{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:861c5f8f-0417-5aa8-b9e1-7ef5edbe9536", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "aiohttp", "purl": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare", "type": "library", "bom-ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare", "version": "3.10.11.post2+tuxcare", "pedigree": { "ancestors": [ { "name": "aiohttp", "purl": "pkg:pypi/aiohttp@3.10.11", "type": "library", "version": "3.10.11" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2023-37276", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:c38a22d2-a33a-5aa8-a0a0-29011ee008fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-37276 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2023-47627", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:cb96f557-6a7f-5f14-9ded-deca2a19a44a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-47627 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2023-49081", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:8980a192-aded-5013-b369-670c3e4e7c8a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-49081 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2023-49082", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:18501204-dfcd-5a18-979f-c958f93bb434", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-49082 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2024-23334", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:1a82409f-959a-52d8-a800-4995234a0e90", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-23334 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2024-23829", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:5a635a92-ecdd-5d24-8046-259739a56813", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-23829 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2024-27306", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:c1845a1d-adff-58a6-bb81-ae1093ac693a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-27306 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2024-30251", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:aae2aa8e-9804-5dc8-93ec-e2acd2193904", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-30251 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2024-52304", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:94e47e4a-4c87-5243-bdf7-36f21483d74c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-52304 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2025-53643", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:016318f6-e56f-5369-9419-56c7ef00b7c8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-53643 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2025-69223", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:abe94f71-6bc1-53de-b0ea-c008654b5515", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-69223 is fixed in version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2025-69224", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:456c0d57-adb9-5a83-8f16-0c6c170cd0c9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-69224 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2025-69225", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:d8ab14cc-bc1b-5338-8c21-961b0916c50a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-69225 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2025-69226", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:3db51c55-28a8-5b7c-ab58-a582f101cb7f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-69226 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2025-69227", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:05a7cce9-2b89-51fa-8c1a-de12373af55d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-69227 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2025-69228", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:82696336-adde-5982-a26f-ee1302594c3d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-69228 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2025-69229", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:10c15c3c-4f35-5cb7-bc1a-2e6ad9fbb4a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-69229 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2025-69230", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:b841bd63-37e1-5c8b-b25e-8825e4e1eec2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-69230 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2026-111063", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:53786878-0e0d-52a6-9b25-fcb115e2baa6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111063 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2026-111064", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:8865bfc5-30dd-5e93-9f72-e217957492bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-111064 is fixed in version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2026-111065", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:d87f76ac-daf5-59dd-bcd2-48313d3e0fe3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111065 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2026-111066", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:b1732e42-ac6b-5b2f-aa70-6f44074c9f46", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-111066 is fixed in version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2026-111748", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:2b18e8ca-406e-557d-8c73-2c410eafeda3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111748 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2026-111749", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:9fb178ae-12bc-56a8-a470-6af598c17420", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111749 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2026-111750", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:01915969-42b8-56ae-b330-a1727536aaed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-111750 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2026-22815", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:62d08cf5-be4f-51cb-9f3c-9483f04ec224", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22815 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2026-34513", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:19ca720e-2122-56e7-9135-fb07b4582737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34513 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2026-34514", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:d1738bf9-8701-5fdc-b7e7-2cb35718886c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34514 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2026-34515", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:f95f1ecf-3497-587b-8312-c76392016c83", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34515 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2026-34516", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:4c7f1999-529c-57b9-bd70-fc2ee57f59d8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34516 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2026-34517", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:14db37a5-edb2-560b-89a1-69304f1b6314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34517 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2026-34518", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:0e5676cf-4a1c-5f45-b048-bd3427ba6e16", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34518 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2026-34519", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:867fa702-318d-578f-8c0a-2fa846e8b4f0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34519 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2026-34520", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:4a62aa99-f26d-54e2-bbd4-3f1004322ec8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34520 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2026-34525", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:0b876d6b-4b94-500e-be77-257bce0a75ba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34525 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2026-34993", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:5347afbe-cbf1-5eba-82a2-2c7b304fe834", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34993 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2026-47265", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:d3999c2d-f757-56c5-bd04-7e3da0d0024f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47265 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2026-50269", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:162a6d77-6dad-511a-a688-59d4f7860544", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50269 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2026-54273", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:6d2bc214-016a-5183-a374-97cbb9c7a4ad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54273 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2026-54274", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:907e2f8a-801e-5937-82cb-973468ff54ae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54274 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2026-54275", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:fa03ce89-76bb-523d-b424-15b797829c1d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54275 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2026-54276", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:e654a029-5c34-5364-8e5e-90cc5388d1ef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54276 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2026-54277", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:a27c536c-4c34-579b-8047-b6d26c53be47", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54277 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2026-54278", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:18b9b99d-ff17-5858-a2a2-8f72872b5b50", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54278 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2026-54279", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:c79d985f-e499-56e7-9d6a-e22e7d470db8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54279 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2026-54280", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:82b71219-4116-50cc-9cfb-b4d9eb696a24", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54280 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2026-59881", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:9161e57d-50d2-56f9-8b56-2281afebf237", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59881 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2026-69243", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:66c5f5bf-3c6d-5805-b515-0d41f90aad9e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69243 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "CVE-2026-69244", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:8ea814ae-49b0-5bb2-a3a3-b9c72f6da53f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69244 is fixed in version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "GHSA-2g87-pp6c-29x5", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:576ae294-e652-56d6-b8ca-8e76f014e8eb", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-2g87-pp6c-29x5 affects version 3.10.11.post2+tuxcare of aiohttp." } }, { "id": "GHSA-pjjw-qhg8-p2p9", "affects": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ], "bom-ref": "urn:uuid:387afa25-2646-5d2d-8f93-e90e6d4346fd", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-pjjw-qhg8-p2p9 affects version 3.10.11.post2+tuxcare of aiohttp." } } ], "dependencies": [ { "ref": "pkg:pypi/aiohttp@3.10.11.post2+tuxcare" } ] }