{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:4c55f3eb-df0a-5e7b-8ddb-f968da5c98e1", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "tornado", "purl": "pkg:pypi/tornado@6.1.0.post8+tuxcare", "type": "library", "bom-ref": "pkg:pypi/tornado@6.1.0.post8+tuxcare", "version": "6.1.0.post8+tuxcare", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2023-28370", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:e5cc7b32-ec29-5830-b057-a90600c08271", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-28370 is fixed in version 6.1.0.post8+tuxcare of tornado." } }, { "id": "CVE-2024-52804", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:1d9809ef-b0ee-59a4-b24e-b43de802f6e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-52804 is fixed in version 6.1.0.post8+tuxcare of tornado." } }, { "id": "CVE-2025-47287", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:b0ca1630-c012-5cfb-bc41-ade34c4ac8d2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-47287 is fixed in version 6.1.0.post8+tuxcare of tornado." } }, { "id": "CVE-2025-67724", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:04547cb8-4b5f-547d-916d-68ceede67d37", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67724 is fixed in version 6.1.0.post8+tuxcare of tornado." } }, { "id": "CVE-2025-67725", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:a69b5689-5698-5ed0-985b-86a2a7fe5062", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67725 is fixed in version 6.1.0.post8+tuxcare of tornado." } }, { "id": "CVE-2025-67726", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:a18dc765-12c8-50de-95cc-7e7ac4398d57", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67726 affects version 6.1.0.post8+tuxcare of tornado." } }, { "id": "CVE-2026-31958", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:af9dc6c7-d12a-5437-8883-2ea2fb1a4150", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-31958 is fixed in version 6.1.0.post8+tuxcare of tornado." } }, { "id": "CVE-2026-35536", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:bdeb364d-089a-529d-b6b8-65efd768754b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-35536 is fixed in version 6.1.0.post8+tuxcare of tornado." } }, { "id": "CVE-2026-49853", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:6bd35790-66fd-510c-b7df-5b6a1d9b61dc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-49853 is fixed in version 6.1.0.post8+tuxcare of tornado." } }, { "id": "CVE-2026-49854", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:4add7f0c-fa03-5a2e-b53b-b168b31cba13", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-49854 is fixed in version 6.1.0.post8+tuxcare of tornado." } }, { "id": "CVE-2026-49855", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:0c3d41b6-79e0-51df-809b-54b49f9ed797", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-49855 is fixed in version 6.1.0.post8+tuxcare of tornado." } }, { "id": "CVE-2026-82397", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:b4a63dc9-37be-56a7-a17a-345c31bb678b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-82397 is fixed in version 6.1.0.post8+tuxcare of tornado." } }, { "id": "GHSA-753j-mpmx-qq6g", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:3f21af1f-7702-51e8-b227-6b4845200577", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-753j-mpmx-qq6g is fixed in version 6.1.0.post8+tuxcare of tornado." } }, { "id": "GHSA-78cv-mqj4-43f7", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:f97854c0-399b-5446-a1b6-a6897305eca4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-78cv-mqj4-43f7 is fixed in version 6.1.0.post8+tuxcare of tornado." } }, { "id": "GHSA-8423-8fgw-73vq", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:fef3f24e-a951-5118-a006-ffb81f1deac4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8423-8fgw-73vq is fixed in version 6.1.0.post8+tuxcare of tornado." } }, { "id": "GHSA-pw6j-qg29-8w7f", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:76f7ae82-e8e1-56ca-8900-00c02984ef50", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-pw6j-qg29-8w7f is fixed in version 6.1.0.post8+tuxcare of tornado." } }, { "id": "GHSA-qppv-j76h-2rpx", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:d9045503-362a-5ae9-b9ab-af57cac51b24", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-qppv-j76h-2rpx is fixed in version 6.1.0.post8+tuxcare of tornado." } }, { "id": "GHSA-w235-7p84-xx57", "affects": [ { "ref": "pkg:pypi/tornado@6.1.0.post8+tuxcare" } ], "bom-ref": "urn:uuid:5d481e1e-ebfd-514d-a705-e467fca1d84d", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-w235-7p84-xx57 is fixed in version 6.1.0.post8+tuxcare of tornado." } } ], "dependencies": [ { "ref": "pkg:pypi/tornado@6.1.0.post8+tuxcare" } ] }