{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e802e055-3e83-533b-8dd7-d9d9a183c9a7",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "dompurify",
      "purl": "pkg:npm/dompurify@3.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/dompurify@3.1.3",
      "version": "3.1.3",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-15599",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3"
        }
      ],
      "bom-ref": "urn:uuid:9d9b507b-3f9c-5de6-83fd-4040c5d4f7b8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-15599 affects version 3.1.3 of dompurify, and is fixed in 3.1.3-tuxcare.3."
      }
    },
    {
      "id": "CVE-2025-26791",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3"
        }
      ],
      "bom-ref": "urn:uuid:9b7bd074-caba-5430-92ee-75a5a88cee03",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-26791 affects version 3.1.3 of dompurify, and is fixed in 3.1.3-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-0540",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3"
        }
      ],
      "bom-ref": "urn:uuid:c1577e19-336d-542a-b15c-0318a4960433",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-0540 affects version 3.1.3 of dompurify, and is fixed in 3.1.3-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-109345",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3"
        }
      ],
      "bom-ref": "urn:uuid:9aaf82a8-baf7-5ffb-9a54-ac22590b4bdb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-109345 affects version 3.1.3 of dompurify, and is fixed in 3.1.3-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-41238",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3"
        }
      ],
      "bom-ref": "urn:uuid:bce39a2a-0c96-5f5e-a5f2-c98d793519ef",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41238 affects version 3.1.3 of dompurify, and is fixed in 3.1.3-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-41239",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3"
        }
      ],
      "bom-ref": "urn:uuid:53b33281-cc87-5649-a239-ff85324e3711",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41239 affects version 3.1.3 of dompurify, and is fixed in 3.1.3-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-41240",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3"
        }
      ],
      "bom-ref": "urn:uuid:dd415ce7-8f78-5449-bd00-583c05e982c7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41240 affects version 3.1.3 of dompurify, and is fixed in 3.1.3-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-49458",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3"
        }
      ],
      "bom-ref": "urn:uuid:94f09040-22f4-550b-9e96-3c441361f57d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49458 affects version 3.1.3 of dompurify, and is fixed in 3.1.3-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-49459",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3"
        }
      ],
      "bom-ref": "urn:uuid:7286c2fa-19a6-5cb9-bda9-362d4316a4dd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49459 affects version 3.1.3 of dompurify, and is fixed in 3.1.3-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-49978",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3"
        }
      ],
      "bom-ref": "urn:uuid:d5f19a0a-a572-5d2b-a260-ac7d1b964af8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49978 affects version 3.1.3 of dompurify, and is fixed in 3.1.3-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65898",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3"
        }
      ],
      "bom-ref": "urn:uuid:166c2065-17a4-5768-a56b-27ddc479760f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65898 affects version 3.1.3 of dompurify, and is fixed in 3.1.3-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-65899",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3"
        }
      ],
      "bom-ref": "urn:uuid:a1a01e8f-5d5f-592b-8a5e-d45708a98cf1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65899 affects version 3.1.3 of dompurify, and is fixed in 3.1.3-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-65900",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3"
        }
      ],
      "bom-ref": "urn:uuid:5d6dbc51-6239-53fd-b812-e000d8b0afda",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65900 affects version 3.1.3 of dompurify, and is fixed in 3.1.3-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-65901",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3"
        }
      ],
      "bom-ref": "urn:uuid:06e551a6-8dc8-58f8-9e6f-216f239cc4d2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65901 affects version 3.1.3 of dompurify, and is fixed in 3.1.3-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65902",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3"
        }
      ],
      "bom-ref": "urn:uuid:f222d310-4a4a-590c-b2ec-8265cda222f1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65902 affects version 3.1.3 of dompurify, and is fixed in 3.1.3-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65903",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3"
        }
      ],
      "bom-ref": "urn:uuid:c0748a20-6416-5483-8b45-8e890c86012b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65903 affects version 3.1.3 of dompurify, and is fixed in 3.1.3-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65912",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3"
        }
      ],
      "bom-ref": "urn:uuid:d31deeb3-43c1-5b28-865c-800dd8f7070e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65912 affects version 3.1.3 of dompurify, and is fixed in 3.1.3-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65913",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3"
        }
      ],
      "bom-ref": "urn:uuid:202f6728-02e7-55b3-b5cc-a930dba8edd3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65913 affects version 3.1.3 of dompurify, and is fixed in 3.1.3-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-65914",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3"
        }
      ],
      "bom-ref": "urn:uuid:d54a629d-0809-509d-97f3-f4d3484ef33a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65914 affects version 3.1.3 of dompurify, and is fixed in 3.1.3-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-66010",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3"
        }
      ],
      "bom-ref": "urn:uuid:0c4d0bf5-7bd9-5bfc-9ff4-fdc536c1f820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66010 affects version 3.1.3 of dompurify, and is fixed in 3.1.3-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-75838",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3"
        }
      ],
      "bom-ref": "urn:uuid:092032ed-3c92-5537-9c88-ba516f755d13",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-75838 affects version 3.1.3 of dompurify, and is fixed in 3.1.3-tuxcare.2."
      }
    },
    {
      "id": "GHSA-55q2-fjhq-7xh7",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3"
        }
      ],
      "bom-ref": "urn:uuid:163490aa-e194-5bfa-8a24-d3ef9f477c9e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-55q2-fjhq-7xh7 affects version 3.1.3 of dompurify."
      }
    },
    {
      "id": "GHSA-6688-9rhm-gjv2",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3"
        }
      ],
      "bom-ref": "urn:uuid:36b691d3-ccf0-54b5-ba66-788b1cf0ce4e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-6688-9rhm-gjv2 affects version 3.1.3 of dompurify, and is fixed in 3.1.3-tuxcare.1."
      }
    },
    {
      "id": "GHSA-c6gr-qvv4-5v3f",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3"
        }
      ],
      "bom-ref": "urn:uuid:f79be42d-36af-5a34-999d-911fb8caebc2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-c6gr-qvv4-5v3f affects version 3.1.3 of dompurify, and is fixed in 3.1.3-tuxcare.4."
      }
    },
    {
      "id": "GHSA-jxrp-r7gx-q4j8",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3"
        }
      ],
      "bom-ref": "urn:uuid:5915e7f6-3208-5ae8-9250-5f52e692bf3d",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-jxrp-r7gx-q4j8 is a false positive for dompurify 3.1.3."
      }
    },
    {
      "id": "GHSA-mrv2-3pqr-j5jr",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3"
        }
      ],
      "bom-ref": "urn:uuid:1b315938-c6ea-526c-8620-0a8fd2da2a50",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mrv2-3pqr-j5jr affects version 3.1.3 of dompurify."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/dompurify@3.1.3"
    }
  ]
}