{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:bc069be4-d7c6-5de7-879b-81614d37e72f",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "i18next-http-backend",
      "purl": "pkg:npm/i18next-http-backend@4.0.9",
      "type": "library",
      "bom-ref": "pkg:npm/i18next-http-backend@4.0.9",
      "version": "4.0.9",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-105800",
      "affects": [
        {
          "ref": "pkg:npm/i18next-http-backend@4.0.9"
        }
      ],
      "bom-ref": "urn:uuid:55eda513-312c-5aaf-bb6a-0853ab5edba8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-105800 affects version 4.0.9 of i18next-http-backend."
      }
    },
    {
      "id": "CVE-2026-115730",
      "affects": [
        {
          "ref": "pkg:npm/i18next-http-backend@4.0.9"
        }
      ],
      "bom-ref": "urn:uuid:28a6edbb-552f-57bc-8207-5604b46c3a42",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-115730 affects version 4.0.9 of i18next-http-backend."
      }
    },
    {
      "id": "CVE-2026-118258",
      "affects": [
        {
          "ref": "pkg:npm/i18next-http-backend@4.0.9"
        }
      ],
      "bom-ref": "urn:uuid:4bd89531-123a-5176-9704-16ab4a4352d2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-118258 affects version 4.0.9 of i18next-http-backend."
      }
    },
    {
      "id": "CVE-2026-41691",
      "affects": [
        {
          "ref": "pkg:npm/i18next-http-backend@4.0.9"
        }
      ],
      "bom-ref": "urn:uuid:1caa1e71-ffaa-5ce5-86ac-d3a373de0b73",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41691 affects version 4.0.9 of i18next-http-backend."
      }
    },
    {
      "id": "GHSA-w47m-j727-m843",
      "affects": [
        {
          "ref": "pkg:npm/i18next-http-backend@4.0.9"
        }
      ],
      "bom-ref": "urn:uuid:b81d2e60-8f58-52e2-a2ce-3307c1e79408",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-w47m-j727-m843 is a false positive for i18next-http-backend 4.0.9."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/i18next-http-backend@4.0.9"
    }
  ]
}