{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:151ed972-17d7-5a17-84c5-8369c02c1040",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "dompurify",
      "purl": "pkg:npm/dompurify@3.1.2-tuxcare.5",
      "type": "library",
      "bom-ref": "pkg:npm/dompurify@3.1.2-tuxcare.5",
      "version": "3.1.2-tuxcare.5",
      "pedigree": {
        "ancestors": [
          {
            "name": "dompurify",
            "purl": "pkg:npm/dompurify@3.1.2",
            "type": "library",
            "version": "3.1.2"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-45801",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.2-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:f05fce56-1a51-5a5e-827d-d7197ff2e865",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-45801 is fixed in version 3.1.2-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2024-47875",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.2-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:77573587-abdd-5966-ac7d-cf9689cc381b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47875 is fixed in version 3.1.2-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2025-26791",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.2-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:5733641b-2d9b-56fa-a55e-60485ef4c35c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-26791 is fixed in version 3.1.2-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-116802",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.2-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:9c52ff0b-e8fc-587d-af93-1c64f7b2b6ea",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-116802 affects version 3.1.2-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-116803",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.2-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:10c6082a-c393-520d-b529-902872e3d27d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-116803 is fixed in version 3.1.2-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41238",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.2-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:955968c6-8e3b-5215-ac0c-283e59983fa6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41238 is fixed in version 3.1.2-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41239",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.2-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:1b9059a9-ea52-5589-a12c-7952f8db6367",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41239 is fixed in version 3.1.2-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41240",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.2-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:ba095061-07ee-5e95-b729-ce7b8bcaafe6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41240 is fixed in version 3.1.2-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49458",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.2-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:bcc86404-3396-5b71-a663-93cc93f5bdd3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49458 is fixed in version 3.1.2-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49459",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.2-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:4b64104b-bfc4-517c-9cb5-7122c4b7bda3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49459 is fixed in version 3.1.2-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49978",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.2-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:692c122c-ae89-5d13-96a4-c429f5b2c0aa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49978 is fixed in version 3.1.2-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65898",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.2-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:42a1cdb0-ba2f-5824-82f4-cd7b6b1bcde2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65898 is fixed in version 3.1.2-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65899",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.2-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:1363f5c7-5fb2-525b-8f0e-8a85c7a34943",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65899 is fixed in version 3.1.2-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65900",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.2-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:a5bf6ab0-cc45-55d1-bca9-5661f3077f2f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65900 is fixed in version 3.1.2-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65901",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.2-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:24ddccc4-51d9-572f-a09b-46e46163692d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65901 is fixed in version 3.1.2-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65902",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.2-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:7ba31e5d-98be-58d7-939d-58baa39bb43c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65902 is fixed in version 3.1.2-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65903",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.2-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:0e44a295-7149-58f2-b51b-1586c40dd93a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65903 is fixed in version 3.1.2-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65912",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.2-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:9d6d1dcd-591a-530c-9d5e-01edd88c56ec",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65912 is fixed in version 3.1.2-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65913",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.2-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:057c875c-d30b-5a53-9834-8823eebf6fc6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65913 is fixed in version 3.1.2-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65914",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.2-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:dba0ff40-1519-592e-a983-4b426c83d799",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65914 is fixed in version 3.1.2-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-66010",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.2-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:21800047-e6b7-5c1c-8e45-11cebda2d159",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-66010 is fixed in version 3.1.2-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-75838",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.2-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:f832f0a6-b2da-5bd7-8a6b-7814a14b2f6f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-75838 is fixed in version 3.1.2-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "GHSA-55q2-fjhq-7xh7",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.2-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:cc7b6f0e-02b7-5cd2-bf28-64794d59e354",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-55q2-fjhq-7xh7 affects version 3.1.2-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "GHSA-6688-9rhm-gjv2",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.2-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:ff6413c3-bd32-5e05-9fa8-eb351e63e804",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-6688-9rhm-gjv2 is fixed in version 3.1.2-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "GHSA-c6gr-qvv4-5v3f",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.2-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:f3e0d77b-fc73-537a-93d8-d9742ee28a36",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-c6gr-qvv4-5v3f is fixed in version 3.1.2-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "GHSA-jxrp-r7gx-q4j8",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.2-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:0515d56e-a81d-5f32-9d4a-ffadfe4e3b43",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-jxrp-r7gx-q4j8 is a false positive for dompurify 3.1.2-tuxcare.5."
      }
    },
    {
      "id": "GHSA-mrv2-3pqr-j5jr",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.2-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:d055fa3a-493b-5bff-8569-eb1d1c93653a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-mrv2-3pqr-j5jr is fixed in version 3.1.2-tuxcare.5 of dompurify."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/dompurify@3.1.2-tuxcare.5"
    }
  ]
}