{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e64d75e4-9489-58a9-b764-e0de2a744313",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "axios",
      "purl": "pkg:npm/axios@0.21.1-tuxcare.4",
      "type": "library",
      "bom-ref": "pkg:npm/axios@0.21.1-tuxcare.4",
      "version": "0.21.1-tuxcare.4",
      "pedigree": {
        "ancestors": [
          {
            "name": "axios",
            "purl": "pkg:npm/axios@0.21.1",
            "type": "library",
            "version": "0.21.1"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2021-3749",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:0187e88d-a955-5d16-a261-f437243b8abf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-3749 is fixed in version 0.21.1-tuxcare.4 of axios."
      }
    },
    {
      "id": "CVE-2023-45857",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:59d578ac-4448-5fc8-82e1-e8b47be16919",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-45857 is fixed in version 0.21.1-tuxcare.4 of axios."
      }
    },
    {
      "id": "CVE-2024-39338",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:59a0107b-7d72-501f-a890-d93caa01d30b",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2024-39338 does not affect version 0.21.1-tuxcare.4 of axios. already_fixed \u2014 The target axios 0.21.1-tuxcare.1 already contains equivalent defense logic against CVE-2024-39338 (protocol-relative URL SSRF) through the 'allowAbsoluteUrls' parameter added in CVE-2025-27152 backport (commit bc6d5a0b). When set to false, this parameter forces baseURL concatenation for protocol-relative URLs, preventing SSRF. The defense code exists in the codebase and is reachable on all exe...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2025-27152",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:2464d6ed-f4ed-544d-9c50-b78652ddc7c0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-27152 is fixed in version 0.21.1-tuxcare.4 of axios."
      }
    },
    {
      "id": "CVE-2025-62718",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:9b30c71a-f21e-512f-a6b2-d10c06fcf140",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-62718 is fixed in version 0.21.1-tuxcare.4 of axios."
      }
    },
    {
      "id": "CVE-2026-25639",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:1d1749e1-0b02-5605-9bf9-302c85da82f3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-25639 is fixed in version 0.21.1-tuxcare.4 of axios."
      }
    },
    {
      "id": "CVE-2026-40175",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:e7e52fc3-dc59-572a-98b7-dcf016d24b1b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40175 is fixed in version 0.21.1-tuxcare.4 of axios."
      }
    },
    {
      "id": "CVE-2026-42033",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:bf7af86b-c0bb-5e6d-9060-c68cfaa3a9cf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42033 is fixed in version 0.21.1-tuxcare.4 of axios."
      }
    },
    {
      "id": "CVE-2026-42034",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:80beac8c-5d02-5e51-9728-140762d2acfa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42034 is fixed in version 0.21.1-tuxcare.4 of axios."
      }
    },
    {
      "id": "CVE-2026-42035",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:74b3b4ab-bf1b-5b52-8680-b504ee29da09",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42035 is fixed in version 0.21.1-tuxcare.4 of axios."
      }
    },
    {
      "id": "CVE-2026-42036",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:21e20574-f822-5ef4-934b-df3d978ecaf7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42036 is fixed in version 0.21.1-tuxcare.4 of axios."
      }
    },
    {
      "id": "CVE-2026-42038",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:5e83b31d-0ce9-55f1-afed-2dc958c1d392",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42038 is fixed in version 0.21.1-tuxcare.4 of axios."
      }
    },
    {
      "id": "CVE-2026-42039",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:80a0faa9-6474-5149-9bce-94bc169fa63b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42039 is fixed in version 0.21.1-tuxcare.4 of axios."
      }
    },
    {
      "id": "CVE-2026-42040",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:68c03a5f-efae-5bb2-b6d7-6e962cf76bbe",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42040 is fixed in version 0.21.1-tuxcare.4 of axios."
      }
    },
    {
      "id": "CVE-2026-42041",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:aaaec5fd-73f7-51c6-b71f-c44ff30c75ca",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42041 is fixed in version 0.21.1-tuxcare.4 of axios."
      }
    },
    {
      "id": "CVE-2026-42042",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:6908cea5-5055-5581-8f3c-740440be6bcd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42042 is fixed in version 0.21.1-tuxcare.4 of axios."
      }
    },
    {
      "id": "CVE-2026-42043",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:ab137912-ba88-5ed0-9aa6-ab58ee6724c4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42043 is fixed in version 0.21.1-tuxcare.4 of axios."
      }
    },
    {
      "id": "CVE-2026-44486",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:a1401801-f4fa-5404-820d-38065fe15ecb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44486 is fixed in version 0.21.1-tuxcare.4 of axios."
      }
    },
    {
      "id": "CVE-2026-44487",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:8b96ebd4-cc99-54ed-9774-1743e20a4ac6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44487 is fixed in version 0.21.1-tuxcare.4 of axios."
      }
    },
    {
      "id": "CVE-2026-44490",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:cae1100c-3e46-52e7-ae36-f96d3a037ae4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44490 is fixed in version 0.21.1-tuxcare.4 of axios."
      }
    },
    {
      "id": "CVE-2026-44492",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:16ea530a-fe1b-5c11-8e80-6dd5b98d975b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44492 is fixed in version 0.21.1-tuxcare.4 of axios."
      }
    },
    {
      "id": "CVE-2026-44495",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:1cc87a1e-9203-5465-85df-0f3987240f1b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44495 is fixed in version 0.21.1-tuxcare.4 of axios."
      }
    },
    {
      "id": "CVE-2026-44496",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:628a2ec8-66bf-5f3c-85d4-4b64fdc31726",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44496 is fixed in version 0.21.1-tuxcare.4 of axios."
      }
    },
    {
      "id": "CVE-2026-67316",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:9a5b8da0-f08f-5599-b969-6270e543eb18",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-67316 affects version 0.21.1-tuxcare.4 of axios, and is fixed in 0.21.1-tuxcare.5."
      }
    },
    {
      "id": "CVE-2026-67319",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:ec4788a2-9096-55d9-98ad-f85854adcb00",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-67319 is fixed in version 0.21.1-tuxcare.4 of axios."
      }
    },
    {
      "id": "GHSA-7q8q-rj6j-mhjq",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:5246fdf2-16f3-50f3-ac4b-10b042087f85",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-7q8q-rj6j-mhjq affects version 0.21.1-tuxcare.4 of axios."
      }
    },
    {
      "id": "GHSA-f2r5-pqh9-r8f8",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:8af0ab7b-476d-57e7-9351-37ad70ed9210",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-f2r5-pqh9-r8f8 is a false positive for axios 0.21.1-tuxcare.4."
      }
    },
    {
      "id": "GHSA-mmx7-hfxf-jppx",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:3979ede2-c78d-59ee-b833-dfdeb9de5767",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mmx7-hfxf-jppx affects version 0.21.1-tuxcare.4 of axios."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/axios@0.21.1-tuxcare.4"
    }
  ]
}