{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:93e93199-e474-5008-95ae-f44b96f7cb6b",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "dompurify",
      "purl": "pkg:npm/dompurify@3.4.5-tuxcare.6",
      "type": "library",
      "bom-ref": "pkg:npm/dompurify@3.4.5-tuxcare.6",
      "version": "3.4.5-tuxcare.6",
      "pedigree": {
        "ancestors": [
          {
            "name": "dompurify",
            "purl": "pkg:npm/dompurify@3.4.5",
            "type": "library",
            "version": "3.4.5"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-109345",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:07606218-f175-5f40-bed2-cc496bc60e04",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-109345 is fixed in version 3.4.5-tuxcare.6 of dompurify."
      }
    },
    {
      "id": "CVE-2026-116802",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:954b9d0a-6970-5306-8bf8-c859dcd4f9cc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-116802 affects version 3.4.5-tuxcare.6 of dompurify."
      }
    },
    {
      "id": "CVE-2026-116803",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:aef48a74-485f-55bd-8885-a081b7f4234b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-116803 is fixed in version 3.4.5-tuxcare.6 of dompurify."
      }
    },
    {
      "id": "CVE-2026-116804",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:20f29eb0-d54b-5aa8-85b7-4ceb73837c70",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-116804 is fixed in version 3.4.5-tuxcare.6 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49458",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:fbe80969-c9eb-502c-a255-ad80b72600b3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49458 is fixed in version 3.4.5-tuxcare.6 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49459",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:3b58416a-2a0e-5326-a95a-728a06677523",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49459 is fixed in version 3.4.5-tuxcare.6 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49978",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:cf35b87b-cb81-5527-a6cd-6722b15f1bdb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49978 is fixed in version 3.4.5-tuxcare.6 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65898",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:21a29b18-3700-5fb2-a5cd-173d855cea1e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65898 is fixed in version 3.4.5-tuxcare.6 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65899",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:09ba6c18-b18b-5677-a249-a447fdac4fda",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65899 is fixed in version 3.4.5-tuxcare.6 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65900",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:1fdab125-83e1-5ab9-a482-651b60682965",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65900 is fixed in version 3.4.5-tuxcare.6 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65901",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:7aebfe4f-1a36-5b8d-ab74-604744b76e76",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65901 is fixed in version 3.4.5-tuxcare.6 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65902",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:5c5b2747-5e47-595f-8257-1296ce1f6771",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65902 is fixed in version 3.4.5-tuxcare.6 of dompurify."
      }
    },
    {
      "id": "CVE-2026-66010",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:d32be5fa-2e6d-5af5-b0c5-95e84850d631",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-66010 is fixed in version 3.4.5-tuxcare.6 of dompurify."
      }
    },
    {
      "id": "CVE-2026-75838",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:3cf97369-e58b-5767-bd4d-4e042203ebc9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-75838 is fixed in version 3.4.5-tuxcare.6 of dompurify."
      }
    },
    {
      "id": "GHSA-55q2-fjhq-7xh7",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:d3ad1d83-ea24-5adf-9d33-26d25d5ff4ab",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-55q2-fjhq-7xh7 affects version 3.4.5-tuxcare.6 of dompurify."
      }
    },
    {
      "id": "GHSA-6688-9rhm-gjv2",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:bee0201c-fd7e-5c10-aa17-28afd341c27d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-6688-9rhm-gjv2 affects version 3.4.5-tuxcare.6 of dompurify."
      }
    },
    {
      "id": "GHSA-c6gr-qvv4-5v3f",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:406cd01e-16c2-5c1f-a778-6986724897e9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-c6gr-qvv4-5v3f is fixed in version 3.4.5-tuxcare.6 of dompurify."
      }
    },
    {
      "id": "GHSA-cg2g-xh64-v4q7",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:9621eaaa-cef3-5dfc-825d-2b08454b436f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-cg2g-xh64-v4q7 is fixed in version 3.4.5-tuxcare.6 of dompurify."
      }
    },
    {
      "id": "GHSA-cmwh-pvxp-8882",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:694568f1-1378-5d91-b706-042ede61fc25",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-cmwh-pvxp-8882 is fixed in version 3.4.5-tuxcare.6 of dompurify."
      }
    },
    {
      "id": "GHSA-jxrp-r7gx-q4j8",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:ae830ae0-9a83-5b89-adbb-8d859614328b",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-jxrp-r7gx-q4j8 is a false positive for dompurify 3.4.5-tuxcare.6."
      }
    },
    {
      "id": "GHSA-mrv2-3pqr-j5jr",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:50bea1ce-359b-520e-bb25-b7944f714a7f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-mrv2-3pqr-j5jr is fixed in version 3.4.5-tuxcare.6 of dompurify."
      }
    },
    {
      "id": "GHSA-r47g-fvhr-h676",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:955f3622-26e3-514e-9c43-c814034b8c37",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-r47g-fvhr-h676 is fixed in version 3.4.5-tuxcare.6 of dompurify."
      }
    },
    {
      "id": "GHSA-vxr8-fq34-vvx9",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:8cd9e0b7-bbae-5a66-802f-225d8b88b8b0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-vxr8-fq34-vvx9 is fixed in version 3.4.5-tuxcare.6 of dompurify."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6"
    }
  ]
}