{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b92c73f3-d15b-5795-8b71-1218d2b9e107",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "dompurify",
      "purl": "pkg:npm/dompurify@3.0.2-tuxcare.1",
      "type": "library",
      "bom-ref": "pkg:npm/dompurify@3.0.2-tuxcare.1",
      "version": "3.0.2-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "dompurify",
            "purl": "pkg:npm/dompurify@3.0.2",
            "type": "library",
            "version": "3.0.2"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-45801",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a4c31c82-b31b-5ab7-93fe-769e131d2fbe",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-45801 affects version 3.0.2-tuxcare.1 of dompurify, and is fixed in 3.0.2-tuxcare.2."
      }
    },
    {
      "id": "CVE-2024-47875",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b41e58d9-587b-5d1b-aef8-0d949aac973d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47875 affects version 3.0.2-tuxcare.1 of dompurify, and is fixed in 3.0.2-tuxcare.2."
      }
    },
    {
      "id": "CVE-2025-26791",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6e7c455f-5c82-5cab-acb3-d61e6639970d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-26791 affects version 3.0.2-tuxcare.1 of dompurify, and is fixed in 3.0.2-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-41238",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ae91db9f-1353-5d21-8de6-fd81ab8098ef",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41238 affects version 3.0.2-tuxcare.1 of dompurify, and is fixed in 3.0.2-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-41239",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:03259ca6-77d5-5de2-aac1-23d20d5bab2f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41239 affects version 3.0.2-tuxcare.1 of dompurify, and is fixed in 3.0.2-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-41240",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:422ad686-2fb8-55e0-bd7c-1c68f95b9f8d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41240 affects version 3.0.2-tuxcare.1 of dompurify, and is fixed in 3.0.2-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-49458",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3a6e9296-8e23-5bb7-868e-ad5e6c4c05f6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49458 affects version 3.0.2-tuxcare.1 of dompurify, and is fixed in 3.0.2-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-49459",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:eeebaf56-b98b-5dec-83e6-d3716ba0d177",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49459 affects version 3.0.2-tuxcare.1 of dompurify, and is fixed in 3.0.2-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-49978",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4f78b34c-c805-5707-9254-4f636fdf22e3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49978 affects version 3.0.2-tuxcare.1 of dompurify, and is fixed in 3.0.2-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65898",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:eb020c35-b068-5d29-897e-aebeebd04adb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65898 affects version 3.0.2-tuxcare.1 of dompurify, and is fixed in 3.0.2-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-65899",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:87367eff-d4f1-5d71-a493-7f6f32d77f2d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65899 affects version 3.0.2-tuxcare.1 of dompurify, and is fixed in 3.0.2-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65900",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3a340975-8a27-5e97-a218-78397145151e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65900 affects version 3.0.2-tuxcare.1 of dompurify, and is fixed in 3.0.2-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-65901",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:aa538c1b-a334-5e4b-adb8-558d793a50c3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65901 affects version 3.0.2-tuxcare.1 of dompurify, and is fixed in 3.0.2-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65902",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2fc48c32-0e50-55f5-94d9-9a64573e495e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65902 affects version 3.0.2-tuxcare.1 of dompurify, and is fixed in 3.0.2-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65903",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3a38f278-7c98-51dd-a34a-565c161064bd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65903 affects version 3.0.2-tuxcare.1 of dompurify, and is fixed in 3.0.2-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65912",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8a7fa268-90e8-540d-bccd-752bdb46c52e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65912 affects version 3.0.2-tuxcare.1 of dompurify, and is fixed in 3.0.2-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65913",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f89d8d5a-79fa-5a82-ba3e-6bfde41d4a1e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65913 affects version 3.0.2-tuxcare.1 of dompurify, and is fixed in 3.0.2-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65914",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:22a68ea1-197e-5be8-a054-6f4fbdf72d42",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65914 affects version 3.0.2-tuxcare.1 of dompurify, and is fixed in 3.0.2-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-66010",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6f2eab5f-e434-580c-a272-c1c74094b1b2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66010 affects version 3.0.2-tuxcare.1 of dompurify, and is fixed in 3.0.2-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-75838",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f5984df5-71d2-53a1-a61f-59b5a7a3589f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-75838 affects version 3.0.2-tuxcare.1 of dompurify, and is fixed in 3.0.2-tuxcare.3."
      }
    },
    {
      "id": "GHSA-55q2-fjhq-7xh7",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e88f559b-77d1-5728-856c-d0a37c67d898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-55q2-fjhq-7xh7 affects version 3.0.2-tuxcare.1 of dompurify."
      }
    },
    {
      "id": "GHSA-6688-9rhm-gjv2",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:504a3f26-3412-55de-86c4-4d394988b92d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-6688-9rhm-gjv2 is fixed in version 3.0.2-tuxcare.1 of dompurify."
      }
    },
    {
      "id": "GHSA-c6gr-qvv4-5v3f",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ad03ff52-dae7-5fe0-a3ff-165f92b7d216",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-c6gr-qvv4-5v3f affects version 3.0.2-tuxcare.1 of dompurify, and is fixed in 3.0.2-tuxcare.4."
      }
    },
    {
      "id": "GHSA-jxrp-r7gx-q4j8",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:eeb2be6d-db38-5c85-9909-e740413a8629",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-jxrp-r7gx-q4j8 is a false positive for dompurify 3.0.2-tuxcare.1."
      }
    },
    {
      "id": "GHSA-mrv2-3pqr-j5jr",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1d57545c-472d-5185-a7e6-ccbe4996005d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mrv2-3pqr-j5jr affects version 3.0.2-tuxcare.1 of dompurify."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/dompurify@3.0.2-tuxcare.1"
    }
  ]
}