{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:85b6a86b-3ce9-5bd3-b789-b3647c247f7d",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "tornado",
      "purl": "pkg:pypi/tornado@6.1.0.post9+tuxcare",
      "type": "library",
      "bom-ref": "pkg:pypi/tornado@6.1.0.post9+tuxcare",
      "version": "6.1.0.post9+tuxcare",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2023-28370",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:a5456e17-0c02-5e43-b214-5ec050bcaf9f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-28370 is fixed in version 6.1.0.post9+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2024-52804",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:a60ba6c7-6e13-5b19-a582-045454c69f35",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52804 is fixed in version 6.1.0.post9+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2025-47287",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:9ba6ea53-c4bd-5de6-b686-b3c8d880bb80",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-47287 is fixed in version 6.1.0.post9+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2025-67724",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:3bc7780b-ce89-565d-86b3-e4d5806240c3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67724 is fixed in version 6.1.0.post9+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2025-67725",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:79ce3d0c-ecd4-5a68-8968-a2d19c802171",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67725 is fixed in version 6.1.0.post9+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2025-67726",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:438c1841-7659-5fec-b6ae-b0ce060e56e5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67726 is fixed in version 6.1.0.post9+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2026-31958",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:704eb513-7b85-521c-9395-dd2075beda85",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-31958 is fixed in version 6.1.0.post9+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2026-35536",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:ba2fb6d8-b8be-5117-a50a-24fe10c77e78",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-35536 is fixed in version 6.1.0.post9+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2026-49853",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:65cacdca-e32f-5ae3-b2f1-352cbb71078c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49853 is fixed in version 6.1.0.post9+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2026-49854",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:1a66dfa2-e5b8-5e44-8d79-c06065bf16c1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49854 is fixed in version 6.1.0.post9+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2026-49855",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:eac30cbf-a209-55cd-9316-f66a7f83b6e0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49855 is fixed in version 6.1.0.post9+tuxcare of tornado."
      }
    },
    {
      "id": "CVE-2026-82397",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:6d534f1c-e7e0-5c27-97eb-789e9cceec5b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-82397 is fixed in version 6.1.0.post9+tuxcare of tornado."
      }
    },
    {
      "id": "GHSA-3hv7-mjh2-fv65",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:75718159-82a5-5edc-b644-c51fa826b80a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-3hv7-mjh2-fv65 is fixed in version 6.1.0.post9+tuxcare of tornado."
      }
    },
    {
      "id": "GHSA-753j-mpmx-qq6g",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:3d216b10-b3a2-514d-925c-a24fffcc4c2b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-753j-mpmx-qq6g is fixed in version 6.1.0.post9+tuxcare of tornado."
      }
    },
    {
      "id": "GHSA-78cv-mqj4-43f7",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:75eaecfc-0009-53b6-a288-7acaef988aaf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-78cv-mqj4-43f7 is fixed in version 6.1.0.post9+tuxcare of tornado."
      }
    },
    {
      "id": "GHSA-8423-8fgw-73vq",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:683b78a4-1764-5260-91ae-e16b7162a5e8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-8423-8fgw-73vq is fixed in version 6.1.0.post9+tuxcare of tornado."
      }
    },
    {
      "id": "GHSA-c2m8-h5v5-343r",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:5cb97d69-20bc-505b-b5d4-0f2ee3766ccc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-c2m8-h5v5-343r is fixed in version 6.1.0.post9+tuxcare of tornado."
      }
    },
    {
      "id": "GHSA-chx6-46f5-w4vp",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:8270d962-bf21-5e75-9d3d-54bf0b0654e7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-chx6-46f5-w4vp affects version 6.1.0.post9+tuxcare of tornado, and is fixed in 6.1.0.post10+tuxcare."
      }
    },
    {
      "id": "GHSA-pw6j-qg29-8w7f",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:90526be3-9014-56bb-86d3-409bfbb1cefc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-pw6j-qg29-8w7f is fixed in version 6.1.0.post9+tuxcare of tornado."
      }
    },
    {
      "id": "GHSA-qppv-j76h-2rpx",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:d5fd77c0-f55c-534b-8ebe-3b16afc1fb71",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-qppv-j76h-2rpx is fixed in version 6.1.0.post9+tuxcare of tornado."
      }
    },
    {
      "id": "GHSA-w235-7p84-xx57",
      "affects": [
        {
          "ref": "pkg:pypi/tornado@6.1.0.post9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:21daeef9-2d74-5317-a4d8-f34c30e63ce1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-w235-7p84-xx57 is fixed in version 6.1.0.post9+tuxcare of tornado."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:pypi/tornado@6.1.0.post9+tuxcare"
    }
  ]
}