{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:84c8c69b-3e61-5075-aa97-cda73430b240",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "axios",
      "purl": "pkg:npm/axios@0.21.1-tuxcare.5",
      "type": "library",
      "bom-ref": "pkg:npm/axios@0.21.1-tuxcare.5",
      "version": "0.21.1-tuxcare.5",
      "pedigree": {
        "ancestors": [
          {
            "name": "axios",
            "purl": "pkg:npm/axios@0.21.1",
            "type": "library",
            "version": "0.21.1"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2021-3749",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:0efb946e-5908-5771-b30f-550f25b0bb8d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-3749 is fixed in version 0.21.1-tuxcare.5 of axios."
      }
    },
    {
      "id": "CVE-2023-45857",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:5bdf4b78-5975-5c7a-9830-140e0d230e42",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-45857 is fixed in version 0.21.1-tuxcare.5 of axios."
      }
    },
    {
      "id": "CVE-2024-39338",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:651d45c7-b854-57cc-b308-c496444075e6",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2024-39338 does not affect version 0.21.1-tuxcare.5 of axios. already_fixed \u2014 The target axios 0.21.1-tuxcare.1 already contains equivalent defense logic against CVE-2024-39338 (protocol-relative URL SSRF) through the 'allowAbsoluteUrls' parameter added in CVE-2025-27152 backport (commit bc6d5a0b). When set to false, this parameter forces baseURL concatenation for protocol-relative URLs, preventing SSRF. The defense code exists in the codebase and is reachable on all exe...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2025-27152",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:17289ac4-3a7a-51c3-a2c1-9957da9516cc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-27152 is fixed in version 0.21.1-tuxcare.5 of axios."
      }
    },
    {
      "id": "CVE-2025-62718",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:90a23352-8c5a-5036-be6a-590895530a5b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-62718 is fixed in version 0.21.1-tuxcare.5 of axios."
      }
    },
    {
      "id": "CVE-2026-25639",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:1d7538dc-cc74-5fe6-9dee-e36ca5d8c5e8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-25639 is fixed in version 0.21.1-tuxcare.5 of axios."
      }
    },
    {
      "id": "CVE-2026-40175",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:0353e970-55ae-59e7-aafd-262cc3285a4b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40175 is fixed in version 0.21.1-tuxcare.5 of axios."
      }
    },
    {
      "id": "CVE-2026-42033",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:bcbff1a8-ba61-58e4-bd5d-bf337b1ede11",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42033 is fixed in version 0.21.1-tuxcare.5 of axios."
      }
    },
    {
      "id": "CVE-2026-42034",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:544d1549-eecc-513a-8db0-0d84c2177609",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42034 is fixed in version 0.21.1-tuxcare.5 of axios."
      }
    },
    {
      "id": "CVE-2026-42035",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:11de1f4b-a545-5ba7-b1fa-d8912599db3b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42035 is fixed in version 0.21.1-tuxcare.5 of axios."
      }
    },
    {
      "id": "CVE-2026-42036",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:b1517e02-4d18-54bb-a669-aabcd6e32aa8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42036 is fixed in version 0.21.1-tuxcare.5 of axios."
      }
    },
    {
      "id": "CVE-2026-42038",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:beb7acd0-6c1d-5073-859c-199ced05ad1c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42038 is fixed in version 0.21.1-tuxcare.5 of axios."
      }
    },
    {
      "id": "CVE-2026-42039",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:30941e07-c484-5757-81e7-3c137971af4f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42039 is fixed in version 0.21.1-tuxcare.5 of axios."
      }
    },
    {
      "id": "CVE-2026-42040",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:9d094c08-7d0b-5685-b97a-26bd016aceab",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42040 is fixed in version 0.21.1-tuxcare.5 of axios."
      }
    },
    {
      "id": "CVE-2026-42041",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:aac1cfe9-b4b8-5293-8b20-b4604250c69e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42041 is fixed in version 0.21.1-tuxcare.5 of axios."
      }
    },
    {
      "id": "CVE-2026-42042",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:b4499bd2-dbcc-59ca-b183-bf8aa36583f9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42042 is fixed in version 0.21.1-tuxcare.5 of axios."
      }
    },
    {
      "id": "CVE-2026-42043",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:fa95d544-42a1-517e-83b1-4a4f51eb52f4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42043 is fixed in version 0.21.1-tuxcare.5 of axios."
      }
    },
    {
      "id": "CVE-2026-44486",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:7e34a5bf-9090-5b97-abd3-3137a6957636",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44486 is fixed in version 0.21.1-tuxcare.5 of axios."
      }
    },
    {
      "id": "CVE-2026-44487",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:c8879619-d73a-5a0e-ba10-b3dc9b48aa0d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44487 is fixed in version 0.21.1-tuxcare.5 of axios."
      }
    },
    {
      "id": "CVE-2026-44490",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:72d6eafe-2a21-5d88-920a-6a24f1fb21d4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44490 is fixed in version 0.21.1-tuxcare.5 of axios."
      }
    },
    {
      "id": "CVE-2026-44492",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:7a02ec96-c831-5c30-8344-7a89c46735f1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44492 is fixed in version 0.21.1-tuxcare.5 of axios."
      }
    },
    {
      "id": "CVE-2026-44495",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:0f1e56ec-6337-5469-936d-40b072d3c85f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44495 is fixed in version 0.21.1-tuxcare.5 of axios."
      }
    },
    {
      "id": "CVE-2026-44496",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:9ac35d8e-22ee-5c82-ae38-5879c3c68240",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44496 is fixed in version 0.21.1-tuxcare.5 of axios."
      }
    },
    {
      "id": "CVE-2026-67316",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:c2438209-1241-53a3-bcbf-43eb92ec4786",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-67316 is fixed in version 0.21.1-tuxcare.5 of axios."
      }
    },
    {
      "id": "CVE-2026-67319",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:458243f7-dc84-5c2d-a47e-922b32e779ac",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-67319 is fixed in version 0.21.1-tuxcare.5 of axios."
      }
    },
    {
      "id": "GHSA-7q8q-rj6j-mhjq",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:33147f89-1082-5bed-8b8e-82e9e5303166",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-7q8q-rj6j-mhjq affects version 0.21.1-tuxcare.5 of axios."
      }
    },
    {
      "id": "GHSA-f2r5-pqh9-r8f8",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:930dd954-e6c6-53aa-9848-67d160d62fc1",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-f2r5-pqh9-r8f8 is a false positive for axios 0.21.1-tuxcare.5."
      }
    },
    {
      "id": "GHSA-mmx7-hfxf-jppx",
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:bd1f026d-965a-5c12-950f-f73b24454573",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mmx7-hfxf-jppx affects version 0.21.1-tuxcare.5 of axios."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/axios@0.21.1-tuxcare.5"
    }
  ]
}