{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:fd6698e4-fad7-5c1d-b66d-7d1bcc8d10fc",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "dompurify",
      "purl": "pkg:npm/dompurify@3.0.1-tuxcare.1",
      "type": "library",
      "bom-ref": "pkg:npm/dompurify@3.0.1-tuxcare.1",
      "version": "3.0.1-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "dompurify",
            "purl": "pkg:npm/dompurify@3.0.1",
            "type": "library",
            "version": "3.0.1"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-45801",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:100e515d-4145-5746-927e-1e9617e30674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-45801 affects version 3.0.1-tuxcare.1 of dompurify, and is fixed in 3.0.1-tuxcare.2."
      }
    },
    {
      "id": "CVE-2024-47875",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7ba2cefe-8798-5ced-b1cc-781c15b64c58",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47875 affects version 3.0.1-tuxcare.1 of dompurify, and is fixed in 3.0.1-tuxcare.2."
      }
    },
    {
      "id": "CVE-2025-26791",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b290f6b0-c6f7-57ac-9554-c4888244c41b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-26791 affects version 3.0.1-tuxcare.1 of dompurify, and is fixed in 3.0.1-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-109345",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3d1ff6c8-ca10-5f2c-a467-5f69b2623140",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-109345 affects version 3.0.1-tuxcare.1 of dompurify, and is fixed in 3.0.1-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-41238",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7a1d04f1-cc1c-5723-9b99-1e8389eb8ff4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41238 affects version 3.0.1-tuxcare.1 of dompurify, and is fixed in 3.0.1-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-41239",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:cc96c56f-63c9-57ac-9c52-e3f2964a5ed6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41239 affects version 3.0.1-tuxcare.1 of dompurify, and is fixed in 3.0.1-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-41240",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:75e88015-1265-5758-9590-1bee27ba298e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41240 affects version 3.0.1-tuxcare.1 of dompurify, and is fixed in 3.0.1-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-49458",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b927e199-3ff4-5e18-8b9f-594754746245",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49458 affects version 3.0.1-tuxcare.1 of dompurify, and is fixed in 3.0.1-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-49459",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:70f13aad-fad5-5f02-8ab3-cb7fb7b8c4d3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49459 affects version 3.0.1-tuxcare.1 of dompurify, and is fixed in 3.0.1-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-49978",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:57d91553-9ae3-5ef5-aa49-e00e22bd4351",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49978 affects version 3.0.1-tuxcare.1 of dompurify, and is fixed in 3.0.1-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65898",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8fd74c68-c3d0-5e32-bbeb-1f0708c98d1a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65898 affects version 3.0.1-tuxcare.1 of dompurify, and is fixed in 3.0.1-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-65899",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3663d2e8-968b-5861-93eb-2042b8801c1b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65899 affects version 3.0.1-tuxcare.1 of dompurify, and is fixed in 3.0.1-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65900",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:eb6548de-1466-50ec-a4ff-6c5d56650ae3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65900 affects version 3.0.1-tuxcare.1 of dompurify, and is fixed in 3.0.1-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-65901",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9d79bb38-2524-5872-b06d-29fee7cc68dc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65901 affects version 3.0.1-tuxcare.1 of dompurify, and is fixed in 3.0.1-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65902",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f7b5da4a-d766-5455-8f01-eb795b6eb1e7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65902 affects version 3.0.1-tuxcare.1 of dompurify, and is fixed in 3.0.1-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65903",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:648fdc15-2ebf-5e2f-a3ae-b435d02a4e48",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65903 affects version 3.0.1-tuxcare.1 of dompurify, and is fixed in 3.0.1-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65912",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b71d8dd8-2def-57c7-8aa0-07a26e17d503",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65912 affects version 3.0.1-tuxcare.1 of dompurify, and is fixed in 3.0.1-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65913",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:940f10ec-2c15-5488-bc53-cdb92a57f840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65913 affects version 3.0.1-tuxcare.1 of dompurify, and is fixed in 3.0.1-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-65914",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a4acd114-7ae9-5f57-b1bb-e6d968caf314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65914 affects version 3.0.1-tuxcare.1 of dompurify, and is fixed in 3.0.1-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-66010",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d41bd810-68b3-58ca-b63a-6478491ad522",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66010 affects version 3.0.1-tuxcare.1 of dompurify, and is fixed in 3.0.1-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-75838",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:87e72967-fde8-50d6-bbac-fc164de43865",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-75838 affects version 3.0.1-tuxcare.1 of dompurify, and is fixed in 3.0.1-tuxcare.3."
      }
    },
    {
      "id": "GHSA-55q2-fjhq-7xh7",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e58a2a30-2979-5533-808f-9fe616c2f959",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-55q2-fjhq-7xh7 affects version 3.0.1-tuxcare.1 of dompurify."
      }
    },
    {
      "id": "GHSA-6688-9rhm-gjv2",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2c0a436b-cac8-5885-ba59-a7ae12fc36c7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-6688-9rhm-gjv2 is fixed in version 3.0.1-tuxcare.1 of dompurify."
      }
    },
    {
      "id": "GHSA-c6gr-qvv4-5v3f",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:19925b1e-b020-5d06-a766-0de237ef6165",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-c6gr-qvv4-5v3f affects version 3.0.1-tuxcare.1 of dompurify, and is fixed in 3.0.1-tuxcare.4."
      }
    },
    {
      "id": "GHSA-jxrp-r7gx-q4j8",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:af2ce898-cf13-59b2-a1d2-6f92be133782",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-jxrp-r7gx-q4j8 is a false positive for dompurify 3.0.1-tuxcare.1."
      }
    },
    {
      "id": "GHSA-mrv2-3pqr-j5jr",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:64395bdf-d6b4-55e1-9fe1-9ced68218107",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mrv2-3pqr-j5jr affects version 3.0.1-tuxcare.1 of dompurify."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/dompurify@3.0.1-tuxcare.1"
    }
  ]
}