{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:3db8e0a6-9122-5769-ac80-58604c6d8760",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "dompurify",
      "purl": "pkg:npm/dompurify@3.0.8",
      "type": "library",
      "bom-ref": "pkg:npm/dompurify@3.0.8",
      "version": "3.0.8",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-45801",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.8"
        }
      ],
      "bom-ref": "urn:uuid:d267a7da-31b5-5faa-9edc-04c02f993fa9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-45801 affects version 3.0.8 of dompurify, and is fixed in 3.0.8-tuxcare.2."
      }
    },
    {
      "id": "CVE-2024-47875",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.8"
        }
      ],
      "bom-ref": "urn:uuid:27967beb-e74a-5395-9b93-27d05a6f75da",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47875 affects version 3.0.8 of dompurify, and is fixed in 3.0.8-tuxcare.2."
      }
    },
    {
      "id": "CVE-2025-26791",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.8"
        }
      ],
      "bom-ref": "urn:uuid:c8d9c846-aa0a-543d-b872-13f341602587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-26791 affects version 3.0.8 of dompurify, and is fixed in 3.0.8-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-109345",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.8"
        }
      ],
      "bom-ref": "urn:uuid:9391aedd-b025-5cb9-924e-d43a4cec98e8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-109345 affects version 3.0.8 of dompurify, and is fixed in 3.0.8-tuxcare.1."
      }
    },
    {
      "id": "CVE-2026-41238",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.8"
        }
      ],
      "bom-ref": "urn:uuid:754eb1c4-508f-5b03-9e75-33d7ad7dafe5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41238 affects version 3.0.8 of dompurify, and is fixed in 3.0.8-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-41239",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.8"
        }
      ],
      "bom-ref": "urn:uuid:adb67402-7076-509f-aa1d-ed9325794189",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41239 affects version 3.0.8 of dompurify, and is fixed in 3.0.8-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-41240",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.8"
        }
      ],
      "bom-ref": "urn:uuid:1e8c19fd-dc28-5687-8cf1-8110172cfbf8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41240 affects version 3.0.8 of dompurify, and is fixed in 3.0.8-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-49458",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.8"
        }
      ],
      "bom-ref": "urn:uuid:13189758-67e4-5edc-812f-5264ef78eed0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49458 affects version 3.0.8 of dompurify, and is fixed in 3.0.8-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-49459",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.8"
        }
      ],
      "bom-ref": "urn:uuid:2999c1bf-130a-567f-99f9-90dbf386b0a5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49459 affects version 3.0.8 of dompurify, and is fixed in 3.0.8-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-49978",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.8"
        }
      ],
      "bom-ref": "urn:uuid:29ad5164-ffab-5a1e-b844-8f882bb93c95",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49978 affects version 3.0.8 of dompurify, and is fixed in 3.0.8-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65898",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.8"
        }
      ],
      "bom-ref": "urn:uuid:4329e914-f07d-5e63-a74b-fbd712fe9bb4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65898 affects version 3.0.8 of dompurify, and is fixed in 3.0.8-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-65899",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.8"
        }
      ],
      "bom-ref": "urn:uuid:d3b38e3d-a193-5697-846d-27db6c92b75f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65899 affects version 3.0.8 of dompurify, and is fixed in 3.0.8-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65900",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.8"
        }
      ],
      "bom-ref": "urn:uuid:55b3d00b-7af0-5509-8fe3-db019faaf98a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65900 affects version 3.0.8 of dompurify, and is fixed in 3.0.8-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-65901",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.8"
        }
      ],
      "bom-ref": "urn:uuid:50b77ae5-9613-58ce-885d-59596072bd62",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65901 affects version 3.0.8 of dompurify, and is fixed in 3.0.8-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65902",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.8"
        }
      ],
      "bom-ref": "urn:uuid:0111a0c6-3693-5d9c-b8d7-4366affcdd53",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65902 affects version 3.0.8 of dompurify, and is fixed in 3.0.8-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65903",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.8"
        }
      ],
      "bom-ref": "urn:uuid:4a5cf60a-c7ae-55f1-8d20-23f682d74566",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65903 affects version 3.0.8 of dompurify, and is fixed in 3.0.8-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65912",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.8"
        }
      ],
      "bom-ref": "urn:uuid:b70a9c3e-ec44-53de-9197-7d66f33ca53e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65912 affects version 3.0.8 of dompurify, and is fixed in 3.0.8-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65913",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.8"
        }
      ],
      "bom-ref": "urn:uuid:91839d3a-04b4-5a04-821e-1ff3b85b61a0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65913 affects version 3.0.8 of dompurify, and is fixed in 3.0.8-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-65914",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.8"
        }
      ],
      "bom-ref": "urn:uuid:c9a2a238-fb64-5863-8a15-c3f3b72ad1ec",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65914 affects version 3.0.8 of dompurify, and is fixed in 3.0.8-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-66010",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.8"
        }
      ],
      "bom-ref": "urn:uuid:8dc71ee8-a0fd-5e4d-9c9b-98b3dc99ecbc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66010 affects version 3.0.8 of dompurify, and is fixed in 3.0.8-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-75838",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.8"
        }
      ],
      "bom-ref": "urn:uuid:0dc117f1-c40e-57fe-94d2-6164e13744f1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-75838 affects version 3.0.8 of dompurify, and is fixed in 3.0.8-tuxcare.2."
      }
    },
    {
      "id": "GHSA-55q2-fjhq-7xh7",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.8"
        }
      ],
      "bom-ref": "urn:uuid:e13990cb-c8ec-5f78-9c11-c70bdb6ee7e7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-55q2-fjhq-7xh7 affects version 3.0.8 of dompurify."
      }
    },
    {
      "id": "GHSA-6688-9rhm-gjv2",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.8"
        }
      ],
      "bom-ref": "urn:uuid:8a5d4a3d-55c3-58bf-9ff4-68d0a1a9289c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-6688-9rhm-gjv2 affects version 3.0.8 of dompurify, and is fixed in 3.0.8-tuxcare.1."
      }
    },
    {
      "id": "GHSA-c6gr-qvv4-5v3f",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.8"
        }
      ],
      "bom-ref": "urn:uuid:5038f7bd-2de2-5fa6-bfc7-6c41fb859167",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-c6gr-qvv4-5v3f affects version 3.0.8 of dompurify, and is fixed in 3.0.8-tuxcare.4."
      }
    },
    {
      "id": "GHSA-jxrp-r7gx-q4j8",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.8"
        }
      ],
      "bom-ref": "urn:uuid:07d244d8-1149-53e5-8178-9eb946c4e16e",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-jxrp-r7gx-q4j8 is a false positive for dompurify 3.0.8."
      }
    },
    {
      "id": "GHSA-mrv2-3pqr-j5jr",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.8"
        }
      ],
      "bom-ref": "urn:uuid:6ec6edf6-6720-5ed4-9c54-2ac2c441e536",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mrv2-3pqr-j5jr affects version 3.0.8 of dompurify."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/dompurify@3.0.8"
    }
  ]
}