{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:291ad6e7-2ddd-5df2-ad7b-de611a558122",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@sveltejs/kit",
      "purl": "pkg:npm/%40sveltejs/kit@3.0.0-next.30",
      "type": "library",
      "bom-ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.30",
      "version": "3.0.0-next.30",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2023-29003",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.30"
        }
      ],
      "bom-ref": "urn:uuid:276a0f06-a270-53c7-8105-a910e7d61036",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-29003 affects version 3.0.0-next.30 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2023-29008",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.30"
        }
      ],
      "bom-ref": "urn:uuid:a4d18a5b-6661-579f-8fb8-527c91f4c52b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-29008 affects version 3.0.0-next.30 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2024-23641",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.30"
        }
      ],
      "bom-ref": "urn:uuid:f8560bd4-186c-557c-9bec-762f378bcef6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23641 affects version 3.0.0-next.30 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2024-53261",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.30"
        }
      ],
      "bom-ref": "urn:uuid:fced352f-a890-55a0-abf8-635f2778dd60",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-53261 affects version 3.0.0-next.30 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2024-53262",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.30"
        }
      ],
      "bom-ref": "urn:uuid:bd288de8-ef1e-5f4b-b5c5-392de5768311",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-53262 affects version 3.0.0-next.30 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2025-32388",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.30"
        }
      ],
      "bom-ref": "urn:uuid:aefa4e9b-cd23-50cc-98b3-8057ba59453f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-32388 affects version 3.0.0-next.30 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2025-67647",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.30"
        }
      ],
      "bom-ref": "urn:uuid:0a7de9bb-7fd1-595d-aeab-9cf15466e1bc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67647 affects version 3.0.0-next.30 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-114060",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.30"
        }
      ],
      "bom-ref": "urn:uuid:15bc2bbe-305c-5a2b-898a-99690ecc117e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114060 affects version 3.0.0-next.30 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-114061",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.30"
        }
      ],
      "bom-ref": "urn:uuid:74b3e79a-4bed-544c-97e6-3978da2c3608",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114061 affects version 3.0.0-next.30 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-114062",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.30"
        }
      ],
      "bom-ref": "urn:uuid:28da7b70-1360-5894-af22-b1c23b23dd49",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114062 affects version 3.0.0-next.30 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-114063",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.30"
        }
      ],
      "bom-ref": "urn:uuid:0182d669-ac7b-5902-8775-ab4d298a5470",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114063 affects version 3.0.0-next.30 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-22803",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.30"
        }
      ],
      "bom-ref": "urn:uuid:ad5e373b-dcaa-5062-bb20-4f1829bd71f0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22803 affects version 3.0.0-next.30 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-40073",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.30"
        }
      ],
      "bom-ref": "urn:uuid:8f1bb8c7-5564-5757-80d4-5c0110270724",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40073 affects version 3.0.0-next.30 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-40074",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.30"
        }
      ],
      "bom-ref": "urn:uuid:61d7cbfc-a87b-5a96-8ad4-1e69555eb51d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40074 affects version 3.0.0-next.30 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-66062",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.30"
        }
      ],
      "bom-ref": "urn:uuid:6e6df58d-23e6-5083-a8ef-98ce95434011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66062 affects version 3.0.0-next.30 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-85pr-xr59-r75h",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.30"
        }
      ],
      "bom-ref": "urn:uuid:4ef6c0b1-bc19-5986-98f7-b3ec40e31efa",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-85pr-xr59-r75h is a false positive for @sveltejs/kit 3.0.0-next.30."
      }
    },
    {
      "id": "GHSA-866w-xmhq-wj7x",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.30"
        }
      ],
      "bom-ref": "urn:uuid:d05140ca-518b-55c4-9f3e-ea2755487eba",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-866w-xmhq-wj7x affects version 3.0.0-next.30 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-88qp-p4qg-rqm6",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.30"
        }
      ],
      "bom-ref": "urn:uuid:7121cdae-0059-543d-99c8-3b6f99d4ea78",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-88qp-p4qg-rqm6 affects version 3.0.0-next.30 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-fpg4-jhqr-589c",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.30"
        }
      ],
      "bom-ref": "urn:uuid:208dfd50-40fb-5f45-8cf7-d9fb8edf1d99",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-fpg4-jhqr-589c affects version 3.0.0-next.30 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-hgv7-v322-mmgr",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.30"
        }
      ],
      "bom-ref": "urn:uuid:3afce700-be1e-5133-8f3b-9a3d10eb294d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-hgv7-v322-mmgr affects version 3.0.0-next.30 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-pvhg-7v4p-f5q9",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.30"
        }
      ],
      "bom-ref": "urn:uuid:c1349f43-c233-53b1-a074-24ffcc98668a",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-pvhg-7v4p-f5q9 is a false positive for @sveltejs/kit 3.0.0-next.30."
      }
    },
    {
      "id": "GHSA-vrhm-gvg7-fpcf",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.30"
        }
      ],
      "bom-ref": "urn:uuid:1aa70130-dc53-5960-b3ca-1c94e7bc523b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-vrhm-gvg7-fpcf affects version 3.0.0-next.30 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-wqjv-9729-c5q2",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.30"
        }
      ],
      "bom-ref": "urn:uuid:e411bacf-ef48-5314-96c8-6d8d3825763b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-wqjv-9729-c5q2 affects version 3.0.0-next.30 of @sveltejs/kit."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40sveltejs/kit@3.0.0-next.30"
    }
  ]
}