{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:427b3a40-9f16-5e9c-aeb0-5207dc64b0bf",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "core",
      "purl": "pkg:composer/drupal/core@8.9.20-p8+tuxcare",
      "type": "library",
      "group": "drupal",
      "bom-ref": "pkg:composer/drupal/core@8.9.20-p8+tuxcare",
      "version": "8.9.20-p8+tuxcare",
      "pedigree": {
        "ancestors": [
          {
            "name": "core",
            "purl": "pkg:composer/drupal/core@8.9.20",
            "type": "library",
            "group": "drupal",
            "version": "8.9.20"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2022-25270",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:b923ec6d-3058-59d8-9f74-d3e27a6cbc83",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25270 is fixed in version 8.9.20-p8+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2022-25271",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:ffb05210-2e86-5e4a-ad5e-e881dc475ad6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25271 is fixed in version 8.9.20-p8+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2022-25273",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:5fa8a18e-6ee9-5d34-a9e1-32956077e5ab",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25273 is fixed in version 8.9.20-p8+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2022-25275",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:ff79f0e4-5e4e-538b-8747-eae89539dd0b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25275 is fixed in version 8.9.20-p8+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2022-25276",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:a5642aec-3743-5848-9087-56cb11ee2775",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25276 is fixed in version 8.9.20-p8+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2022-25277",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:8c7f27c9-65d5-57b0-8e8f-2baf1dd35664",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25277 is fixed in version 8.9.20-p8+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2022-25278",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:e7c02650-8203-5862-a62f-f15d4a70ad1c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25278 is fixed in version 8.9.20-p8+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2023-5256",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:61073a4e-3f6a-57f7-baf0-431a8129413f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-5256 is fixed in version 8.9.20-p8+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2024-12393",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:3cd40cc5-28c2-5778-8b4a-65ca9366c5e5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-12393 is fixed in version 8.9.20-p8+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2024-45440",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:8b0efc79-e8b4-53dd-9c99-3f7dacc7a91b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-45440 affects version 8.9.20-p8+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2024-55634",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:ab02f79a-74e0-5129-9bce-25c69bf89644",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-55634 is fixed in version 8.9.20-p8+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2024-55636",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:b2dc3a0f-0b8d-5206-980a-f97df6152963",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-55636 is fixed in version 8.9.20-p8+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2024-55637",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:89a214a2-b61a-5b1a-9dce-4658a9f4f946",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-55637 is fixed in version 8.9.20-p8+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2024-55638",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:cdf6a6dd-03d3-5e5d-a76e-dfe8dc8a7c32",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-55638 is fixed in version 8.9.20-p8+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-13080",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:7be90e53-d7c1-53d8-8af1-7ad375a1566d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-13080 is fixed in version 8.9.20-p8+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-13081",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:9ff150db-d48e-5dfa-b1b2-4ab8a90f76b3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-13081 is fixed in version 8.9.20-p8+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-13082",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:c714f5c1-282d-55b4-9018-2c17409a226d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-13082 is fixed in version 8.9.20-p8+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-13083",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:d302f64e-6732-51e9-a62e-dba7cba80f8e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-13083 is fixed in version 8.9.20-p8+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-3057",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:73578454-d2b7-5398-9f56-51aca55ffb00",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-3057 is fixed in version 8.9.20-p8+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-31673",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:bb19c1cb-d263-5872-9883-dd047eb38f27",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31673 is fixed in version 8.9.20-p8+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-31674",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:54c03df9-22d4-5279-bfa7-9ad1a13ed25b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31674 is fixed in version 8.9.20-p8+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-31675",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:41969b89-aabf-56fe-891e-1ea323e8504a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31675 is fixed in version 8.9.20-p8+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2026-108097",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:31464048-5518-58a7-bc8f-8c7a4e0620a3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-108097 is fixed in version 8.9.20-p8+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2026-108515",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:3616aa60-966e-5b1f-9eb3-c63cfef50a72",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-108515 is fixed in version 8.9.20-p8+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2026-6365",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:e0270461-0ead-55a5-beeb-e2d72ae61216",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-6365 is fixed in version 8.9.20-p8+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2026-6366",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:b6a9ea6b-ffe4-5b76-addd-b854e0b8c003",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-6366 is fixed in version 8.9.20-p8+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2026-9082",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:ede55a1c-b8fd-5de8-ba05-4e4202c15e74",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-9082 is fixed in version 8.9.20-p8+tuxcare of drupal/core."
      }
    },
    {
      "id": "GHSA-6ccv-8fgf-cjpw",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:a8ec0286-3968-516b-86fd-97fbe928b7d1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-6ccv-8fgf-cjpw is fixed in version 8.9.20-p8+tuxcare of drupal/core."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:composer/drupal/core@8.9.20-p8+tuxcare"
    }
  ]
}