{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f4660701-9d51-5fb8-b858-ce8762efa4ee",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "dompurify",
      "purl": "pkg:npm/dompurify@3.1.4-tuxcare.4",
      "type": "library",
      "bom-ref": "pkg:npm/dompurify@3.1.4-tuxcare.4",
      "version": "3.1.4-tuxcare.4",
      "pedigree": {
        "ancestors": [
          {
            "name": "dompurify",
            "purl": "pkg:npm/dompurify@3.1.4",
            "type": "library",
            "version": "3.1.4"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-15599",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:13bab765-24c1-5a8a-9a54-486a2307051f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-15599 is fixed in version 3.1.4-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2025-26791",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:5ef4b2d8-5e40-55e9-a66b-719c8bb020b5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-26791 is fixed in version 3.1.4-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-0540",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:ca9411db-17dd-5b6e-840d-a5222692d115",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-0540 is fixed in version 3.1.4-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41238",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:3a55e0a2-311c-5438-809b-0551bfa5c63b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41238 is fixed in version 3.1.4-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41239",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:f3a568a8-7638-5d0e-91ee-028498b6220d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41239 is fixed in version 3.1.4-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41240",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:dd77e5f1-cccf-57e5-b39b-a4fe472a3d7c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41240 is fixed in version 3.1.4-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49458",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:e4b4488e-bfa1-5c69-80e8-815a9689bf3b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49458 is fixed in version 3.1.4-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49459",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:58218453-b58c-5878-8424-bc2e72984c9c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49459 is fixed in version 3.1.4-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49978",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:7ecef035-78ef-5919-8197-c37c45b6b442",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49978 is fixed in version 3.1.4-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65898",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:21be62a9-d1f4-55a6-a282-76a439b81d75",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65898 is fixed in version 3.1.4-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65899",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:347780f4-66f9-51ae-a3eb-9608a1104d50",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65899 is fixed in version 3.1.4-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65900",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:711d7029-b460-5609-a094-3a6df606fbfe",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65900 is fixed in version 3.1.4-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65901",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:fbcf8642-9f50-5efe-9911-1000833d5b3e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65901 is fixed in version 3.1.4-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65902",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:1958a7c0-1e2e-5b77-bef4-2a5685f7d2c2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65902 is fixed in version 3.1.4-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65903",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:feae0f16-a3ad-5646-ac56-7b21f3a6007c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65903 is fixed in version 3.1.4-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65912",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:4235113d-05e4-5e2c-8c72-bce613da242f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65912 is fixed in version 3.1.4-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65913",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:6a30672c-00f7-551d-9564-a758e9737a17",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65913 is fixed in version 3.1.4-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65914",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:428b7f75-ba68-55c4-a4b6-7fc9db5e5405",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65914 is fixed in version 3.1.4-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-66010",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:79c6347f-c658-5b3c-9415-be80eb222383",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-66010 is fixed in version 3.1.4-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-75838",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:195d799e-589e-534d-a235-c9ea004434c5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-75838 is fixed in version 3.1.4-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "GHSA-55q2-fjhq-7xh7",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:4132ddd5-c29e-529e-bbc2-381e405104d5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-55q2-fjhq-7xh7 affects version 3.1.4-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "GHSA-6688-9rhm-gjv2",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:efa1b6ef-02af-55d5-8e0b-36fe34ffad50",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-6688-9rhm-gjv2 is fixed in version 3.1.4-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "GHSA-c6gr-qvv4-5v3f",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:eeb4b8ed-e9e4-5dc2-8bb9-e2f42409fcc1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-c6gr-qvv4-5v3f is fixed in version 3.1.4-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "GHSA-jxrp-r7gx-q4j8",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:bdce095f-d863-5900-b47d-a2bd2c5c4f9e",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-jxrp-r7gx-q4j8 is a false positive for dompurify 3.1.4-tuxcare.4."
      }
    },
    {
      "id": "GHSA-mrv2-3pqr-j5jr",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:3fd277d6-dc46-5c13-801e-e8c278f23d8a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mrv2-3pqr-j5jr affects version 3.1.4-tuxcare.4 of dompurify."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/dompurify@3.1.4-tuxcare.4"
    }
  ]
}