{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:718872db-a1d3-5612-8ac5-7376873d3fa6",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "dompurify",
      "purl": "pkg:npm/dompurify@2.3.10",
      "type": "library",
      "bom-ref": "pkg:npm/dompurify@2.3.10",
      "version": "2.3.10",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-45801",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10"
        }
      ],
      "bom-ref": "urn:uuid:86b690e7-c7e1-571c-af20-bb4815d4b97e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-45801 affects version 2.3.10 of dompurify, and is fixed in 2.3.10-tuxcare.3."
      }
    },
    {
      "id": "CVE-2024-47875",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10"
        }
      ],
      "bom-ref": "urn:uuid:3e58609c-3fb8-5345-a45d-e2fbeb8e5619",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47875 affects version 2.3.10 of dompurify, and is fixed in 2.3.10-tuxcare.2."
      }
    },
    {
      "id": "CVE-2024-48910",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10"
        }
      ],
      "bom-ref": "urn:uuid:e3a01992-a85a-5e2e-83e7-3d02b10bf043",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-48910 affects version 2.3.10 of dompurify, and is fixed in 2.3.10-tuxcare.2."
      }
    },
    {
      "id": "CVE-2025-26791",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10"
        }
      ],
      "bom-ref": "urn:uuid:04b5543f-1c57-5fc4-b817-03b7461076cc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-26791 affects version 2.3.10 of dompurify, and is fixed in 2.3.10-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-41239",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10"
        }
      ],
      "bom-ref": "urn:uuid:5149a62a-c752-5e07-9fdf-4e7a08baf044",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41239 affects version 2.3.10 of dompurify, and is fixed in 2.3.10-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-41240",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10"
        }
      ],
      "bom-ref": "urn:uuid:f6837361-d29c-5306-8ba6-15626a81f518",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41240 affects version 2.3.10 of dompurify, and is fixed in 2.3.10-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-49458",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10"
        }
      ],
      "bom-ref": "urn:uuid:54969a47-aa18-5060-801b-90ae493517cc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49458 affects version 2.3.10 of dompurify, and is fixed in 2.3.10-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-49459",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10"
        }
      ],
      "bom-ref": "urn:uuid:9e97b983-c048-528e-a0e8-54dc47b96c17",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49459 affects version 2.3.10 of dompurify, and is fixed in 2.3.10-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-49978",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10"
        }
      ],
      "bom-ref": "urn:uuid:17621988-6861-5801-b455-17c2dc60b392",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49978 affects version 2.3.10 of dompurify, and is fixed in 2.3.10-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65898",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10"
        }
      ],
      "bom-ref": "urn:uuid:ea43c3c6-da8c-547c-92f3-89cf8b27c8bd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65898 affects version 2.3.10 of dompurify, and is fixed in 2.3.10-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-65899",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10"
        }
      ],
      "bom-ref": "urn:uuid:122c24d4-e49c-51b5-a113-c52e258dc144",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65899 affects version 2.3.10 of dompurify, and is fixed in 2.3.10-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65901",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10"
        }
      ],
      "bom-ref": "urn:uuid:964ace6c-2ee9-5f69-a7b9-d8f5d1da35dd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65901 affects version 2.3.10 of dompurify, and is fixed in 2.3.10-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65902",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10"
        }
      ],
      "bom-ref": "urn:uuid:8a6e912f-4722-5ad1-a159-28d3521953bf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65902 affects version 2.3.10 of dompurify, and is fixed in 2.3.10-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65903",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10"
        }
      ],
      "bom-ref": "urn:uuid:e4ece3b5-c06d-5d11-8782-621928c2ab18",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65903 affects version 2.3.10 of dompurify, and is fixed in 2.3.10-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65912",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10"
        }
      ],
      "bom-ref": "urn:uuid:94d8291a-489d-5780-8b75-ad0294279feb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65912 affects version 2.3.10 of dompurify, and is fixed in 2.3.10-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65913",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10"
        }
      ],
      "bom-ref": "urn:uuid:8676ff64-9b32-5e4a-ba65-56d9be4aa934",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65913 affects version 2.3.10 of dompurify, and is fixed in 2.3.10-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-65914",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10"
        }
      ],
      "bom-ref": "urn:uuid:b4416fbe-fbe3-5810-9eef-0533d132792e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65914 affects version 2.3.10 of dompurify, and is fixed in 2.3.10-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-66010",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10"
        }
      ],
      "bom-ref": "urn:uuid:8d9f5eb1-548f-539e-b289-2f30929a5732",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66010 affects version 2.3.10 of dompurify, and is fixed in 2.3.10-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-75838",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10"
        }
      ],
      "bom-ref": "urn:uuid:61f0aa3f-ee0c-547b-a2af-14b8f3c140f2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-75838 affects version 2.3.10 of dompurify, and is fixed in 2.3.10-tuxcare.3."
      }
    },
    {
      "id": "GHSA-55q2-fjhq-7xh7",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10"
        }
      ],
      "bom-ref": "urn:uuid:02f8ae78-6595-55d8-837e-3e4d31da3652",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-55q2-fjhq-7xh7 affects version 2.3.10 of dompurify."
      }
    },
    {
      "id": "GHSA-6688-9rhm-gjv2",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10"
        }
      ],
      "bom-ref": "urn:uuid:7c724c9c-23c7-5ee0-8b59-210c04d50720",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-6688-9rhm-gjv2 affects version 2.3.10 of dompurify, and is fixed in 2.3.10-tuxcare.1."
      }
    },
    {
      "id": "GHSA-c6gr-qvv4-5v3f",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10"
        }
      ],
      "bom-ref": "urn:uuid:6e1e9543-d05e-508d-9681-ebfa769bd2ea",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-c6gr-qvv4-5v3f affects version 2.3.10 of dompurify, and is fixed in 2.3.10-tuxcare.4."
      }
    },
    {
      "id": "GHSA-jxrp-r7gx-q4j8",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10"
        }
      ],
      "bom-ref": "urn:uuid:8e6cf007-e8a6-5e18-9244-4859a8c0f896",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-jxrp-r7gx-q4j8 is a false positive for dompurify 2.3.10."
      }
    },
    {
      "id": "GHSA-mrv2-3pqr-j5jr",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10"
        }
      ],
      "bom-ref": "urn:uuid:c433131e-dd57-591a-883e-075a72ddb794",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mrv2-3pqr-j5jr affects version 2.3.10 of dompurify."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/dompurify@2.3.10"
    }
  ]
}