{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2f1c8537-5a77-507f-bae5-28fddcf4691a",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@sveltejs/kit",
      "purl": "pkg:npm/%40sveltejs/kit@3.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/%40sveltejs/kit@3.2.0",
      "version": "3.2.0",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2023-29003",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.2.0"
        }
      ],
      "bom-ref": "urn:uuid:21b93de9-e64c-5af3-a547-2a8088056d9d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-29003 affects version 3.2.0 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2023-29008",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.2.0"
        }
      ],
      "bom-ref": "urn:uuid:b0ca4ca2-534e-5f10-86ad-fe9f95cb01a6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-29008 affects version 3.2.0 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2024-23641",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.2.0"
        }
      ],
      "bom-ref": "urn:uuid:125e9bea-909f-54ad-aad9-f4cd25b34969",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23641 affects version 3.2.0 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2024-53261",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.2.0"
        }
      ],
      "bom-ref": "urn:uuid:defb1d34-ee0d-5eb5-bb39-39e25039b1f8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-53261 affects version 3.2.0 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2024-53262",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.2.0"
        }
      ],
      "bom-ref": "urn:uuid:2e0cca18-7173-59cc-8378-c844c2f87e9f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-53262 affects version 3.2.0 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2025-32388",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.2.0"
        }
      ],
      "bom-ref": "urn:uuid:a18576e8-8313-564c-a5cd-914c8ef5d113",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-32388 affects version 3.2.0 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2025-67647",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.2.0"
        }
      ],
      "bom-ref": "urn:uuid:b31e39ee-2ab5-5936-9bba-cf5de86405a6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67647 affects version 3.2.0 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-114060",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.2.0"
        }
      ],
      "bom-ref": "urn:uuid:c473d58b-4504-5d6c-9870-8fe144dfe0e7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114060 affects version 3.2.0 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-114061",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.2.0"
        }
      ],
      "bom-ref": "urn:uuid:5ad3e21e-7b46-5027-a33a-766c5fff01fd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114061 affects version 3.2.0 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-22803",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.2.0"
        }
      ],
      "bom-ref": "urn:uuid:1bf9324b-70fa-50dd-85f5-078151d66678",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22803 affects version 3.2.0 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-40073",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.2.0"
        }
      ],
      "bom-ref": "urn:uuid:059ae049-43b4-53eb-9c5c-4a06b91cd973",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40073 affects version 3.2.0 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-40074",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.2.0"
        }
      ],
      "bom-ref": "urn:uuid:f1321e9f-7053-5778-8175-64ca0980cb3c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40074 affects version 3.2.0 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-66062",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.2.0"
        }
      ],
      "bom-ref": "urn:uuid:2403e1ce-245f-5cbb-a6d1-4772b944a575",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66062 affects version 3.2.0 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-85pr-xr59-r75h",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.2.0"
        }
      ],
      "bom-ref": "urn:uuid:88775665-fed7-5aff-8a09-454408df2127",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-85pr-xr59-r75h is a false positive for @sveltejs/kit 3.2.0."
      }
    },
    {
      "id": "GHSA-866w-xmhq-wj7x",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.2.0"
        }
      ],
      "bom-ref": "urn:uuid:99cf1e0b-9a36-5c83-868b-475493ff4b53",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-866w-xmhq-wj7x affects version 3.2.0 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-88qp-p4qg-rqm6",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.2.0"
        }
      ],
      "bom-ref": "urn:uuid:92bb4597-7788-561c-932b-3994e3bd64d5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-88qp-p4qg-rqm6 affects version 3.2.0 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-fpg4-jhqr-589c",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.2.0"
        }
      ],
      "bom-ref": "urn:uuid:6944bffe-7a0d-570a-b0f2-258486cc27c1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-fpg4-jhqr-589c affects version 3.2.0 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-hgv7-v322-mmgr",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.2.0"
        }
      ],
      "bom-ref": "urn:uuid:4fa5714f-9d35-5704-8d8a-0c975a2510bf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-hgv7-v322-mmgr affects version 3.2.0 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-pvhg-7v4p-f5q9",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.2.0"
        }
      ],
      "bom-ref": "urn:uuid:88c0a85f-d82e-56e4-9aa1-a5f6e5c1e92a",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-pvhg-7v4p-f5q9 is a false positive for @sveltejs/kit 3.2.0."
      }
    },
    {
      "id": "GHSA-vrhm-gvg7-fpcf",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.2.0"
        }
      ],
      "bom-ref": "urn:uuid:048e8883-b443-525e-8f6b-7793ed49f5ba",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-vrhm-gvg7-fpcf affects version 3.2.0 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-wqjv-9729-c5q2",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.2.0"
        }
      ],
      "bom-ref": "urn:uuid:5d634045-6cc9-5497-8272-0882886bdd01",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-wqjv-9729-c5q2 affects version 3.2.0 of @sveltejs/kit."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40sveltejs/kit@3.2.0"
    }
  ]
}