{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:7709d199-0a42-5569-a91e-234ede0aa31f",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "dompurify",
      "purl": "pkg:npm/dompurify@3.3.3-tuxcare.3",
      "type": "library",
      "bom-ref": "pkg:npm/dompurify@3.3.3-tuxcare.3",
      "version": "3.3.3-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "dompurify",
            "purl": "pkg:npm/dompurify@3.3.3",
            "type": "library",
            "version": "3.3.3"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-41238",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.3.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2a33b3b1-4113-57fb-a73c-c797cf005806",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41238 is fixed in version 3.3.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41239",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.3.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8a2d1195-305b-53c5-8c6a-58317924f522",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41239 is fixed in version 3.3.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41240",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.3.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3a2df4b1-741a-5d8b-b505-0eef7359f196",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41240 is fixed in version 3.3.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49458",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.3.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:134b245c-0ec6-5657-aecb-1347b04bef5b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49458 is fixed in version 3.3.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49459",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.3.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:95602cf9-9853-5089-a096-e9fb4cf685d3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49459 is fixed in version 3.3.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49978",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.3.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:07c43627-a51d-52ec-8201-8bd4cf321461",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49978 is fixed in version 3.3.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65898",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.3.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:25141261-7d31-516c-9163-228a7bd1d22b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65898 is fixed in version 3.3.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65899",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.3.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1bfb1908-c1d9-5d79-a029-ec2dc6c42da7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65899 is fixed in version 3.3.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65900",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.3.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d3f5e13b-3dc1-52d8-8434-ea00c86a8fa1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65900 is fixed in version 3.3.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65901",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.3.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6453286f-276c-5f46-b78f-8d43e1d3cc17",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65901 is fixed in version 3.3.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65902",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.3.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6a52e40e-57fd-5682-ad9c-426f9decf95e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65902 is fixed in version 3.3.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65903",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.3.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5f8e7e8d-5d0c-544d-b0a4-8e15400fc1bb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65903 is fixed in version 3.3.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-66010",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.3.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e7992ebc-ebd6-5b6e-9eda-a23e7c990381",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-66010 is fixed in version 3.3.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "CVE-2026-75838",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.3.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f60a7ba2-7eb9-5152-866a-423ffeb7a757",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-75838 is fixed in version 3.3.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "GHSA-55q2-fjhq-7xh7",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.3.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4cafe607-c49f-5329-be73-9b33b6e4e337",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-55q2-fjhq-7xh7 affects version 3.3.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "GHSA-6688-9rhm-gjv2",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.3.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:584286bc-2a10-5cbf-a509-575d9779c650",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-6688-9rhm-gjv2 is fixed in version 3.3.3-tuxcare.3 of dompurify."
      }
    },
    {
      "id": "GHSA-c6gr-qvv4-5v3f",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.3.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f0c13134-32ed-54a8-809a-aefd9c171cc0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-c6gr-qvv4-5v3f affects version 3.3.3-tuxcare.3 of dompurify, and is fixed in 3.3.3-tuxcare.4."
      }
    },
    {
      "id": "GHSA-jxrp-r7gx-q4j8",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.3.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b204eb8d-1de8-5674-a33f-dd66fccf70f3",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-jxrp-r7gx-q4j8 is a false positive for dompurify 3.3.3-tuxcare.3."
      }
    },
    {
      "id": "GHSA-mrv2-3pqr-j5jr",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.3.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8db7b64e-f881-5406-a849-0a34ec37fab6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mrv2-3pqr-j5jr affects version 3.3.3-tuxcare.3 of dompurify."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/dompurify@3.3.3-tuxcare.3"
    }
  ]
}