{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b28dab32-8c80-53b3-ad32-878eab47c297",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "dompurify",
      "purl": "pkg:npm/dompurify@3.2.6-tuxcare.3",
      "type": "library",
      "bom-ref": "pkg:npm/dompurify@3.2.6-tuxcare.3",
      "version": "3.2.6-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "dompurify",
            "purl": "pkg:npm/dompurify@3.2.6",
            "type": "library",
            "version": "3.2.6"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-15599",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:87fdd6b9-6f9b-5750-a9cf-d958650b27f6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-15599 is fixed in version 3.2.6-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-0540",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b20c802d-1f4c-5c70-8759-1e23627d4569",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-0540 is fixed in version 3.2.6-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41238",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ae81c8cc-8ca0-5664-93c0-7c6b4c0ee45d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41238 is fixed in version 3.2.6-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41239",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9464d616-6701-57cd-ae7d-9edeeb7814a8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41239 is fixed in version 3.2.6-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41240",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:daa68219-8d17-516e-8e02-ab6d8d7fb750",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41240 is fixed in version 3.2.6-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49458",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:23502a32-9515-5bab-9cd2-8d23ff9b3825",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49458 is fixed in version 3.2.6-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49459",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:06c85efc-37b6-50a0-9d7e-7c6dfbff1215",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49459 is fixed in version 3.2.6-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49978",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3f38e0aa-4ae9-59fb-8fc7-249a6f26bde8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49978 is fixed in version 3.2.6-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65898",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5fdc1601-68eb-5a72-aee2-11052972a491",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65898 is fixed in version 3.2.6-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65899",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:93625d9e-ca4c-5572-b62c-c1a2abc1c280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65899 is fixed in version 3.2.6-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65900",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:471c7032-19ca-598a-b81c-4071493ee11f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65900 is fixed in version 3.2.6-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65901",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:eeafa38f-f466-5686-a755-a6c7a1f5c2df",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65901 is fixed in version 3.2.6-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65902",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8ba4fa64-07d7-5ace-9f79-6ad6767231b7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65902 is fixed in version 3.2.6-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65903",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a3d5dfbc-fdcf-5bc7-84a2-dc156433f7ed",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65903 is fixed in version 3.2.6-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65912",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a9772ca4-b121-5b9b-b875-71b5fa65185e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65912 is fixed in version 3.2.6-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65913",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0638b285-018d-58b6-8456-d9ef44c641dc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65913 is fixed in version 3.2.6-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65914",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5b29705e-5f35-5697-98b6-99d3dfcff9b2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65914 is fixed in version 3.2.6-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-66010",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:55817340-0ac2-5aec-a598-ea2923a48183",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-66010 is fixed in version 3.2.6-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-75838",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:abc5f779-47b0-5386-9733-1ecb16ea652b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-75838 is fixed in version 3.2.6-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "GHSA-55q2-fjhq-7xh7",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ab6a7056-8503-53a1-8a6e-52e8c3d86ff0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-55q2-fjhq-7xh7 affects version 3.2.6-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "GHSA-6688-9rhm-gjv2",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:eb94cb56-2672-5562-af8e-b368567dbf7b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-6688-9rhm-gjv2 is fixed in version 3.2.6-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "GHSA-c6gr-qvv4-5v3f",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7092a56a-7914-5900-bc6d-2b7b62d6d8b7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-c6gr-qvv4-5v3f affects version 3.2.6-tuxcare.3 of dompurify, and is fixed in 3.2.6-tuxcare.4."
      }
    },
    {
      "id": "GHSA-jxrp-r7gx-q4j8",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b74a1739-b40c-53ac-bec9-e25423f55d87",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-jxrp-r7gx-q4j8 is a false positive for dompurify 3.2.6-tuxcare.3."
      }
    },
    {
      "id": "GHSA-mrv2-3pqr-j5jr",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:11e18f32-6215-560a-9900-1ed3c09825db",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mrv2-3pqr-j5jr affects version 3.2.6-tuxcare.3 of dompurify."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/dompurify@3.2.6-tuxcare.3"
    }
  ]
}