{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:6475fa84-664e-5cf1-ba0d-24477c38ba92",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "dompurify",
      "purl": "pkg:npm/dompurify@3.0.11",
      "type": "library",
      "bom-ref": "pkg:npm/dompurify@3.0.11",
      "version": "3.0.11",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-45801",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.11"
        }
      ],
      "bom-ref": "urn:uuid:693f4699-7483-5d2a-9d6b-e34fedd9a98c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-45801 affects version 3.0.11 of dompurify, and is fixed in 3.0.11-tuxcare.2."
      }
    },
    {
      "id": "CVE-2024-47875",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.11"
        }
      ],
      "bom-ref": "urn:uuid:d3056ea3-c605-525d-9df5-d95939df532a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47875 affects version 3.0.11 of dompurify, and is fixed in 3.0.11-tuxcare.2."
      }
    },
    {
      "id": "CVE-2025-26791",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.11"
        }
      ],
      "bom-ref": "urn:uuid:bf3eed65-558c-558d-b421-62e67ff3830c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-26791 affects version 3.0.11 of dompurify, and is fixed in 3.0.11-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-41238",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.11"
        }
      ],
      "bom-ref": "urn:uuid:0f28d20a-8645-5f0c-aa34-e8aa72150d48",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41238 affects version 3.0.11 of dompurify, and is fixed in 3.0.11-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-41239",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.11"
        }
      ],
      "bom-ref": "urn:uuid:d68cf868-e92d-5005-9d14-42ba376730e4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41239 affects version 3.0.11 of dompurify, and is fixed in 3.0.11-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-41240",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.11"
        }
      ],
      "bom-ref": "urn:uuid:7a1f2548-8b15-5545-9be2-eb59a9e25d4c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41240 affects version 3.0.11 of dompurify, and is fixed in 3.0.11-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-49458",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.11"
        }
      ],
      "bom-ref": "urn:uuid:8f756680-cd5c-5031-b276-419ea6d9f826",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49458 affects version 3.0.11 of dompurify, and is fixed in 3.0.11-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-49459",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.11"
        }
      ],
      "bom-ref": "urn:uuid:67f18c4c-62f2-5673-926f-0b4c98d8c033",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49459 affects version 3.0.11 of dompurify, and is fixed in 3.0.11-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-49978",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.11"
        }
      ],
      "bom-ref": "urn:uuid:e958b2eb-415a-5f9c-a28f-830e40f258ec",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49978 affects version 3.0.11 of dompurify, and is fixed in 3.0.11-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65898",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.11"
        }
      ],
      "bom-ref": "urn:uuid:c401d6fd-6dd7-5f63-9f2c-32eb317e6acc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65898 affects version 3.0.11 of dompurify, and is fixed in 3.0.11-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-65899",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.11"
        }
      ],
      "bom-ref": "urn:uuid:60796867-96f5-5717-9cf0-d4042aecfb3f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65899 affects version 3.0.11 of dompurify, and is fixed in 3.0.11-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-65900",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.11"
        }
      ],
      "bom-ref": "urn:uuid:d5dcf4e6-8e09-5424-95dd-057e2d53621b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65900 affects version 3.0.11 of dompurify, and is fixed in 3.0.11-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-65901",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.11"
        }
      ],
      "bom-ref": "urn:uuid:65ae6ca3-b089-5c70-9168-35fc94fb3761",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65901 affects version 3.0.11 of dompurify, and is fixed in 3.0.11-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65902",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.11"
        }
      ],
      "bom-ref": "urn:uuid:408d439b-e874-52e4-ae8a-a45913902a6a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65902 affects version 3.0.11 of dompurify, and is fixed in 3.0.11-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65903",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.11"
        }
      ],
      "bom-ref": "urn:uuid:31e602da-ec62-5565-8775-02cdfc59dc60",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65903 affects version 3.0.11 of dompurify, and is fixed in 3.0.11-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65912",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.11"
        }
      ],
      "bom-ref": "urn:uuid:38ed4ac4-c689-516d-a0b3-048f138277b2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65912 affects version 3.0.11 of dompurify, and is fixed in 3.0.11-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65913",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.11"
        }
      ],
      "bom-ref": "urn:uuid:2d03ff05-4fa3-5668-b607-a4ffbdaba472",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65913 affects version 3.0.11 of dompurify, and is fixed in 3.0.11-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-65914",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.11"
        }
      ],
      "bom-ref": "urn:uuid:59f52dda-2d4a-5e0f-949c-b29031048519",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65914 affects version 3.0.11 of dompurify, and is fixed in 3.0.11-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-66010",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.11"
        }
      ],
      "bom-ref": "urn:uuid:d6ea8724-acb7-55b6-9fa9-c5548d3e34cc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66010 affects version 3.0.11 of dompurify, and is fixed in 3.0.11-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-75838",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.11"
        }
      ],
      "bom-ref": "urn:uuid:e6456cdb-c20d-5b25-a47f-9d1d25c7c421",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-75838 affects version 3.0.11 of dompurify, and is fixed in 3.0.11-tuxcare.2."
      }
    },
    {
      "id": "GHSA-55q2-fjhq-7xh7",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.11"
        }
      ],
      "bom-ref": "urn:uuid:969baba0-32ac-5f26-8106-c3ca58643d89",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-55q2-fjhq-7xh7 affects version 3.0.11 of dompurify."
      }
    },
    {
      "id": "GHSA-6688-9rhm-gjv2",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.11"
        }
      ],
      "bom-ref": "urn:uuid:846f08fe-ce67-576e-b408-cf68a771fca6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-6688-9rhm-gjv2 affects version 3.0.11 of dompurify, and is fixed in 3.0.11-tuxcare.1."
      }
    },
    {
      "id": "GHSA-c6gr-qvv4-5v3f",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.11"
        }
      ],
      "bom-ref": "urn:uuid:330de516-5468-5c3b-910b-39db8b2fe0df",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-c6gr-qvv4-5v3f affects version 3.0.11 of dompurify, and is fixed in 3.0.11-tuxcare.4."
      }
    },
    {
      "id": "GHSA-jxrp-r7gx-q4j8",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.11"
        }
      ],
      "bom-ref": "urn:uuid:1145d218-4091-57e0-a261-694135edeb20",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-jxrp-r7gx-q4j8 is a false positive for dompurify 3.0.11."
      }
    },
    {
      "id": "GHSA-mrv2-3pqr-j5jr",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.11"
        }
      ],
      "bom-ref": "urn:uuid:88c61ab3-8f3e-54df-930c-f08e1b3bd850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mrv2-3pqr-j5jr affects version 3.0.11 of dompurify."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/dompurify@3.0.11"
    }
  ]
}