{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:41eae79b-972c-5ab9-881f-c66eee536f70",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "dompurify",
      "purl": "pkg:npm/dompurify@3.0.2-tuxcare.3",
      "type": "library",
      "bom-ref": "pkg:npm/dompurify@3.0.2-tuxcare.3",
      "version": "3.0.2-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "dompurify",
            "purl": "pkg:npm/dompurify@3.0.2",
            "type": "library",
            "version": "3.0.2"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-45801",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4d23f98c-7156-5e4c-ab36-e9128ace5346",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-45801 is fixed in version 3.0.2-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2024-47875",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:10f1b41c-3534-583b-9def-0ac9761527b6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47875 is fixed in version 3.0.2-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2025-26791",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:143071b1-708a-5761-b47a-b08dd897e2b7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-26791 is fixed in version 3.0.2-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41238",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:38ec7931-717e-5b80-8e36-48b770dd2bc7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41238 is fixed in version 3.0.2-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41239",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2e136d98-9c22-5071-acad-da97db58deb7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41239 is fixed in version 3.0.2-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41240",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0cdab47b-c5b4-5f99-80a9-959d5e0e22b8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41240 is fixed in version 3.0.2-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49458",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:17438722-d958-5959-a756-adb425385b6c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49458 is fixed in version 3.0.2-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49459",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:08a2d804-c356-5631-8c61-092f4c85db12",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49459 is fixed in version 3.0.2-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49978",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:fcd712ca-d759-5915-9cc5-b1a26643bf7f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49978 is fixed in version 3.0.2-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65898",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5cdef973-bcd1-531a-bca3-d474e3997352",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65898 is fixed in version 3.0.2-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65899",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b93c39d0-2e4f-5481-93c0-7d51e75fe5a1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65899 is fixed in version 3.0.2-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65900",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:eae89ff7-81e1-521e-9a75-632256f69802",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65900 is fixed in version 3.0.2-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65901",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e2fd646c-0329-5357-841a-ad48103296af",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65901 is fixed in version 3.0.2-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65902",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0788c27d-e6eb-596b-8ef2-2de56ec818a3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65902 is fixed in version 3.0.2-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65903",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:26001832-4ca1-5d2c-acf1-7e496607831f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65903 is fixed in version 3.0.2-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65912",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1239e595-70f6-5b42-8d30-87237d74daff",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65912 is fixed in version 3.0.2-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65913",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f777eca4-b44a-509e-80ee-c4e480def25e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65913 is fixed in version 3.0.2-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65914",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:78ff556a-6b01-5bfd-83de-bbfba356918c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65914 is fixed in version 3.0.2-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-66010",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f64c3c1c-39be-5025-bcab-8465f99c04b8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-66010 is fixed in version 3.0.2-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-75838",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:20e79a91-f2f4-54c9-9625-74c3aefc0bc3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-75838 is fixed in version 3.0.2-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "GHSA-55q2-fjhq-7xh7",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d9f80361-0bfd-5ebc-8fee-cf45e96498cd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-55q2-fjhq-7xh7 affects version 3.0.2-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "GHSA-6688-9rhm-gjv2",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:932f3d38-d157-5e43-94d2-4cf320da07f2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-6688-9rhm-gjv2 is fixed in version 3.0.2-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "GHSA-c6gr-qvv4-5v3f",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5b89cf59-650a-5f65-b883-d42f8395153f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-c6gr-qvv4-5v3f affects version 3.0.2-tuxcare.3 of dompurify, and is fixed in 3.0.2-tuxcare.4."
      }
    },
    {
      "id": "GHSA-jxrp-r7gx-q4j8",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0a458572-6469-5eb1-b2c0-1e2d989a2045",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-jxrp-r7gx-q4j8 is a false positive for dompurify 3.0.2-tuxcare.3."
      }
    },
    {
      "id": "GHSA-mrv2-3pqr-j5jr",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:71d4f550-e5a4-51b4-a543-d8fb61b6d239",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mrv2-3pqr-j5jr affects version 3.0.2-tuxcare.3 of dompurify."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/dompurify@3.0.2-tuxcare.3"
    }
  ]
}