{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:6d015870-9cf0-52b7-8645-ffce098c7427",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@sveltejs/kit",
      "purl": "pkg:npm/%40sveltejs/kit@3.0.0-next.29",
      "type": "library",
      "bom-ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.29",
      "version": "3.0.0-next.29",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2023-29003",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.29"
        }
      ],
      "bom-ref": "urn:uuid:9b891abc-ae6c-5b4f-8edf-ea1b59388ddd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-29003 affects version 3.0.0-next.29 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2023-29008",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.29"
        }
      ],
      "bom-ref": "urn:uuid:85a3667a-ecd2-51bd-98c0-02a4aa97f65b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-29008 affects version 3.0.0-next.29 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2024-23641",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.29"
        }
      ],
      "bom-ref": "urn:uuid:91ea8999-9043-5068-ac81-33eb882dc1e3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23641 affects version 3.0.0-next.29 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2024-53261",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.29"
        }
      ],
      "bom-ref": "urn:uuid:cbbb187a-b7d9-58dc-9114-ef4aba8a576e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-53261 affects version 3.0.0-next.29 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2024-53262",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.29"
        }
      ],
      "bom-ref": "urn:uuid:26b5a8a8-c4ef-5cfa-a007-1d9667d5b6f9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-53262 affects version 3.0.0-next.29 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2025-32388",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.29"
        }
      ],
      "bom-ref": "urn:uuid:65475aba-ccb4-5875-b30b-119831f7565d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-32388 affects version 3.0.0-next.29 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2025-67647",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.29"
        }
      ],
      "bom-ref": "urn:uuid:fd34e190-dee6-57e5-98f1-494eadcb35c2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67647 affects version 3.0.0-next.29 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-114060",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.29"
        }
      ],
      "bom-ref": "urn:uuid:1f7c202c-a905-5b92-9422-95d64d7870c0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114060 affects version 3.0.0-next.29 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-114061",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.29"
        }
      ],
      "bom-ref": "urn:uuid:3609802c-d2a0-51a1-a9f8-ae78ce49b71d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114061 affects version 3.0.0-next.29 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-114062",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.29"
        }
      ],
      "bom-ref": "urn:uuid:4dabef26-69a6-52ef-a063-5c080129d090",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114062 affects version 3.0.0-next.29 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-114063",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.29"
        }
      ],
      "bom-ref": "urn:uuid:1558fcd0-89e1-51b7-9caa-17bdb5c43319",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114063 affects version 3.0.0-next.29 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-22803",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.29"
        }
      ],
      "bom-ref": "urn:uuid:65da5085-689b-59ef-9a6b-318f7469e8ac",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22803 affects version 3.0.0-next.29 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-40073",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.29"
        }
      ],
      "bom-ref": "urn:uuid:b012b139-1c2f-5db0-888b-33d1eb908741",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40073 affects version 3.0.0-next.29 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-40074",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.29"
        }
      ],
      "bom-ref": "urn:uuid:cc3bf708-3805-5743-a651-22ac7868de4c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40074 affects version 3.0.0-next.29 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-66062",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.29"
        }
      ],
      "bom-ref": "urn:uuid:f152d86d-c0c2-5369-97c7-802b648eb763",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66062 affects version 3.0.0-next.29 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-85pr-xr59-r75h",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.29"
        }
      ],
      "bom-ref": "urn:uuid:79148b23-26eb-5954-b2d6-2930fd95e18a",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-85pr-xr59-r75h is a false positive for @sveltejs/kit 3.0.0-next.29."
      }
    },
    {
      "id": "GHSA-866w-xmhq-wj7x",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.29"
        }
      ],
      "bom-ref": "urn:uuid:603086e5-8e97-532e-bfcf-7d4f9e2d74ea",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-866w-xmhq-wj7x affects version 3.0.0-next.29 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-88qp-p4qg-rqm6",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.29"
        }
      ],
      "bom-ref": "urn:uuid:eea7cfda-0319-5bdc-90bc-06a2c2b32e1e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-88qp-p4qg-rqm6 affects version 3.0.0-next.29 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-fpg4-jhqr-589c",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.29"
        }
      ],
      "bom-ref": "urn:uuid:9bfd8b9d-2a9b-5d67-9876-ade8be7b020f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-fpg4-jhqr-589c affects version 3.0.0-next.29 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-hgv7-v322-mmgr",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.29"
        }
      ],
      "bom-ref": "urn:uuid:a0168cd4-6396-57c0-9622-eca83a7c5792",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-hgv7-v322-mmgr affects version 3.0.0-next.29 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-pvhg-7v4p-f5q9",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.29"
        }
      ],
      "bom-ref": "urn:uuid:955a3436-0006-543b-8dfd-51129ff2c47d",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-pvhg-7v4p-f5q9 is a false positive for @sveltejs/kit 3.0.0-next.29."
      }
    },
    {
      "id": "GHSA-vrhm-gvg7-fpcf",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.29"
        }
      ],
      "bom-ref": "urn:uuid:6bf96c60-4929-5c77-b6f9-a41e594bcb6f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-vrhm-gvg7-fpcf affects version 3.0.0-next.29 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-wqjv-9729-c5q2",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.29"
        }
      ],
      "bom-ref": "urn:uuid:f586b33e-ae7e-5baf-b8a8-82a9c3888457",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-wqjv-9729-c5q2 affects version 3.0.0-next.29 of @sveltejs/kit."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.29"
    }
  ]
}