{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:01cfa9a3-504e-559e-a1c4-b54a7370eb4a",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "core",
      "purl": "pkg:composer/drupal/core@8.9.20-p10+tuxcare",
      "type": "library",
      "group": "drupal",
      "bom-ref": "pkg:composer/drupal/core@8.9.20-p10+tuxcare",
      "version": "8.9.20-p10+tuxcare",
      "pedigree": {
        "ancestors": [
          {
            "name": "core",
            "purl": "pkg:composer/drupal/core@8.9.20",
            "type": "library",
            "group": "drupal",
            "version": "8.9.20"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2022-25270",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p10+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:420c41d9-5297-50f2-9250-e971762c8b6e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25270 is fixed in version 8.9.20-p10+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2022-25271",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p10+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:80727db0-9cd3-5a7e-aaab-e03f41e67412",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25271 is fixed in version 8.9.20-p10+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2022-25273",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p10+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:d807cc15-14f8-57eb-b43d-1637281a2199",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25273 is fixed in version 8.9.20-p10+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2022-25275",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p10+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:ccad528d-5693-5ae5-bbf8-827993e15b8b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25275 is fixed in version 8.9.20-p10+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2022-25276",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p10+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:0f590bad-b929-5073-864f-6334e5d1ac0d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25276 is fixed in version 8.9.20-p10+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2022-25277",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p10+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:9392d6ac-d406-5b04-858b-77ba796ada23",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25277 is fixed in version 8.9.20-p10+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2022-25278",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p10+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:458e24ae-0c44-50dc-87df-dfb9b11e7ef9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25278 is fixed in version 8.9.20-p10+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2023-5256",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p10+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:22b202d1-64bc-5701-b186-af0204f569d2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-5256 is fixed in version 8.9.20-p10+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2024-12393",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p10+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:4e689b44-49a3-5bf1-b8f4-07f162ccebee",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-12393 is fixed in version 8.9.20-p10+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2024-45440",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p10+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:27ed8c7b-b5f5-58a1-9dd0-3fb77004e735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-45440 is fixed in version 8.9.20-p10+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2024-55634",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p10+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:01df9308-2730-53a6-b54e-18e64db917be",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-55634 is fixed in version 8.9.20-p10+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2024-55636",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p10+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:8082732e-c5a4-5ee6-9b19-38c35e07a40f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-55636 is fixed in version 8.9.20-p10+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2024-55637",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p10+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:a003e3fc-9b97-50f8-8f48-6dd9344ffc6b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-55637 is fixed in version 8.9.20-p10+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2024-55638",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p10+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:a7c2eaa4-7999-563f-a2a9-e0419a190350",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-55638 is fixed in version 8.9.20-p10+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-13080",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p10+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:3b261dea-9ff8-5941-a162-7f0af61ec5f2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-13080 is fixed in version 8.9.20-p10+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-13081",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p10+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:47984376-314d-5cc9-b0a6-713e1497990e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-13081 is fixed in version 8.9.20-p10+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-13082",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p10+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:5886703e-c943-5a4a-8ae0-275339f06b75",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-13082 is fixed in version 8.9.20-p10+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-13083",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p10+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:de21ceb8-8417-5fcc-9d40-456d9aeabb3f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-13083 is fixed in version 8.9.20-p10+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-3057",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p10+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:aacfa5a2-31b4-5846-8eaf-d22967a93347",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-3057 is fixed in version 8.9.20-p10+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-31673",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p10+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:b542517b-09cc-597d-b25e-f799e3c3e89e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31673 is fixed in version 8.9.20-p10+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-31674",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p10+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:8c17a73d-7a99-599f-a73d-47cfc2a6c861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31674 is fixed in version 8.9.20-p10+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-31675",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p10+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:5e831736-6178-58ea-8e10-b8abc3cc3bd1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31675 is fixed in version 8.9.20-p10+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2026-108097",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p10+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:2ec62beb-8430-535e-91ea-b94e9164ec46",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-108097 is fixed in version 8.9.20-p10+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2026-108515",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p10+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:ad9167c5-86b6-56cd-b556-c557a0233a9a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-108515 is fixed in version 8.9.20-p10+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2026-6365",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p10+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:71d58c09-1f60-566a-8104-92bbf7b36c01",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-6365 is fixed in version 8.9.20-p10+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2026-6366",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p10+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:0e1a6bc6-de24-51de-ab3e-8a7502b53ce3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-6366 is fixed in version 8.9.20-p10+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2026-9082",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p10+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:41486ba8-e246-5514-bf21-d5dd25d684a5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-9082 is fixed in version 8.9.20-p10+tuxcare of drupal/core."
      }
    },
    {
      "id": "GHSA-6ccv-8fgf-cjpw",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p10+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:be1f9a43-2702-51f2-bc46-89f6e14a8e6b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-6ccv-8fgf-cjpw is fixed in version 8.9.20-p10+tuxcare of drupal/core."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:composer/drupal/core@8.9.20-p10+tuxcare"
    }
  ]
}