{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:6dc66d48-40f5-5245-b9c1-d3d92205c336",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "dompurify",
      "purl": "pkg:npm/dompurify@2.3.10-tuxcare.3",
      "type": "library",
      "bom-ref": "pkg:npm/dompurify@2.3.10-tuxcare.3",
      "version": "2.3.10-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "dompurify",
            "purl": "pkg:npm/dompurify@2.3.10",
            "type": "library",
            "version": "2.3.10"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-45801",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0dcd57dd-70b7-5610-9ab8-9e5f07b58553",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-45801 is fixed in version 2.3.10-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2024-47875",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f7a2a1e0-4bea-5c80-ba58-e1fcd3477425",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47875 is fixed in version 2.3.10-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2024-48910",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:bdfac763-d986-593d-b8c7-d2de9f7865ec",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-48910 is fixed in version 2.3.10-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2025-26791",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:62de7a05-5795-57a2-8b58-337fd62ecbc3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-26791 is fixed in version 2.3.10-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41239",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:34849c22-cd4c-5a73-a0fa-9bb6f8241355",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41239 is fixed in version 2.3.10-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41240",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b4375593-c79d-5a9c-b89a-3ae33e6c7046",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41240 is fixed in version 2.3.10-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49458",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:fbdbc5f8-e5f7-52fd-a3df-518367715f6f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49458 is fixed in version 2.3.10-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49459",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f7492b4d-9720-505b-b415-d69838fa2b31",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49459 is fixed in version 2.3.10-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49978",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f84c1f4e-aefc-54d1-a6e9-95f86320e36e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49978 is fixed in version 2.3.10-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65898",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:43a1c91b-aa05-55b6-97c8-b16d2649c8dd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65898 is fixed in version 2.3.10-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65899",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5323e8c6-6185-5c55-be27-70b708a537df",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65899 is fixed in version 2.3.10-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65901",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c22249ea-6fbd-5237-a346-6674ca750073",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65901 is fixed in version 2.3.10-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65902",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5630ef11-9b76-51d4-be5e-ba4e7c1b2ef4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65902 is fixed in version 2.3.10-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65903",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:80607c8c-25b5-58a3-b8b2-a941598b9fc8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65903 is fixed in version 2.3.10-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65912",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:68b5020b-a8a1-5969-86dc-93d959d487de",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65912 is fixed in version 2.3.10-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65913",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4db80ca4-a373-5e64-ac07-6f4869354754",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65913 is fixed in version 2.3.10-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65914",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a9199134-68a4-5b08-8847-7bad606d8ecf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65914 is fixed in version 2.3.10-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-66010",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5b4f790e-65e4-5b82-a4bf-b518cec8fe2f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-66010 is fixed in version 2.3.10-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-75838",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:343e6ea2-bb55-5e0b-af8a-1ce15785d3cc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-75838 is fixed in version 2.3.10-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "GHSA-55q2-fjhq-7xh7",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ecb32f40-36c4-50da-9a99-5bc18f11ab70",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-55q2-fjhq-7xh7 affects version 2.3.10-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "GHSA-6688-9rhm-gjv2",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:07f004cf-39cb-5cc2-baa0-1e4a96159b90",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-6688-9rhm-gjv2 is fixed in version 2.3.10-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "GHSA-c6gr-qvv4-5v3f",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6424e1ba-ed81-5764-91c4-c841e215f4de",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-c6gr-qvv4-5v3f affects version 2.3.10-tuxcare.3 of dompurify, and is fixed in 2.3.10-tuxcare.4."
      }
    },
    {
      "id": "GHSA-jxrp-r7gx-q4j8",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6a8322dd-36da-5f3c-834d-1923432fc9fc",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-jxrp-r7gx-q4j8 is a false positive for dompurify 2.3.10-tuxcare.3."
      }
    },
    {
      "id": "GHSA-mrv2-3pqr-j5jr",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1aa04dfb-a818-547a-85f7-053f1e8e7bd0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mrv2-3pqr-j5jr affects version 2.3.10-tuxcare.3 of dompurify."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/dompurify@2.3.10-tuxcare.3"
    }
  ]
}