{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:6653b7f5-bc4d-5b5e-91eb-c519c98bf846",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "better-auth",
      "purl": "pkg:npm/better-auth@1.7.7",
      "type": "library",
      "bom-ref": "pkg:npm/better-auth@1.7.7",
      "version": "1.7.7",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-56734",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.7"
        }
      ],
      "bom-ref": "urn:uuid:258c5064-8e5f-52e5-8242-a3f368284b21",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56734 affects version 1.7.7 of better-auth."
      }
    },
    {
      "id": "CVE-2025-27143",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.7"
        }
      ],
      "bom-ref": "urn:uuid:f7fd4f58-e984-569f-81df-520bd16ba2fb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27143 affects version 1.7.7 of better-auth."
      }
    },
    {
      "id": "CVE-2025-53535",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.7"
        }
      ],
      "bom-ref": "urn:uuid:440da5ab-8afb-535c-8995-89fa5869ab57",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-53535 affects version 1.7.7 of better-auth."
      }
    },
    {
      "id": "CVE-2025-61928",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.7"
        }
      ],
      "bom-ref": "urn:uuid:7c0997d3-a299-5190-9a97-1d8505cae614",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-61928 affects version 1.7.7 of better-auth."
      }
    },
    {
      "id": "CVE-2025-71401",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.7"
        }
      ],
      "bom-ref": "urn:uuid:8bbf0dfc-191f-56b4-8dc7-30ff94eceb25",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-71401 affects version 1.7.7 of better-auth."
      }
    },
    {
      "id": "CVE-2026-114607",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.7"
        }
      ],
      "bom-ref": "urn:uuid:00412a5e-8c02-566d-8367-7fc767b2c7b5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114607 affects version 1.7.7 of better-auth."
      }
    },
    {
      "id": "CVE-2026-45337",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.7"
        }
      ],
      "bom-ref": "urn:uuid:baf2e0d2-f010-50d5-b884-3f04dafbc04f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45337 affects version 1.7.7 of better-auth."
      }
    },
    {
      "id": "CVE-2026-45364",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.7"
        }
      ],
      "bom-ref": "urn:uuid:14a55144-0e70-5ef9-a78c-4de4f0965206",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45364 affects version 1.7.7 of better-auth."
      }
    },
    {
      "id": "CVE-2026-53512",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.7"
        }
      ],
      "bom-ref": "urn:uuid:ca2807fb-89ae-5729-8c15-ab274b1b4dc6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53512 affects version 1.7.7 of better-auth."
      }
    },
    {
      "id": "CVE-2026-53514",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.7"
        }
      ],
      "bom-ref": "urn:uuid:58cb7aca-c6de-5f30-a6de-f691a8c2ba3c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53514 affects version 1.7.7 of better-auth."
      }
    },
    {
      "id": "CVE-2026-53516",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.7"
        }
      ],
      "bom-ref": "urn:uuid:143e8ab0-e2bd-5fa3-aac6-7169d724ccb7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53516 affects version 1.7.7 of better-auth."
      }
    },
    {
      "id": "CVE-2026-53517",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.7"
        }
      ],
      "bom-ref": "urn:uuid:b81cdcd9-e5a4-5fe7-8b2a-5b5b8361ec1a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53517 affects version 1.7.7 of better-auth."
      }
    },
    {
      "id": "CVE-2026-53518",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.7"
        }
      ],
      "bom-ref": "urn:uuid:34c5d0eb-f2f7-52c5-ba8e-121c189a719f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53518 affects version 1.7.7 of better-auth."
      }
    },
    {
      "id": "GHSA-2vg6-77g8-24mp",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.7"
        }
      ],
      "bom-ref": "urn:uuid:3cc099b1-620a-574a-8c27-13113f24672d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-2vg6-77g8-24mp affects version 1.7.7 of better-auth."
      }
    },
    {
      "id": "GHSA-3q45-2fh7-66cj",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.7"
        }
      ],
      "bom-ref": "urn:uuid:0bf51de4-0163-58b8-b9c1-d322e0fd9744",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-3q45-2fh7-66cj is a false positive for better-auth 1.7.7."
      }
    },
    {
      "id": "GHSA-44jh-23m7-hpcf",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.7"
        }
      ],
      "bom-ref": "urn:uuid:0c2ca770-a783-5540-a9d6-ee173b40a25c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-44jh-23m7-hpcf affects version 1.7.7 of better-auth."
      }
    },
    {
      "id": "GHSA-86j7-9j95-vpqj",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.7"
        }
      ],
      "bom-ref": "urn:uuid:530d1148-46c0-5832-98d3-79074ba77e93",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-86j7-9j95-vpqj affects version 1.7.7 of better-auth."
      }
    },
    {
      "id": "GHSA-9h47-pqcx-hjr4",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.7"
        }
      ],
      "bom-ref": "urn:uuid:6507e0fc-bcf3-5dac-9c25-52ac5b061f31",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-9h47-pqcx-hjr4 affects version 1.7.7 of better-auth."
      }
    },
    {
      "id": "GHSA-9x4v-xfq5-m8x5",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.7"
        }
      ],
      "bom-ref": "urn:uuid:97a66933-47bd-5f4c-a65f-920022749ec0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-9x4v-xfq5-m8x5 affects version 1.7.7 of better-auth."
      }
    },
    {
      "id": "GHSA-q84f-53jg-9ppm",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.7"
        }
      ],
      "bom-ref": "urn:uuid:0720e11a-e30f-5059-ab46-b0898b4ab49e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-q84f-53jg-9ppm affects version 1.7.7 of better-auth."
      }
    },
    {
      "id": "GHSA-qq9h-g4jm-xgf3",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.7"
        }
      ],
      "bom-ref": "urn:uuid:4f836ec6-7bcf-57d4-a39d-6cd3e178a51a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-qq9h-g4jm-xgf3 affects version 1.7.7 of better-auth."
      }
    },
    {
      "id": "GHSA-r4xp-prcw-77qf",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.7"
        }
      ],
      "bom-ref": "urn:uuid:e22011b1-2f23-5184-9072-4d709a9fd794",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-r4xp-prcw-77qf affects version 1.7.7 of better-auth."
      }
    },
    {
      "id": "GHSA-vp58-j275-797x",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.7"
        }
      ],
      "bom-ref": "urn:uuid:7205f0aa-a500-52ff-ad38-1c544c22524e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-vp58-j275-797x affects version 1.7.7 of better-auth."
      }
    },
    {
      "id": "GHSA-wmjr-v86c-m9jj",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.7"
        }
      ],
      "bom-ref": "urn:uuid:118c1c50-7eba-5f82-8a0a-3d1922ae2bed",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-wmjr-v86c-m9jj affects version 1.7.7 of better-auth."
      }
    },
    {
      "id": "GHSA-wxw3-q3m9-c3jr",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.7"
        }
      ],
      "bom-ref": "urn:uuid:e10e69d7-bccb-5c5b-a9ef-3df26c1b292a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-wxw3-q3m9-c3jr affects version 1.7.7 of better-auth."
      }
    },
    {
      "id": "GHSA-x732-6j76-qmhm",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.7"
        }
      ],
      "bom-ref": "urn:uuid:1648dde9-63b0-5d7a-8502-3bb6aeefe87d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-x732-6j76-qmhm affects version 1.7.7 of better-auth."
      }
    },
    {
      "id": "GHSA-xg6x-h9c9-2m83",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.7"
        }
      ],
      "bom-ref": "urn:uuid:6e4d2696-68c8-5075-b747-d784a9abc03f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xg6x-h9c9-2m83 affects version 1.7.7 of better-auth."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/better-auth@1.7.7"
    }
  ]
}