{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:bbb44aa0-861a-5eff-a1f2-405690b1217d",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@sveltejs/kit",
      "purl": "pkg:npm/%40sveltejs/kit@3.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/%40sveltejs/kit@3.1.0",
      "version": "3.1.0",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2023-29003",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.0"
        }
      ],
      "bom-ref": "urn:uuid:462023c2-ee9b-518d-975f-46def895cdfb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-29003 affects version 3.1.0 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2023-29008",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.0"
        }
      ],
      "bom-ref": "urn:uuid:c22083da-dbe1-5dc5-96aa-f0c99b087511",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-29008 affects version 3.1.0 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2024-23641",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.0"
        }
      ],
      "bom-ref": "urn:uuid:2f4199b9-105d-5740-b1c2-a94cb17239af",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23641 affects version 3.1.0 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2024-53261",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.0"
        }
      ],
      "bom-ref": "urn:uuid:191650b8-809c-5616-8ccd-4926ee4fe4d4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-53261 affects version 3.1.0 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2024-53262",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.0"
        }
      ],
      "bom-ref": "urn:uuid:96d0d472-32db-56eb-a23c-18b7e8509a7c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-53262 affects version 3.1.0 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2025-32388",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.0"
        }
      ],
      "bom-ref": "urn:uuid:91315268-32af-56e4-b739-0b56a62ae894",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-32388 affects version 3.1.0 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2025-67647",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.0"
        }
      ],
      "bom-ref": "urn:uuid:83f95e1d-7186-5d76-95a5-96856700d2c3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67647 affects version 3.1.0 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-114060",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.0"
        }
      ],
      "bom-ref": "urn:uuid:9160ef39-6424-5a38-88ae-6e225609fe5c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114060 affects version 3.1.0 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-114061",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.0"
        }
      ],
      "bom-ref": "urn:uuid:d2c3a369-ac4a-5ef3-9c47-22bf6aea0c7f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114061 affects version 3.1.0 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-22803",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.0"
        }
      ],
      "bom-ref": "urn:uuid:435556e2-c332-5c69-994c-d0dbeb660266",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22803 affects version 3.1.0 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-40073",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.0"
        }
      ],
      "bom-ref": "urn:uuid:be98779f-28db-5fd3-98d5-d7b90f609bec",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40073 affects version 3.1.0 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-40074",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.0"
        }
      ],
      "bom-ref": "urn:uuid:c4dc154a-1975-593d-a9e1-ff8b81a4034b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40074 affects version 3.1.0 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-66062",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.0"
        }
      ],
      "bom-ref": "urn:uuid:07275127-46c2-5e91-a972-2a1e0d4e8608",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66062 affects version 3.1.0 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-85pr-xr59-r75h",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.0"
        }
      ],
      "bom-ref": "urn:uuid:365d9fc0-cbd4-5ae2-9091-3cbbd8b440c9",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-85pr-xr59-r75h is a false positive for @sveltejs/kit 3.1.0."
      }
    },
    {
      "id": "GHSA-866w-xmhq-wj7x",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.0"
        }
      ],
      "bom-ref": "urn:uuid:405f9cb3-26e2-5e83-9b0d-287ae7cb3fd9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-866w-xmhq-wj7x affects version 3.1.0 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-88qp-p4qg-rqm6",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.0"
        }
      ],
      "bom-ref": "urn:uuid:dea6814c-4dd0-5f76-a13d-d7c179be76ee",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-88qp-p4qg-rqm6 affects version 3.1.0 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-fpg4-jhqr-589c",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.0"
        }
      ],
      "bom-ref": "urn:uuid:82bfa8f1-3c64-51d4-99ec-82b255fd5fbe",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-fpg4-jhqr-589c affects version 3.1.0 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-hgv7-v322-mmgr",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.0"
        }
      ],
      "bom-ref": "urn:uuid:14a538e9-bbb0-5508-9ddb-5a8cfbc6c377",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-hgv7-v322-mmgr affects version 3.1.0 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-pvhg-7v4p-f5q9",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.0"
        }
      ],
      "bom-ref": "urn:uuid:4b7dcf83-c153-50c7-96c3-b8a8b1c2f2ee",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-pvhg-7v4p-f5q9 is a false positive for @sveltejs/kit 3.1.0."
      }
    },
    {
      "id": "GHSA-vrhm-gvg7-fpcf",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.0"
        }
      ],
      "bom-ref": "urn:uuid:dcb17a2f-38e2-551f-8abb-977726a98b11",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-vrhm-gvg7-fpcf affects version 3.1.0 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-wqjv-9729-c5q2",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.0"
        }
      ],
      "bom-ref": "urn:uuid:db448222-9329-5331-834b-3b9c0108610a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-wqjv-9729-c5q2 affects version 3.1.0 of @sveltejs/kit."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40sveltejs/kit@3.1.0"
    }
  ]
}