{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:342840f1-e12b-54d0-8308-84fa81e3de5a",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "dompurify",
      "purl": "pkg:npm/dompurify@3.1.3-tuxcare.4",
      "type": "library",
      "bom-ref": "pkg:npm/dompurify@3.1.3-tuxcare.4",
      "version": "3.1.3-tuxcare.4",
      "pedigree": {
        "ancestors": [
          {
            "name": "dompurify",
            "purl": "pkg:npm/dompurify@3.1.3",
            "type": "library",
            "version": "3.1.3"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-15599",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:007ff65e-900a-5aa4-baa0-9b21e1e49f82",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-15599 is fixed in version 3.1.3-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2025-26791",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:269af3b1-9a96-5981-b3f3-fd8c8d8b2e0c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-26791 is fixed in version 3.1.3-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-0540",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:36b7fee6-a193-5f49-9c15-b614d6a24a02",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-0540 is fixed in version 3.1.3-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-109345",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:aa5cc2b2-0d49-579d-87a9-b11debca5f11",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-109345 is fixed in version 3.1.3-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41238",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:ee6372f3-7307-52cd-8abb-1ca45af49789",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41238 is fixed in version 3.1.3-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41239",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:7091bbbc-ec82-5c25-b64f-29323b444a68",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41239 is fixed in version 3.1.3-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41240",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:df91747e-c077-50d3-be40-e6e4c0f07351",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41240 is fixed in version 3.1.3-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49458",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:dc622580-5af6-5227-8cce-05a2f663dead",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49458 is fixed in version 3.1.3-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49459",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:d592101a-c04a-5f9e-bc0f-155b4b1cf40c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49459 is fixed in version 3.1.3-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49978",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:fe041772-c2bd-5db9-8c3d-0cc1055377bd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49978 is fixed in version 3.1.3-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65898",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:9628180e-635d-5af2-a81c-6b607b6a2a67",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65898 is fixed in version 3.1.3-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65899",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:139cfc5b-4a10-5b84-9b03-81e4dee42483",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65899 is fixed in version 3.1.3-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65900",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:b6aab038-f55b-5080-b2c9-2d955db94210",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65900 is fixed in version 3.1.3-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65901",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:18b835b6-c3a0-552a-807a-171274bfea5e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65901 is fixed in version 3.1.3-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65902",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:295b03aa-0046-56da-bdfa-ff32ac3905cb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65902 is fixed in version 3.1.3-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65903",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:32abdf4e-7f0a-5aea-8dca-e769ca262f8c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65903 is fixed in version 3.1.3-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65912",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:60307d3a-4c4c-56a7-9dac-c7f1b6a48633",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65912 is fixed in version 3.1.3-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65913",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:cd8a6223-ffc1-5f95-a753-ccde8f69b555",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65913 is fixed in version 3.1.3-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65914",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:91427299-c89a-514d-9ca9-a8835ed6f1aa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65914 is fixed in version 3.1.3-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-66010",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:61c91b69-94f3-5b4d-8679-feb5986cc674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-66010 is fixed in version 3.1.3-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-75838",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:1dbdcfe9-295c-5287-8508-4087b6d68428",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-75838 is fixed in version 3.1.3-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "GHSA-55q2-fjhq-7xh7",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:08227134-e2d3-5b83-b402-8b5c7f228a70",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-55q2-fjhq-7xh7 affects version 3.1.3-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "GHSA-6688-9rhm-gjv2",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:7035e814-ed1f-5122-aecc-4102433f87a5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-6688-9rhm-gjv2 is fixed in version 3.1.3-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "GHSA-c6gr-qvv4-5v3f",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:ac0ccac8-9487-5e77-a4ec-8304093722c7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-c6gr-qvv4-5v3f is fixed in version 3.1.3-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "GHSA-jxrp-r7gx-q4j8",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:1e9a2e6d-edca-50ff-8c8d-99b697cf4e2a",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-jxrp-r7gx-q4j8 is a false positive for dompurify 3.1.3-tuxcare.4."
      }
    },
    {
      "id": "GHSA-mrv2-3pqr-j5jr",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:68c09851-e8a1-5348-bd02-371b94fa4557",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mrv2-3pqr-j5jr affects version 3.1.3-tuxcare.4 of dompurify."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/dompurify@3.1.3-tuxcare.4"
    }
  ]
}