{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:0c0fd288-1c2f-5ee2-a685-d6cf9ee987b1",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "core",
      "purl": "pkg:composer/drupal/core@8.9.20-p11+tuxcare",
      "type": "library",
      "group": "drupal",
      "bom-ref": "pkg:composer/drupal/core@8.9.20-p11+tuxcare",
      "version": "8.9.20-p11+tuxcare",
      "pedigree": {
        "ancestors": [
          {
            "name": "core",
            "purl": "pkg:composer/drupal/core@8.9.20",
            "type": "library",
            "group": "drupal",
            "version": "8.9.20"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2022-25270",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:2e99fa95-bb8e-5826-9147-080a1f84cdfd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25270 is fixed in version 8.9.20-p11+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2022-25271",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:6daa3d5f-cfa6-587b-acf6-2272196100be",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25271 is fixed in version 8.9.20-p11+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2022-25273",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:ded9c8c0-8354-5e2b-9ad1-c68ed4d28c86",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25273 is fixed in version 8.9.20-p11+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2022-25275",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:93bb319d-be93-5a45-b864-5d3d73b7a665",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25275 is fixed in version 8.9.20-p11+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2022-25276",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:f5c51191-3951-5e32-aee3-3793eedc67f5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25276 is fixed in version 8.9.20-p11+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2022-25277",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:c672602c-626d-5b03-9e05-2cbbca3fb49f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25277 is fixed in version 8.9.20-p11+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2022-25278",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:88496a74-c424-5ca0-baa9-02f752520836",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25278 is fixed in version 8.9.20-p11+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2023-5256",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:b9d221bb-5928-55f4-9d41-db12c905fe96",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-5256 is fixed in version 8.9.20-p11+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2024-12393",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:76a39c05-1885-5c25-aa5f-979b4fc33e6b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-12393 is fixed in version 8.9.20-p11+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2024-45440",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:ad3cb346-9688-5244-bb8f-636afc346d78",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-45440 is fixed in version 8.9.20-p11+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2024-55634",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:04663ddc-d933-5b9a-a596-59f44e26cbd8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-55634 is fixed in version 8.9.20-p11+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2024-55636",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:eeb76a4e-2590-518a-8c98-745cd6e76e7f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-55636 is fixed in version 8.9.20-p11+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2024-55637",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:7efad3c9-0aac-5297-878e-b91160992f74",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-55637 is fixed in version 8.9.20-p11+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2024-55638",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:d4d2bfec-58d1-52fd-962b-178aba35d03f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-55638 is fixed in version 8.9.20-p11+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-13080",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:afadef2c-0134-5f93-bd48-736e57eb6346",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-13080 is fixed in version 8.9.20-p11+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-13081",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:ce943b88-47fa-5a5d-8559-78cd7c60617e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-13081 is fixed in version 8.9.20-p11+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-13082",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:0b6a7917-7b37-54a0-8b67-4754db830d90",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-13082 is fixed in version 8.9.20-p11+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-13083",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:1872f496-85a1-5e9e-94f0-7f189da46728",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-13083 is fixed in version 8.9.20-p11+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-3057",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:38a18fd7-6b25-580e-8718-251aec3c0877",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-3057 is fixed in version 8.9.20-p11+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-31673",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:f27159c4-8ac8-5e62-ba0c-0d14f337cfc2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31673 is fixed in version 8.9.20-p11+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-31674",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:dcb65a14-a0dc-57aa-ba05-fdc82ac59ff5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31674 is fixed in version 8.9.20-p11+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-31675",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:79be2ec6-da90-53dc-aa67-232193bfd40e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31675 is fixed in version 8.9.20-p11+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2026-108097",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:40ff5b76-c33a-5f4f-8666-2faf5659ef3d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-108097 is fixed in version 8.9.20-p11+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2026-108515",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:7ead1757-1fff-56f7-8c2b-b43552a56db0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-108515 is fixed in version 8.9.20-p11+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2026-6365",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:7f841207-42c3-596a-b78d-523319f60fa5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-6365 is fixed in version 8.9.20-p11+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2026-6366",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:20d0d64e-148f-5cc5-9642-bcec9d1d1b85",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-6366 is fixed in version 8.9.20-p11+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2026-9082",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:dfed023e-ea26-56e4-bfcc-518ff742c157",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-9082 is fixed in version 8.9.20-p11+tuxcare of drupal/core."
      }
    },
    {
      "id": "GHSA-6ccv-8fgf-cjpw",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p11+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:dcf76051-54db-58d5-89cb-0a874db9e9d6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-6ccv-8fgf-cjpw is fixed in version 8.9.20-p11+tuxcare of drupal/core."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:composer/drupal/core@8.9.20-p11+tuxcare"
    }
  ]
}