{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f1543f9a-bab9-5c0d-ab04-64ae89e5ff3e",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "dompurify",
      "purl": "pkg:npm/dompurify@3.1.3-tuxcare.3",
      "type": "library",
      "bom-ref": "pkg:npm/dompurify@3.1.3-tuxcare.3",
      "version": "3.1.3-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "dompurify",
            "purl": "pkg:npm/dompurify@3.1.3",
            "type": "library",
            "version": "3.1.3"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-15599",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8a54c320-0b66-567a-90a0-8e484424b0ce",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-15599 is fixed in version 3.1.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2025-26791",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3c8e6aaf-906f-5041-b54f-9e50a5eb1b9d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-26791 is fixed in version 3.1.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-0540",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:78453808-d8ce-56dc-93db-3715058e8d31",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-0540 is fixed in version 3.1.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-109345",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:106ebf7e-2f77-52c6-ad60-d58a2cb73719",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-109345 is fixed in version 3.1.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41238",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0a608899-5c3f-5d42-8e9d-8cc007355371",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41238 is fixed in version 3.1.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41239",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8e82f2e0-1eea-5470-b906-811f792ac2b4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41239 is fixed in version 3.1.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41240",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5b1757f1-60ce-520a-ac5e-e87a68bfcfba",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41240 is fixed in version 3.1.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49458",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:633c3ec2-5807-5aaa-85bf-5775018bba81",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49458 is fixed in version 3.1.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49459",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5f7429bf-e119-5ca5-85ad-72ecc4338cde",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49459 is fixed in version 3.1.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49978",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3b45c969-eb4d-550a-abc7-cf00aba87cf5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49978 is fixed in version 3.1.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65898",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a3435feb-27ea-57ee-aa9b-a6cd08b9b5e7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65898 is fixed in version 3.1.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65899",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a9e97020-9539-5080-bd6b-b145c56f9e27",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65899 is fixed in version 3.1.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65900",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:13576027-ab38-5e7d-9465-2250836caff7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65900 is fixed in version 3.1.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65901",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6c1f482f-f226-53e7-9390-9b11b0a90d1f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65901 is fixed in version 3.1.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65902",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b3e8a2bd-a8f3-587d-a344-b72e47fc0685",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65902 is fixed in version 3.1.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65903",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9d70aab1-2738-5561-8372-6ca85b2a6715",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65903 is fixed in version 3.1.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65912",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:eadf5e5c-c4c0-583e-93ed-8d2d558a269a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65912 is fixed in version 3.1.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65913",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c33af242-1892-59d4-a1f4-89589c867abc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65913 is fixed in version 3.1.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65914",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:164662aa-4b15-5e4c-8848-7588e10489ea",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65914 is fixed in version 3.1.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-66010",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b4222277-9d55-53f9-bdf9-cc02882fb00f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-66010 is fixed in version 3.1.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-75838",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2dbd87d4-a557-55d8-90f9-c0a2a96552f6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-75838 is fixed in version 3.1.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "GHSA-55q2-fjhq-7xh7",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9ae4a7a9-72ba-5695-bb08-126f7f50b5e4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-55q2-fjhq-7xh7 affects version 3.1.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "GHSA-6688-9rhm-gjv2",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:04042f17-7625-519c-bfa9-a92ba8137c38",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-6688-9rhm-gjv2 is fixed in version 3.1.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "GHSA-c6gr-qvv4-5v3f",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:cfbe5f6f-79d7-5b5c-962b-ec9141910b54",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-c6gr-qvv4-5v3f affects version 3.1.3-tuxcare.3 of dompurify, and is fixed in 3.1.3-tuxcare.4."
      }
    },
    {
      "id": "GHSA-jxrp-r7gx-q4j8",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c93b5bd5-ca8b-5835-a02f-7a2b695922d3",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-jxrp-r7gx-q4j8 is a false positive for dompurify 3.1.3-tuxcare.3."
      }
    },
    {
      "id": "GHSA-mrv2-3pqr-j5jr",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7edffd27-25f7-5fb3-8acf-98c4230071f1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mrv2-3pqr-j5jr affects version 3.1.3-tuxcare.3 of dompurify."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/dompurify@3.1.3-tuxcare.3"
    }
  ]
}