{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:0260d901-d7e9-5fd1-a565-221ca099053e",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "dompurify",
      "purl": "pkg:npm/dompurify@3.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/dompurify@3.0.1",
      "version": "3.0.1",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-45801",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:45cab170-d19c-5169-9c21-5cca1fe9e8cd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-45801 affects version 3.0.1 of dompurify, and is fixed in 3.0.1-tuxcare.2."
      }
    },
    {
      "id": "CVE-2024-47875",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:4797aca9-4cc5-503c-853e-5bc80506407e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47875 affects version 3.0.1 of dompurify, and is fixed in 3.0.1-tuxcare.2."
      }
    },
    {
      "id": "CVE-2025-26791",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:cb3afdf1-483a-5852-9dd3-b42e464d8202",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-26791 affects version 3.0.1 of dompurify, and is fixed in 3.0.1-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-109345",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:6087e73b-58eb-5c3d-98cb-80e76de0ac93",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-109345 affects version 3.0.1 of dompurify, and is fixed in 3.0.1-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-41238",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:d80f1881-323a-58a1-ace8-42aacd91bce5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41238 affects version 3.0.1 of dompurify, and is fixed in 3.0.1-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-41239",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:a26f9a64-f658-5d76-833c-adac6147435c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41239 affects version 3.0.1 of dompurify, and is fixed in 3.0.1-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-41240",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:423fc737-bf05-508c-a1ef-47174de7d9d2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41240 affects version 3.0.1 of dompurify, and is fixed in 3.0.1-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-49458",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:a459f3c8-f49c-5836-ad10-fe01806f0aa6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49458 affects version 3.0.1 of dompurify, and is fixed in 3.0.1-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-49459",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:94978de6-c98a-546f-b51c-58e0bb5c0bc7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49459 affects version 3.0.1 of dompurify, and is fixed in 3.0.1-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-49978",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:5c8d7f93-4a60-53f1-8bc4-03d2b9a7fc7e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49978 affects version 3.0.1 of dompurify, and is fixed in 3.0.1-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65898",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:4d459eb9-9f5b-51c5-adc8-8ef92265fce0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65898 affects version 3.0.1 of dompurify, and is fixed in 3.0.1-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-65899",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:426058ce-f4ef-52af-b013-8100066f7f7c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65899 affects version 3.0.1 of dompurify, and is fixed in 3.0.1-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65900",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:db8ec681-c767-5ad8-a74a-3d3da34bc3b1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65900 affects version 3.0.1 of dompurify, and is fixed in 3.0.1-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-65901",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:b138e6f2-569f-58b6-854f-d1903b874f40",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65901 affects version 3.0.1 of dompurify, and is fixed in 3.0.1-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65902",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:a1e27995-5fd7-5bd1-969c-f7d7e2cbf7ab",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65902 affects version 3.0.1 of dompurify, and is fixed in 3.0.1-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65903",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:1fea7582-af6a-509a-a1b8-0935f26715ab",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65903 affects version 3.0.1 of dompurify, and is fixed in 3.0.1-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65912",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:957f5db4-1175-55d2-95aa-12d70b4ba426",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65912 affects version 3.0.1 of dompurify, and is fixed in 3.0.1-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65913",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:a2f6d1ab-d4d3-51f9-84d9-2bec0ddd36bf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65913 affects version 3.0.1 of dompurify, and is fixed in 3.0.1-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-65914",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:ae8b4e7b-562f-598c-bc69-2ec8bc907a07",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65914 affects version 3.0.1 of dompurify, and is fixed in 3.0.1-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-66010",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:8cb976f2-5dda-5e61-849b-01774657a78b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66010 affects version 3.0.1 of dompurify, and is fixed in 3.0.1-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-75838",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:2433d45d-a13f-5d1d-966f-434e12976b4c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-75838 affects version 3.0.1 of dompurify, and is fixed in 3.0.1-tuxcare.3."
      }
    },
    {
      "id": "GHSA-55q2-fjhq-7xh7",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:0f23e1c3-0e87-5884-8996-a1a6a7ff3b48",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-55q2-fjhq-7xh7 affects version 3.0.1 of dompurify."
      }
    },
    {
      "id": "GHSA-6688-9rhm-gjv2",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:55d39522-7d51-5508-ad02-62045097dfb2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-6688-9rhm-gjv2 affects version 3.0.1 of dompurify, and is fixed in 3.0.1-tuxcare.1."
      }
    },
    {
      "id": "GHSA-c6gr-qvv4-5v3f",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:39f9367a-3545-5724-8069-28da0a9e0abc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-c6gr-qvv4-5v3f affects version 3.0.1 of dompurify, and is fixed in 3.0.1-tuxcare.4."
      }
    },
    {
      "id": "GHSA-jxrp-r7gx-q4j8",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:b6440b20-848a-51c7-bd02-79d7e217d2a4",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-jxrp-r7gx-q4j8 is a false positive for dompurify 3.0.1."
      }
    },
    {
      "id": "GHSA-mrv2-3pqr-j5jr",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:4249d819-77dd-52b8-aca0-c722f8900ec8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mrv2-3pqr-j5jr affects version 3.0.1 of dompurify."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/dompurify@3.0.1"
    }
  ]
}