{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:d1139469-1fce-5c01-a94f-91bf08075fe4",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "better-auth",
      "purl": "pkg:npm/better-auth@1.7.4",
      "type": "library",
      "bom-ref": "pkg:npm/better-auth@1.7.4",
      "version": "1.7.4",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-56734",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.4"
        }
      ],
      "bom-ref": "urn:uuid:98be4925-3478-5e2f-b6e5-157995884dfe",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56734 affects version 1.7.4 of better-auth."
      }
    },
    {
      "id": "CVE-2025-27143",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.4"
        }
      ],
      "bom-ref": "urn:uuid:dd7ed974-9cd0-5258-85bd-ebd5e51f592c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27143 affects version 1.7.4 of better-auth."
      }
    },
    {
      "id": "CVE-2025-53535",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.4"
        }
      ],
      "bom-ref": "urn:uuid:157c3e64-5a50-5ceb-afc0-7e2a1e6fe0c9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-53535 affects version 1.7.4 of better-auth."
      }
    },
    {
      "id": "CVE-2025-61928",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.4"
        }
      ],
      "bom-ref": "urn:uuid:e552c153-73ce-5ea7-8175-9f478f160a90",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-61928 affects version 1.7.4 of better-auth."
      }
    },
    {
      "id": "CVE-2025-71401",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.4"
        }
      ],
      "bom-ref": "urn:uuid:30fba265-7bd8-5c39-86df-af02ecde3f14",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-71401 affects version 1.7.4 of better-auth."
      }
    },
    {
      "id": "CVE-2026-110861",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.4"
        }
      ],
      "bom-ref": "urn:uuid:25ff3be6-6576-57b3-bedb-65680013d10f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-110861 affects version 1.7.4 of better-auth."
      }
    },
    {
      "id": "CVE-2026-110862",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.4"
        }
      ],
      "bom-ref": "urn:uuid:d09626db-ff48-57a4-a635-193401530704",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-110862 affects version 1.7.4 of better-auth."
      }
    },
    {
      "id": "CVE-2026-110864",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.4"
        }
      ],
      "bom-ref": "urn:uuid:37ac759b-a693-5527-b565-55420012314f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-110864 affects version 1.7.4 of better-auth."
      }
    },
    {
      "id": "CVE-2026-114607",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.4"
        }
      ],
      "bom-ref": "urn:uuid:f0d1bd8b-1bca-5f37-bc37-9dd4e21a83d7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114607 affects version 1.7.4 of better-auth."
      }
    },
    {
      "id": "CVE-2026-45337",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.4"
        }
      ],
      "bom-ref": "urn:uuid:d76b89cc-c20f-548e-9fce-fe641890ef05",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45337 affects version 1.7.4 of better-auth."
      }
    },
    {
      "id": "CVE-2026-45364",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.4"
        }
      ],
      "bom-ref": "urn:uuid:fec2beb7-1342-5a80-bec6-657767c38f7a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45364 affects version 1.7.4 of better-auth."
      }
    },
    {
      "id": "CVE-2026-53512",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.4"
        }
      ],
      "bom-ref": "urn:uuid:a79bc047-c6fb-5e4a-bdde-a0a6bcd0a489",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53512 affects version 1.7.4 of better-auth."
      }
    },
    {
      "id": "CVE-2026-53514",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.4"
        }
      ],
      "bom-ref": "urn:uuid:878d6585-f714-57f9-91ee-cb8156ab4b7c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53514 affects version 1.7.4 of better-auth."
      }
    },
    {
      "id": "CVE-2026-53516",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.4"
        }
      ],
      "bom-ref": "urn:uuid:a0f7650d-29a5-5381-9fb9-44491837f771",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53516 affects version 1.7.4 of better-auth."
      }
    },
    {
      "id": "CVE-2026-53517",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.4"
        }
      ],
      "bom-ref": "urn:uuid:ec124f5a-97ad-571f-9d3c-20f8160ced0a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53517 affects version 1.7.4 of better-auth."
      }
    },
    {
      "id": "CVE-2026-53518",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.4"
        }
      ],
      "bom-ref": "urn:uuid:77893231-049b-5dbd-adf5-9b6d59f86552",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53518 affects version 1.7.4 of better-auth."
      }
    },
    {
      "id": "GHSA-2vg6-77g8-24mp",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.4"
        }
      ],
      "bom-ref": "urn:uuid:ec27cfe4-5fe8-5184-9828-b1b2eb145980",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-2vg6-77g8-24mp affects version 1.7.4 of better-auth."
      }
    },
    {
      "id": "GHSA-3q45-2fh7-66cj",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.4"
        }
      ],
      "bom-ref": "urn:uuid:0308a21d-de57-5a1b-ae19-fc95e1328b6a",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-3q45-2fh7-66cj is a false positive for better-auth 1.7.4."
      }
    },
    {
      "id": "GHSA-44jh-23m7-hpcf",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.4"
        }
      ],
      "bom-ref": "urn:uuid:987bec0d-b770-50b2-b66d-1236ec37b88b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-44jh-23m7-hpcf affects version 1.7.4 of better-auth."
      }
    },
    {
      "id": "GHSA-86j7-9j95-vpqj",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.4"
        }
      ],
      "bom-ref": "urn:uuid:0248af10-5753-5ac8-b1bf-70b9082b4756",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-86j7-9j95-vpqj affects version 1.7.4 of better-auth."
      }
    },
    {
      "id": "GHSA-9h47-pqcx-hjr4",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.4"
        }
      ],
      "bom-ref": "urn:uuid:12277e29-933d-591a-9d26-4a768041b09e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-9h47-pqcx-hjr4 affects version 1.7.4 of better-auth."
      }
    },
    {
      "id": "GHSA-9x4v-xfq5-m8x5",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.4"
        }
      ],
      "bom-ref": "urn:uuid:9efb0e7f-9f40-5fc8-b310-6ffcc329a0ce",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-9x4v-xfq5-m8x5 affects version 1.7.4 of better-auth."
      }
    },
    {
      "id": "GHSA-q84f-53jg-9ppm",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.4"
        }
      ],
      "bom-ref": "urn:uuid:5cfea28f-928d-57b8-90e6-689b74770ef8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-q84f-53jg-9ppm affects version 1.7.4 of better-auth."
      }
    },
    {
      "id": "GHSA-qq9h-g4jm-xgf3",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.4"
        }
      ],
      "bom-ref": "urn:uuid:03b2f515-6e5c-5e59-adad-27d15d7c971d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-qq9h-g4jm-xgf3 affects version 1.7.4 of better-auth."
      }
    },
    {
      "id": "GHSA-r4xp-prcw-77qf",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.4"
        }
      ],
      "bom-ref": "urn:uuid:52341cb5-e885-504b-97c0-ac359dba4357",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-r4xp-prcw-77qf affects version 1.7.4 of better-auth."
      }
    },
    {
      "id": "GHSA-vp58-j275-797x",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.4"
        }
      ],
      "bom-ref": "urn:uuid:bd79fbbd-6a63-5ac2-8e85-cd011cb1badc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-vp58-j275-797x affects version 1.7.4 of better-auth."
      }
    },
    {
      "id": "GHSA-wmjr-v86c-m9jj",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.4"
        }
      ],
      "bom-ref": "urn:uuid:66c7c702-7bf5-5979-bcdf-ee04cc56abed",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-wmjr-v86c-m9jj affects version 1.7.4 of better-auth."
      }
    },
    {
      "id": "GHSA-wxw3-q3m9-c3jr",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.4"
        }
      ],
      "bom-ref": "urn:uuid:c81b6e56-8087-5551-8426-285127ffa679",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-wxw3-q3m9-c3jr affects version 1.7.4 of better-auth."
      }
    },
    {
      "id": "GHSA-x732-6j76-qmhm",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.4"
        }
      ],
      "bom-ref": "urn:uuid:be93b2a3-e15e-543a-95ab-cd92056e9198",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-x732-6j76-qmhm affects version 1.7.4 of better-auth."
      }
    },
    {
      "id": "GHSA-xg6x-h9c9-2m83",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.4"
        }
      ],
      "bom-ref": "urn:uuid:0900b980-d843-5d5d-a9e7-d924b3c0be02",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xg6x-h9c9-2m83 affects version 1.7.4 of better-auth."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/better-auth@1.7.4"
    }
  ]
}