{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:acd3102f-9ba2-55ab-8641-9d489ec4f492",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "dompurify",
      "purl": "pkg:npm/dompurify@3.2.6-tuxcare.4",
      "type": "library",
      "bom-ref": "pkg:npm/dompurify@3.2.6-tuxcare.4",
      "version": "3.2.6-tuxcare.4",
      "pedigree": {
        "ancestors": [
          {
            "name": "dompurify",
            "purl": "pkg:npm/dompurify@3.2.6",
            "type": "library",
            "version": "3.2.6"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-15599",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:ffa08b4e-3b00-531f-b7b8-25522ac3f119",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-15599 is fixed in version 3.2.6-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-0540",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:c7949016-8dee-5149-8b4b-49964985756e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-0540 is fixed in version 3.2.6-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41238",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:80f68960-c35a-52ba-a38b-2a1c31c95b8c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41238 is fixed in version 3.2.6-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41239",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:4d22c076-5000-5ef0-a92f-302f15930354",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41239 is fixed in version 3.2.6-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41240",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:98356d05-6ba3-5364-bf45-f731b15c4e0f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41240 is fixed in version 3.2.6-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49458",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:9866324f-38c1-544f-a63e-109c3b9113a0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49458 is fixed in version 3.2.6-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49459",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:65a821e9-3d69-5406-879b-81cc32d1f93f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49459 is fixed in version 3.2.6-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49978",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:e2fb5807-0808-516a-a870-b11eb733aef7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49978 is fixed in version 3.2.6-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65898",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:d532ae63-4d98-5d12-b882-884e3cea82f3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65898 is fixed in version 3.2.6-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65899",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:3e318de4-0391-5f6f-bb0c-2932fbc61d94",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65899 is fixed in version 3.2.6-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65900",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:2a92c632-80d5-5b87-97e2-c87c5b0df05b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65900 is fixed in version 3.2.6-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65901",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:74c90701-99d9-5bb0-8d27-8b5495a1c499",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65901 is fixed in version 3.2.6-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65902",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:5855087c-3c64-5e2f-b91b-48df2ce3c0a8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65902 is fixed in version 3.2.6-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65903",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:a35c8126-569d-5c15-ad04-c35063d548fc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65903 is fixed in version 3.2.6-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65912",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:3380fb65-c093-55ad-b9c7-8c1fd70d841e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65912 is fixed in version 3.2.6-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65913",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:4807c6b1-4de1-5b2f-ace2-7c5a60eedd16",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65913 is fixed in version 3.2.6-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65914",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:8851988a-38cc-585a-8b86-ad396ba74160",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65914 is fixed in version 3.2.6-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-66010",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:6f5e151d-3c5d-5088-9911-100a66b306f7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-66010 is fixed in version 3.2.6-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-75838",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:ab9e17cb-35eb-5dc0-8388-011deefdc915",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-75838 is fixed in version 3.2.6-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "GHSA-55q2-fjhq-7xh7",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:6d1c4d4b-b4f6-5dd9-8c58-68148fc3f3f0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-55q2-fjhq-7xh7 affects version 3.2.6-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "GHSA-6688-9rhm-gjv2",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:a6e52384-2b4b-5167-9c4a-b0b1c77d917d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-6688-9rhm-gjv2 is fixed in version 3.2.6-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "GHSA-c6gr-qvv4-5v3f",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:e6d1647b-01bf-52f1-b008-64f2f7c448e8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-c6gr-qvv4-5v3f is fixed in version 3.2.6-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "GHSA-jxrp-r7gx-q4j8",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:64f7a6ba-46b8-5664-b01d-83f01654c114",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-jxrp-r7gx-q4j8 is a false positive for dompurify 3.2.6-tuxcare.4."
      }
    },
    {
      "id": "GHSA-mrv2-3pqr-j5jr",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:0ea49a5d-6227-5bd4-8eaf-c2807a76e15f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mrv2-3pqr-j5jr affects version 3.2.6-tuxcare.4 of dompurify."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/dompurify@3.2.6-tuxcare.4"
    }
  ]
}