{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:7e03704a-f758-506b-ac2c-97ab8cb3d0ab",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@sveltejs/kit",
      "purl": "pkg:npm/%40sveltejs/kit@3.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/%40sveltejs/kit@3.1.1",
      "version": "3.1.1",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2023-29003",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.1"
        }
      ],
      "bom-ref": "urn:uuid:77131921-9914-5fb2-b9c2-011f90aad0cd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-29003 affects version 3.1.1 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2023-29008",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.1"
        }
      ],
      "bom-ref": "urn:uuid:61a4b5b1-1a83-5812-8995-ab88bf9379db",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-29008 affects version 3.1.1 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2024-23641",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.1"
        }
      ],
      "bom-ref": "urn:uuid:7f504063-af3f-5e9c-9d66-1f634fd3e67a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23641 affects version 3.1.1 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2024-53261",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.1"
        }
      ],
      "bom-ref": "urn:uuid:ffc0bb3b-14c9-5411-b884-d251b7532ba2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-53261 affects version 3.1.1 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2024-53262",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.1"
        }
      ],
      "bom-ref": "urn:uuid:0cea3fad-205a-5c13-bcd9-c4fc8085174e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-53262 affects version 3.1.1 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2025-32388",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.1"
        }
      ],
      "bom-ref": "urn:uuid:256394d7-be40-5333-928b-97935b6aa48e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-32388 affects version 3.1.1 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2025-67647",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.1"
        }
      ],
      "bom-ref": "urn:uuid:004e1cc9-8530-5ab6-b27b-bf6e8e827f5c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67647 affects version 3.1.1 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-114060",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.1"
        }
      ],
      "bom-ref": "urn:uuid:48fb6ca1-2704-592c-a6ce-36fb24adea0b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114060 affects version 3.1.1 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-114061",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.1"
        }
      ],
      "bom-ref": "urn:uuid:430b9965-bdf1-51b1-97ed-5fede374ecb4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114061 affects version 3.1.1 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-22803",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.1"
        }
      ],
      "bom-ref": "urn:uuid:5ed1281c-032c-5275-9850-5d157c5488e9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22803 affects version 3.1.1 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-40073",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.1"
        }
      ],
      "bom-ref": "urn:uuid:3306a6c6-b601-54be-8d9f-2a595765136f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40073 affects version 3.1.1 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-40074",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.1"
        }
      ],
      "bom-ref": "urn:uuid:b1ad38db-8bfe-51c5-9d43-a06237385303",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40074 affects version 3.1.1 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-66062",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.1"
        }
      ],
      "bom-ref": "urn:uuid:8d52252a-f5cc-5d5e-9214-5240c7768589",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66062 affects version 3.1.1 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-85pr-xr59-r75h",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.1"
        }
      ],
      "bom-ref": "urn:uuid:2349c79b-cd8f-5cf3-baa7-def10abca4a3",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-85pr-xr59-r75h is a false positive for @sveltejs/kit 3.1.1."
      }
    },
    {
      "id": "GHSA-866w-xmhq-wj7x",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.1"
        }
      ],
      "bom-ref": "urn:uuid:e5f5fa7f-d33a-5a79-854d-34c7cb5ca116",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-866w-xmhq-wj7x affects version 3.1.1 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-88qp-p4qg-rqm6",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.1"
        }
      ],
      "bom-ref": "urn:uuid:e7b641db-bb55-5a28-9b38-bfea8f93760e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-88qp-p4qg-rqm6 affects version 3.1.1 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-fpg4-jhqr-589c",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.1"
        }
      ],
      "bom-ref": "urn:uuid:a108b636-857d-5f43-acda-dc6e0d7fbbdf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-fpg4-jhqr-589c affects version 3.1.1 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-hgv7-v322-mmgr",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.1"
        }
      ],
      "bom-ref": "urn:uuid:b4e6d98d-f479-5f89-97c7-1dba53bd676b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-hgv7-v322-mmgr affects version 3.1.1 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-pvhg-7v4p-f5q9",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.1"
        }
      ],
      "bom-ref": "urn:uuid:e551306d-2dd2-5a2a-8c81-b6af1e787581",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-pvhg-7v4p-f5q9 is a false positive for @sveltejs/kit 3.1.1."
      }
    },
    {
      "id": "GHSA-vrhm-gvg7-fpcf",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.1"
        }
      ],
      "bom-ref": "urn:uuid:3b5be6fa-6894-563f-888e-5a50c5828ad1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-vrhm-gvg7-fpcf affects version 3.1.1 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-wqjv-9729-c5q2",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.1.1"
        }
      ],
      "bom-ref": "urn:uuid:c8d05890-7816-5982-8ad3-512d24f48d4f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-wqjv-9729-c5q2 affects version 3.1.1 of @sveltejs/kit."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40sveltejs/kit@3.1.1"
    }
  ]
}