{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:32a5e941-9313-550b-b885-6c31b260970f",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/nodemailer@3.1.8",
      "type": "library",
      "name": "nodemailer",
      "version": "3.1.8",
      "purl": "pkg:npm/nodemailer@3.1.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:bd26c9b8-010f-552c-a152-10405a9413ab",
      "id": "CVE-2020-7769",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-7769 affects version 3.1.8 of nodemailer."
      },
      "affects": [
        {
          "ref": "pkg:npm/nodemailer@3.1.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01a17906-0bfe-50aa-8db5-27f1799d895c",
      "id": "CVE-2021-23400",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-23400 affects version 3.1.8 of nodemailer."
      },
      "affects": [
        {
          "ref": "pkg:npm/nodemailer@3.1.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a24d3b68-f7f2-5135-bdee-b3d830db2ede",
      "id": "CVE-2025-13033",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-13033 affects version 3.1.8 of nodemailer."
      },
      "affects": [
        {
          "ref": "pkg:npm/nodemailer@3.1.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2463637-81b8-5716-afe9-1626679526c9",
      "id": "CVE-2025-14874",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-14874 affects version 3.1.8 of nodemailer."
      },
      "affects": [
        {
          "ref": "pkg:npm/nodemailer@3.1.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:feba067b-0130-5651-a677-1acfdb3095f8",
      "id": "CVE-2026-82659",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-82659 affects version 3.1.8 of nodemailer."
      },
      "affects": [
        {
          "ref": "pkg:npm/nodemailer@3.1.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3e71565-8927-5c9c-a376-a4e68bcf4b5c",
      "id": "GHSA-268h-hp4c-crq3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-268h-hp4c-crq3 affects version 3.1.8 of nodemailer."
      },
      "affects": [
        {
          "ref": "pkg:npm/nodemailer@3.1.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7cc05ec-2cc0-5990-85a9-700c87a138d8",
      "id": "GHSA-2x7j-588g-ccc2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-2x7j-588g-ccc2 affects version 3.1.8 of nodemailer."
      },
      "affects": [
        {
          "ref": "pkg:npm/nodemailer@3.1.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7b99c98-3245-5451-baa5-d2f14ad60f44",
      "id": "GHSA-8m3c-c648-2xjj",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-8m3c-c648-2xjj affects version 3.1.8 of nodemailer."
      },
      "affects": [
        {
          "ref": "pkg:npm/nodemailer@3.1.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:962017b2-5e36-5ed3-ac2f-445ab387ed06",
      "id": "GHSA-9h6g-pr28-7cqp",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-9h6g-pr28-7cqp affects version 3.1.8 of nodemailer."
      },
      "affects": [
        {
          "ref": "pkg:npm/nodemailer@3.1.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52ab4a2b-4a3a-51f9-b88c-4bad27f94d78",
      "id": "GHSA-c7w3-x93f-qmm8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-c7w3-x93f-qmm8 affects version 3.1.8 of nodemailer."
      },
      "affects": [
        {
          "ref": "pkg:npm/nodemailer@3.1.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52c32604-cf2d-5745-a2ba-87fcc6102733",
      "id": "GHSA-r7g4-qg5f-qqm2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-r7g4-qg5f-qqm2 affects version 3.1.8 of nodemailer."
      },
      "affects": [
        {
          "ref": "pkg:npm/nodemailer@3.1.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b650bc6f-a0e1-56f5-8516-c7e6638d284f",
      "id": "GHSA-vvjj-xcjg-gr5g",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-vvjj-xcjg-gr5g affects version 3.1.8 of nodemailer."
      },
      "affects": [
        {
          "ref": "pkg:npm/nodemailer@3.1.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d45487ba-17ce-56fc-8077-1f7fe38d0623",
      "id": "GHSA-wmmp-3585-3rmp",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-wmmp-3585-3rmp affects version 3.1.8 of nodemailer."
      },
      "affects": [
        {
          "ref": "pkg:npm/nodemailer@3.1.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:045e4b55-3d95-5cc6-9340-dead2d7adcb7",
      "id": "GHSA-wqvq-jvpq-h66f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-wqvq-jvpq-h66f affects version 3.1.8 of nodemailer."
      },
      "affects": [
        {
          "ref": "pkg:npm/nodemailer@3.1.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/nodemailer@3.1.8"
    }
  ]
}