{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:a058d094-8ef9-55a9-9813-7c7703b4ab93",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "hono",
      "purl": "pkg:npm/hono@4.13.8",
      "type": "library",
      "bom-ref": "pkg:npm/hono@4.13.8",
      "version": "4.13.8",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2023-50710",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:3b31e128-eac2-55b5-aa68-b9c38df27f4b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-50710 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2024-32869",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:09881795-6839-54e1-a24e-889b78bf8fbe",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-32869 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2024-43787",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:5353849f-60b9-59ec-8cb5-ab583f151cec",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-43787 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2024-48913",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:1d6cec48-46ce-553a-a079-3e6268c330c2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-48913 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2025-58362",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:1278d0c1-1cfa-5859-9717-e47ffcdad313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58362 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2025-59139",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:1400ebbc-d865-54bf-95b6-a801c49bffa8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59139 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2025-62610",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:4fdc515b-85ed-58c0-b8af-fa75a7edea9f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-62610 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2025-71381",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:05287f1b-96b6-575e-9675-da5d352447eb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-71381 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-111757",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:d70ab1d0-8a7b-5bed-b887-94830384c5d2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-111757 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-22817",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:c3a751bd-0d36-5a07-bb45-b575ccbe97ca",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22817 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-22818",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:3547c1e0-fb64-5eb0-9c40-f01ebf869223",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22818 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-24398",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:4ac8e86e-f98c-5e3c-9113-d68ccbc3165a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24398 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-24472",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:f8f5e9d9-6451-52b5-9534-dc08f24d4c10",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24472 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-24473",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:b8da2249-74ae-5a4c-bdaf-83354a709224",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24473 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-24771",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:59b57c0a-6c56-554d-873c-c88f10d59506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24771 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-27700",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:c805c7e9-9fbe-549c-bd2c-3a9137246c37",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-27700 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-29045",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:7d153346-d9fc-5e13-b621-81f3dc0ad778",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-29045 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-29085",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:ebfd9c09-cf1f-596e-b95e-ceac09fb1cd2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-29085 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-29086",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:2930a5b4-66d5-5425-97c1-542a4b2358df",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-29086 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-39407",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:4a718961-aecb-575c-8b60-94ac08f0fbb8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-39407 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-39408",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:222bcbb4-7512-5af6-bfb0-d3b3d28364aa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-39408 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-39409",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:1dd2e565-5e07-5a80-9ec7-76460869410d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-39409 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-39410",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:08de27b4-14d6-572b-8fa8-e3389c5daae4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-39410 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-44455",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:a603bf86-1b34-55f1-a6b7-3e1896c2ded9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44455 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-44456",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:aa38519f-a425-556e-8c14-cd555812b351",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44456 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-44457",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:80d9584b-61c5-5675-adff-8eaf890c1e94",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44457 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-44458",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:f81c61c0-c2c9-50d3-8d51-daaac0222ad2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44458 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-44459",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:6e1cf4f9-038a-51e0-9cb7-4d648f2ccf39",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44459 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-47673",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:bddff3fa-5ed5-5993-a606-cc6b3f24dd49",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47673 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-47674",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:120c56b7-899a-5089-9721-bea665cf1e05",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47674 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-47675",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:eb33027b-7e40-5a78-ae70-16692c69c015",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47675 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-47676",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:466f4f85-5bad-58c2-a6f1-fbf1768b337b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47676 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-54286",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:cf5040d3-1fa0-5009-9354-57daa09e5c4e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54286 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-54287",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:003923d6-941e-5ee9-ba8a-a6e815fb4a9a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54287 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-54288",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:ed98fa42-5877-5da2-a950-ee1153fc00c1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54288 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-54289",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:d4f18487-30f2-5e8c-8a0b-4fb3b09b085d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54289 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-54290",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:6e915597-f4f1-5a2c-ad2a-5bb85d42cb4c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54290 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-56761",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:68777ecc-81fa-5079-99ed-c55bda453be3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56761 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-56762",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:2b379b5c-a6bf-5820-af3d-bb70cde9d712",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56762 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-56763",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:a4f1b17e-7406-53a9-a307-55989b20d52a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56763 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-59895",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:4f247880-0980-5da0-87c0-f6f60a12d20a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59895 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-59896",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:00329ef1-9b99-5fcd-9c43-98ef7acfed41",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59896 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-59897",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:5b9482ab-ddd0-5c1d-8075-1554323e2b32",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59897 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-69207",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:8749e1d1-5612-5af7-ae43-e42f209352f3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69207 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-71848",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:b2b01900-4a5d-5b87-8b96-610c2e256cab",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-71848 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-71849",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:773f400f-83ba-504b-9625-4104cb90aaa5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-71849 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-71850",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:9e93a62c-3081-59bc-a7de-393f199db648",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-71850 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-84363",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:c4992a23-7436-5040-a762-bc4584b85f50",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-84363 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-84364",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:caac513c-885b-5ccc-aefd-399d96296e1d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-84364 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-84365",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:b2aa1c77-d4e6-5ad3-a894-c22c9db4f362",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-84365 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "CVE-2026-93981",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:e47e765e-b708-52f6-85f1-0f91b6c9be57",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-93981 affects version 4.13.8 of hono."
      }
    },
    {
      "id": "GHSA-3wcj-gjvf-fvch",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:3ff170fe-19d5-500e-8a0b-6d4de0a1d6fe",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-3wcj-gjvf-fvch is a false positive for hono 4.13.8."
      }
    },
    {
      "id": "GHSA-55cm-p4ww-685g",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:057e2a7a-f16c-58a1-a58e-3d85065dc441",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-55cm-p4ww-685g is a false positive for hono 4.13.8."
      }
    },
    {
      "id": "GHSA-6623-4q32-82v8",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:1f9a682f-3a9e-5883-a8ca-281a970cdcb4",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-6623-4q32-82v8 is a false positive for hono 4.13.8."
      }
    },
    {
      "id": "GHSA-cw3j-28qq-x3xh",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:2a6dc21b-a02f-5b28-9dc4-704392bd464f",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-cw3j-28qq-x3xh is a false positive for hono 4.13.8."
      }
    },
    {
      "id": "GHSA-gq3j-xvxp-8hrf",
      "affects": [
        {
          "ref": "pkg:npm/hono@4.13.8"
        }
      ],
      "bom-ref": "urn:uuid:13b5e924-ef88-5687-b303-bde969705adc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-gq3j-xvxp-8hrf affects version 4.13.8 of hono."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/hono@4.13.8"
    }
  ]
}