{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:37beb54b-f450-5f37-bf82-1f218766da71",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "dompurify",
      "purl": "pkg:npm/dompurify@3.0.9",
      "type": "library",
      "bom-ref": "pkg:npm/dompurify@3.0.9",
      "version": "3.0.9",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-45801",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9"
        }
      ],
      "bom-ref": "urn:uuid:b91b4ed5-457e-568b-bdb8-3a97d6a85a10",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-45801 affects version 3.0.9 of dompurify, and is fixed in 3.0.9-tuxcare.2."
      }
    },
    {
      "id": "CVE-2024-47875",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9"
        }
      ],
      "bom-ref": "urn:uuid:52dae56e-c713-5e7b-a02e-2bdc69706f03",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47875 affects version 3.0.9 of dompurify, and is fixed in 3.0.9-tuxcare.2."
      }
    },
    {
      "id": "CVE-2025-26791",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9"
        }
      ],
      "bom-ref": "urn:uuid:916d11f3-08ae-59fa-ac55-58f11c9eadd4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-26791 affects version 3.0.9 of dompurify, and is fixed in 3.0.9-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-109345",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9"
        }
      ],
      "bom-ref": "urn:uuid:63a38797-fe03-5eb9-890b-1c7a8fe1e31f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-109345 affects version 3.0.9 of dompurify, and is fixed in 3.0.9-tuxcare.1."
      }
    },
    {
      "id": "CVE-2026-41238",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9"
        }
      ],
      "bom-ref": "urn:uuid:4c157627-f4ec-50bb-9af7-cfacad799591",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41238 affects version 3.0.9 of dompurify, and is fixed in 3.0.9-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-41239",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9"
        }
      ],
      "bom-ref": "urn:uuid:d4b6c2c5-e113-504a-ad84-411fd7048a65",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41239 affects version 3.0.9 of dompurify, and is fixed in 3.0.9-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-41240",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9"
        }
      ],
      "bom-ref": "urn:uuid:31283299-8152-5797-b7a3-4c95219f08a2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41240 affects version 3.0.9 of dompurify, and is fixed in 3.0.9-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-49458",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9"
        }
      ],
      "bom-ref": "urn:uuid:d9170108-e57f-56ef-8867-29cf9238cc1e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49458 affects version 3.0.9 of dompurify, and is fixed in 3.0.9-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-49459",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9"
        }
      ],
      "bom-ref": "urn:uuid:21579fb6-8ab2-59f2-9348-21a3ec749d43",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49459 affects version 3.0.9 of dompurify, and is fixed in 3.0.9-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-49978",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9"
        }
      ],
      "bom-ref": "urn:uuid:e2ac01cf-ebae-5378-b19f-aba25a6c4e41",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49978 affects version 3.0.9 of dompurify, and is fixed in 3.0.9-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65898",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9"
        }
      ],
      "bom-ref": "urn:uuid:36b82771-7777-56a1-a797-328c8ba1926e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65898 affects version 3.0.9 of dompurify, and is fixed in 3.0.9-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-65899",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9"
        }
      ],
      "bom-ref": "urn:uuid:cadcf4ee-13be-5349-87ad-f7c74d27497b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65899 affects version 3.0.9 of dompurify, and is fixed in 3.0.9-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65900",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9"
        }
      ],
      "bom-ref": "urn:uuid:267a1481-1f9a-584b-a07f-5910eaa02a1f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65900 affects version 3.0.9 of dompurify, and is fixed in 3.0.9-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-65901",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9"
        }
      ],
      "bom-ref": "urn:uuid:7a458ada-ab3c-57c7-909f-070acfe4a2c5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65901 affects version 3.0.9 of dompurify, and is fixed in 3.0.9-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65902",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9"
        }
      ],
      "bom-ref": "urn:uuid:66abdcf7-da2a-5d04-840a-85d83a705575",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65902 affects version 3.0.9 of dompurify, and is fixed in 3.0.9-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65903",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9"
        }
      ],
      "bom-ref": "urn:uuid:095d19a2-1d1e-5faf-b6e8-a18e2ce52242",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65903 affects version 3.0.9 of dompurify, and is fixed in 3.0.9-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65912",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9"
        }
      ],
      "bom-ref": "urn:uuid:0bcebfdd-5777-5855-a085-7226fee334d2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65912 affects version 3.0.9 of dompurify, and is fixed in 3.0.9-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65913",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9"
        }
      ],
      "bom-ref": "urn:uuid:7ad07283-3c2f-5769-a4ce-86c4cc7e727c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65913 affects version 3.0.9 of dompurify, and is fixed in 3.0.9-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-65914",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9"
        }
      ],
      "bom-ref": "urn:uuid:28adcab2-c0bf-53a2-ae10-5d53dff8fd53",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65914 affects version 3.0.9 of dompurify, and is fixed in 3.0.9-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-66010",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9"
        }
      ],
      "bom-ref": "urn:uuid:16e681c6-a06a-51ce-bdfe-265a4cac5b58",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66010 affects version 3.0.9 of dompurify, and is fixed in 3.0.9-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-75838",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9"
        }
      ],
      "bom-ref": "urn:uuid:7c2ae4bc-6958-5d72-a178-269432bdeff9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-75838 affects version 3.0.9 of dompurify, and is fixed in 3.0.9-tuxcare.2."
      }
    },
    {
      "id": "GHSA-55q2-fjhq-7xh7",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9"
        }
      ],
      "bom-ref": "urn:uuid:52d35f1e-dab3-51d3-a7bc-bc3a0729355a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-55q2-fjhq-7xh7 affects version 3.0.9 of dompurify."
      }
    },
    {
      "id": "GHSA-6688-9rhm-gjv2",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9"
        }
      ],
      "bom-ref": "urn:uuid:42ca5dfa-200f-5995-b93e-7b3ad017c360",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-6688-9rhm-gjv2 affects version 3.0.9 of dompurify, and is fixed in 3.0.9-tuxcare.1."
      }
    },
    {
      "id": "GHSA-c6gr-qvv4-5v3f",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9"
        }
      ],
      "bom-ref": "urn:uuid:f6324c0b-7973-590e-bb4f-6c1edba5aaa6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-c6gr-qvv4-5v3f affects version 3.0.9 of dompurify, and is fixed in 3.0.9-tuxcare.4."
      }
    },
    {
      "id": "GHSA-jxrp-r7gx-q4j8",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9"
        }
      ],
      "bom-ref": "urn:uuid:e163e21c-4310-5307-93dd-c9daef379029",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-jxrp-r7gx-q4j8 is a false positive for dompurify 3.0.9."
      }
    },
    {
      "id": "GHSA-mrv2-3pqr-j5jr",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.9"
        }
      ],
      "bom-ref": "urn:uuid:990d223f-c434-5583-ad08-4b63c55ff2f3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mrv2-3pqr-j5jr affects version 3.0.9 of dompurify."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/dompurify@3.0.9"
    }
  ]
}