{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:5e12832b-9786-5ea8-bec4-c1ecc63fa67a",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "dompurify",
      "purl": "pkg:npm/dompurify@3.2.6-tuxcare.5",
      "type": "library",
      "bom-ref": "pkg:npm/dompurify@3.2.6-tuxcare.5",
      "version": "3.2.6-tuxcare.5",
      "pedigree": {
        "ancestors": [
          {
            "name": "dompurify",
            "purl": "pkg:npm/dompurify@3.2.6",
            "type": "library",
            "version": "3.2.6"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-15599",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:59a8c6ba-503e-5261-ac77-d585d07ef594",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-15599 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-0540",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:761d89c8-b9f8-56a5-835e-316850811a3c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-0540 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-116802",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:3d1a27f0-8bd3-5029-84ea-3e574fd9e3b9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-116802 affects version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-116803",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:99680e15-3d74-5e1c-8f71-7ed677c1e0c9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-116803 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41238",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:e3ef0425-8fdc-50f1-924b-3f1cf62c5f3f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41238 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41239",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:54990300-2bef-5a10-9b1d-98ad79952ba3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41239 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41240",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:a209f67a-503c-5362-9e43-503fe3521ec2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41240 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49458",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:442d9faa-11b3-50b4-90a1-e1b0dac51919",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49458 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49459",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:4d1e591c-1a26-55a0-bffa-8857632f92bf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49459 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49978",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:138ef1f7-9108-5179-a5ea-b870c1c10d30",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49978 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65898",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:69e78ac9-aa69-59a6-8c44-d699a076498b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65898 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65899",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:dd2f07e0-1f14-59ee-8d22-3570abf95273",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65899 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65900",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:303c6ee2-105b-5454-a508-e2d581b90686",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65900 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65901",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:70b5f59e-ffbc-5937-a91c-153694ca1371",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65901 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65902",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:32a83e36-d323-5855-9fe5-6fb53e31d711",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65902 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65903",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:bedaf452-65c8-5b98-9226-064e18549b54",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65903 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65912",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:0893487f-17fc-53c1-b721-1b770772c553",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65912 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65913",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:cf474811-f8d0-5851-aa7e-d90364967e9e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65913 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65914",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:6bf60a19-d65a-5c0e-b6de-c3cf35844428",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65914 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-66010",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:c9015725-4e5d-56c1-aab2-cb24d30cd05b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-66010 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-75838",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:d71979f9-9aeb-57cd-84fa-974549fd366c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-75838 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "GHSA-55q2-fjhq-7xh7",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:201c40ce-02f6-5bba-b455-eb0680bff912",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-55q2-fjhq-7xh7 affects version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "GHSA-6688-9rhm-gjv2",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:0dd7a080-2c86-55d5-9757-807cf1c59891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-6688-9rhm-gjv2 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "GHSA-c6gr-qvv4-5v3f",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:ec5479a2-f381-5437-b0e9-967b00fe29ec",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-c6gr-qvv4-5v3f is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "GHSA-jxrp-r7gx-q4j8",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:657dd109-6387-5e8a-81a5-673cfeccfa99",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-jxrp-r7gx-q4j8 is a false positive for dompurify 3.2.6-tuxcare.5."
      }
    },
    {
      "id": "GHSA-mrv2-3pqr-j5jr",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:9acefbdf-e509-5d5a-a2df-1d3c201cde09",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-mrv2-3pqr-j5jr is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
    }
  ]
}