{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:1a13ee1a-d344-576a-b809-fbd5cf647c2f",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "dompurify",
      "purl": "pkg:npm/dompurify@3.0.9-tuxcare.3",
      "type": "library",
      "bom-ref": "pkg:npm/dompurify@3.0.9-tuxcare.3",
      "version": "3.0.9-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "dompurify",
            "purl": "pkg:npm/dompurify@3.0.9",
            "type": "library",
            "version": "3.0.9"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-45801",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:62526015-bc55-5def-9b0d-525cb69fd93a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-45801 is fixed in version 3.0.9-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2024-47875",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:44311794-bc87-54b4-8fad-408337629320",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47875 is fixed in version 3.0.9-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2025-26791",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:df194736-c0d9-5629-a5c5-c3f7421bcd25",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-26791 is fixed in version 3.0.9-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-109345",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ce9361f2-8f62-5b90-93c2-3775d35463c2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-109345 is fixed in version 3.0.9-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41238",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:91f8e82c-83f0-5e1f-b531-6d26291378f0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41238 is fixed in version 3.0.9-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41239",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:eda4897c-0e0b-5228-995d-ff5550a6b908",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41239 is fixed in version 3.0.9-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41240",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d30dcea9-64d0-54ae-98f0-bd17ff5f85e4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41240 is fixed in version 3.0.9-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49458",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e8821235-0afb-5128-b6e6-ad381dc2e49f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49458 is fixed in version 3.0.9-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49459",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ca8ff517-7e2c-5f36-a995-f25ad2c39e28",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49459 is fixed in version 3.0.9-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49978",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:90e42f36-f8d4-57f4-ad38-8081bc7cf4c4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49978 is fixed in version 3.0.9-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65898",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3617ff6b-2fbb-5b07-8878-000386041b68",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65898 is fixed in version 3.0.9-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65899",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:17201e63-987b-5cdb-8e3a-9d91136dbf5d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65899 is fixed in version 3.0.9-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65900",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:47e66cb6-af97-53ff-aa36-e5b296f2768b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65900 is fixed in version 3.0.9-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65901",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ddfb9c4e-9af9-5b41-af51-82110247519d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65901 is fixed in version 3.0.9-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65902",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d9de108e-0f4d-53be-bc50-a64f6851067e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65902 is fixed in version 3.0.9-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65903",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1936cb8e-8f36-5a9d-9750-814688bba3fd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65903 is fixed in version 3.0.9-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65912",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:670fc302-0120-5f83-975c-c771b51f827d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65912 is fixed in version 3.0.9-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65913",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:67c5e69c-1952-503f-8a01-3d0959851697",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65913 is fixed in version 3.0.9-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65914",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1360150e-acc8-5f9e-973a-d071b7889197",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65914 is fixed in version 3.0.9-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-66010",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1ece9aae-4ac2-5622-ba95-93d67ebe1464",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-66010 is fixed in version 3.0.9-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-75838",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6f492228-7144-58a1-9567-0a1c94d386d7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-75838 is fixed in version 3.0.9-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "GHSA-55q2-fjhq-7xh7",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3c3408f8-84f7-51e9-94a2-dcc2e04d105f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-55q2-fjhq-7xh7 affects version 3.0.9-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "GHSA-6688-9rhm-gjv2",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:191258db-4f93-5df8-8da7-c3b132dff8bc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-6688-9rhm-gjv2 is fixed in version 3.0.9-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "GHSA-c6gr-qvv4-5v3f",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:fce09a61-b37c-54e7-9c82-ec23b4c0026d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-c6gr-qvv4-5v3f affects version 3.0.9-tuxcare.3 of dompurify, and is fixed in 3.0.9-tuxcare.4."
      }
    },
    {
      "id": "GHSA-jxrp-r7gx-q4j8",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4857bc67-8853-5564-99d9-76f71b6820ba",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-jxrp-r7gx-q4j8 is a false positive for dompurify 3.0.9-tuxcare.3."
      }
    },
    {
      "id": "GHSA-mrv2-3pqr-j5jr",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3d321988-6d78-5ab7-a179-fa8dc83f1fca",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mrv2-3pqr-j5jr affects version 3.0.9-tuxcare.3 of dompurify."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/dompurify@3.0.9-tuxcare.3"
    }
  ]
}