypi/tornado@6.1.0.post7+tuxcare" } ] }