{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:c0db1c83-aa06-5550-9f77-76b351984d8a",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "core",
      "purl": "pkg:composer/drupal/core@8.9.20-p9+tuxcare",
      "type": "library",
      "group": "drupal",
      "bom-ref": "pkg:composer/drupal/core@8.9.20-p9+tuxcare",
      "version": "8.9.20-p9+tuxcare",
      "pedigree": {
        "ancestors": [
          {
            "name": "core",
            "purl": "pkg:composer/drupal/core@8.9.20",
            "type": "library",
            "group": "drupal",
            "version": "8.9.20"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2022-25270",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:ad269b0d-26da-555d-9f4a-5cfb0ff5edca",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25270 is fixed in version 8.9.20-p9+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2022-25271",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:ffaf0f07-3407-5754-aa07-39805d59806a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25271 is fixed in version 8.9.20-p9+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2022-25273",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:b7308d9e-49d8-5a98-bfab-353f981f84ad",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25273 is fixed in version 8.9.20-p9+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2022-25275",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:0ecb4072-0313-582f-a435-a57f527bd98c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25275 is fixed in version 8.9.20-p9+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2022-25276",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:3f191e40-1b43-5f68-85c7-c382c9f17f98",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25276 is fixed in version 8.9.20-p9+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2022-25277",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:3cf8c365-8d02-57c6-a285-7d5913bafe4f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25277 is fixed in version 8.9.20-p9+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2022-25278",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:d990c0fd-40d7-50d5-aeef-3b2d72d7ed00",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25278 is fixed in version 8.9.20-p9+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2023-5256",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:ba4be6ff-d9ae-5730-9306-e7f75426c59b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-5256 is fixed in version 8.9.20-p9+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2024-12393",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:4a267a4a-33f9-5dea-aca4-f49a568cd038",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-12393 is fixed in version 8.9.20-p9+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2024-45440",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:b6415097-1185-50d5-9284-f6db2d5bbc83",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-45440 affects version 8.9.20-p9+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2024-55634",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:d204150e-3a32-5d50-a904-f3d682bb9ba4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-55634 is fixed in version 8.9.20-p9+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2024-55636",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:d59ca6fd-404a-5ca1-8f9d-f914fa035748",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-55636 is fixed in version 8.9.20-p9+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2024-55637",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:1eab2de5-7960-5c33-8363-d57190bf7802",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-55637 is fixed in version 8.9.20-p9+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2024-55638",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:7b4c117e-00ea-508c-9d90-cae8ec32cf5f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-55638 is fixed in version 8.9.20-p9+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-13080",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:765bcbaf-d4ba-522e-9615-2b290ae3168a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-13080 is fixed in version 8.9.20-p9+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-13081",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:9910bc9d-df7b-58c2-8d12-2019c2eb9510",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-13081 is fixed in version 8.9.20-p9+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-13082",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:bfa5de47-890c-579d-8a15-ad920048c7f9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-13082 is fixed in version 8.9.20-p9+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-13083",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:29ac06d2-f0ad-5d83-87eb-e9aeea1fbe4c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-13083 is fixed in version 8.9.20-p9+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-3057",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:e0bc0d17-a4d4-5aeb-a3bd-1e46e97c8679",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-3057 is fixed in version 8.9.20-p9+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-31673",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:6d83cb1b-771f-5648-8ba5-3cf091f6e415",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31673 is fixed in version 8.9.20-p9+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-31674",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:9e6ab659-04bc-5573-b76b-bc94162b2bca",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31674 is fixed in version 8.9.20-p9+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-31675",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:df039041-07c0-5bca-9fa2-29aa24b3ab16",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31675 is fixed in version 8.9.20-p9+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2026-108097",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:b079c3da-6aeb-56c3-bb81-f10f30697e00",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-108097 is fixed in version 8.9.20-p9+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2026-108515",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:60b4b885-0a74-5a51-9a4d-68c24f4c91ac",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-108515 is fixed in version 8.9.20-p9+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2026-6365",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:634c4286-b0e2-5a20-9e11-19d2377cfec5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-6365 is fixed in version 8.9.20-p9+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2026-6366",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:151a7db2-677d-5cc5-a219-d9b7e376ac65",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-6366 is fixed in version 8.9.20-p9+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2026-9082",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:6954fd89-765b-520d-b939-45fd214a0296",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-9082 is fixed in version 8.9.20-p9+tuxcare of drupal/core."
      }
    },
    {
      "id": "GHSA-6ccv-8fgf-cjpw",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p9+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:2f4b3d03-3da0-520e-b05c-b7794a60afab",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-6ccv-8fgf-cjpw is fixed in version 8.9.20-p9+tuxcare of drupal/core."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:composer/drupal/core@8.9.20-p9+tuxcare"
    }
  ]
}