{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:8ed728ca-3d16-57e0-a533-3e9e99c45cf2",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "tornado",
      "purl": "pkg:pypi/tornado@5.1.1.post5+tuxcare",
      "type": "library",
      "bom-ref": "pkg:pypi/tornado@5.1.1.post5+tuxcare",
      "version": "5.1.1.post5+tuxcare",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2023-28370",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post5+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:82728c2c-8e97-5999-be37-040721898b35",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-28370 is fixed in version 5.1.1.post5+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2024-52804",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post5+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:42066f35-36e0-58ed-b7a1-8f69abc9e7dd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52804 is fixed in version 5.1.1.post5+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2025-47287",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post5+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:808d25a5-c40d-556d-8c53-3e529902d05a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-47287 is fixed in version 5.1.1.post5+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2025-67724",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post5+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:60d4a0d0-8120-5ee5-9dea-26945b50cc6c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67724 is fixed in version 5.1.1.post5+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2025-67725",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post5+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:b97618b5-8963-597f-a7c6-6c2b4343336f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67725 is fixed in version 5.1.1.post5+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2025-67726",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post5+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:e1a017c1-2d56-5d24-9818-ae9cd9f138fb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67726 is fixed in version 5.1.1.post5+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2026-31958",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post5+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:0fb91ae7-d8c7-564d-a3fc-ea84dea95811",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-31958 is fixed in version 5.1.1.post5+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2026-35536",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post5+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:709b2e93-7c9e-51a4-922f-d4c34ee7421f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-35536 is fixed in version 5.1.1.post5+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2026-49853",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post5+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:1a4245dc-0f11-54c7-aeb3-d57c458448ab",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49853 is fixed in version 5.1.1.post5+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2026-49854",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post5+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:b259aa89-760e-57e6-abab-0666cd0d3ce0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49854 is fixed in version 5.1.1.post5+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2026-49855",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post5+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:fac9b43c-2636-5fcd-b73f-98f7df7a2e03",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49855 is fixed in version 5.1.1.post5+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2026-82397",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post5+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:9e694dbf-233b-562d-a458-e431d2b51645",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-82397 is fixed in version 5.1.1.post5+tuxcare of tornado."
      }
    },
    {
      "id": "GHSA-3hv7-mjh2-fv65",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post5+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:b864fa3e-f2dc-5c52-b8f0-068b1260d965",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-3hv7-mjh2-fv65 is fixed in version 5.1.1.post5+tuxcare of tornado."
      }
    },
    {
      "id": "GHSA-753j-mpmx-qq6g",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post5+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:3a17db6f-a42d-5ba0-be30-7150c406f350",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-753j-mpmx-qq6g is fixed in version 5.1.1.post5+tuxcare of tornado."
      }
    },
    {
      "id": "GHSA-78cv-mqj4-43f7",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post5+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:7ff60290-b55e-561c-b0bb-e0cfa0087d03",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-78cv-mqj4-43f7 is fixed in version 5.1.1.post5+tuxcare of tornado."
      }
    },
    {
      "id": "GHSA-8423-8fgw-73vq",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post5+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:aec80129-0dcb-5b15-b884-d4cd1da7a8fb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-8423-8fgw-73vq is fixed in version 5.1.1.post5+tuxcare of tornado."
      }
    },
    {
      "id": "GHSA-c2m8-h5v5-343r",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post5+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:f76347bd-fe7b-55b5-b7e5-475bf0407932",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-c2m8-h5v5-343r is fixed in version 5.1.1.post5+tuxcare of tornado."
      }
    },
    {
      "id": "GHSA-chx6-46f5-w4vp",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post5+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:8c5b5c30-4396-52d9-b964-665d368fbde0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-chx6-46f5-w4vp affects version 5.1.1.post5+tuxcare of tornado, and is fixed in 5.1.1.post6+tuxcare."
      }
    },
    {
      "id": "GHSA-pw6j-qg29-8w7f",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post5+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:296dead9-a745-50f0-9d71-7a30be523302",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-pw6j-qg29-8w7f is fixed in version 5.1.1.post5+tuxcare of tornado."
      }
    },
    {
      "id": "GHSA-qppv-j76h-2rpx",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post5+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:44640eee-e8be-5887-946d-0a9dbaa88f35",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-qppv-j76h-2rpx is fixed in version 5.1.1.post5+tuxcare of tornado."
      }
    },
    {
      "id": "GHSA-w235-7p84-xx57",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@5.1.1.post5+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:eea5934d-1fbb-5626-8ab7-5280b5edd4d5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-w235-7p84-xx57 is fixed in version 5.1.1.post5+tuxcare of tornado."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:pypi/tornado@5.1.1.post5+tuxcare"
    }
  ]
}