{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:147e0d2f-7a5f-575c-aa3f-2dfa75788665",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@modelcontextprotocol/sdk",
      "purl": "pkg:npm/%40modelcontextprotocol/sdk@1.32.1",
      "type": "library",
      "bom-ref": "pkg:npm/%40modelcontextprotocol/sdk@1.32.1",
      "version": "1.32.1",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-66414",
      "affects": [
        {
          "ref": "pkg:npm/%40modelcontextprotocol/sdk@1.32.1"
        }
      ],
      "bom-ref": "urn:uuid:da97e5c7-364c-54e4-bd91-52f034599be1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66414 affects version 1.32.1 of @modelcontextprotocol/sdk."
      }
    },
    {
      "id": "CVE-2026-0621",
      "affects": [
        {
          "ref": "pkg:npm/%40modelcontextprotocol/sdk@1.32.1"
        }
      ],
      "bom-ref": "urn:uuid:20633d80-69df-5867-8afa-9488b12491d8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-0621 affects version 1.32.1 of @modelcontextprotocol/sdk."
      }
    },
    {
      "id": "CVE-2026-104850",
      "affects": [
        {
          "ref": "pkg:npm/%40modelcontextprotocol/sdk@1.32.1"
        }
      ],
      "bom-ref": "urn:uuid:5b6b3001-9a3f-5264-a064-cfd9441d6d09",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-104850 affects version 1.32.1 of @modelcontextprotocol/sdk."
      }
    },
    {
      "id": "CVE-2026-111767",
      "affects": [
        {
          "ref": "pkg:npm/%40modelcontextprotocol/sdk@1.32.1"
        }
      ],
      "bom-ref": "urn:uuid:d255aa13-22df-5538-8a51-20968b97a49c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-111767 affects version 1.32.1 of @modelcontextprotocol/sdk."
      }
    },
    {
      "id": "CVE-2026-111768",
      "affects": [
        {
          "ref": "pkg:npm/%40modelcontextprotocol/sdk@1.32.1"
        }
      ],
      "bom-ref": "urn:uuid:356132a5-3d95-541f-8f34-b1840235f6f1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-111768 affects version 1.32.1 of @modelcontextprotocol/sdk."
      }
    },
    {
      "id": "CVE-2026-111769",
      "affects": [
        {
          "ref": "pkg:npm/%40modelcontextprotocol/sdk@1.32.1"
        }
      ],
      "bom-ref": "urn:uuid:52f11943-da91-581c-bb68-daf31752b1e4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-111769 affects version 1.32.1 of @modelcontextprotocol/sdk."
      }
    },
    {
      "id": "CVE-2026-111771",
      "affects": [
        {
          "ref": "pkg:npm/%40modelcontextprotocol/sdk@1.32.1"
        }
      ],
      "bom-ref": "urn:uuid:d13bc59d-5400-5043-84a4-39d52eda4e9a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-111771 affects version 1.32.1 of @modelcontextprotocol/sdk."
      }
    },
    {
      "id": "CVE-2026-25536",
      "affects": [
        {
          "ref": "pkg:npm/%40modelcontextprotocol/sdk@1.32.1"
        }
      ],
      "bom-ref": "urn:uuid:cf34c39e-4d23-5ef6-873b-32ae3b5f835c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-25536 affects version 1.32.1 of @modelcontextprotocol/sdk."
      }
    },
    {
      "id": "GHSA-f897-62hf-6gxq",
      "affects": [
        {
          "ref": "pkg:npm/%40modelcontextprotocol/sdk@1.32.1"
        }
      ],
      "bom-ref": "urn:uuid:02d9aa4f-9f9f-55fc-a1ef-394bc909a5a1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-f897-62hf-6gxq affects version 1.32.1 of @modelcontextprotocol/sdk."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40modelcontextprotocol/sdk@1.32.1"
    }
  ]
}