{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:ccb5857e-3953-5034-8d1c-6e61925237b6",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:composer/drupal/core@8.9.20-p4+tuxcare",
      "type": "library",
      "group": "drupal",
      "name": "core",
      "version": "8.9.20-p4+tuxcare",
      "purl": "pkg:composer/drupal/core@8.9.20-p4+tuxcare"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:f61ec6f7-166f-5779-b80d-1a55fd83846b",
      "id": "CVE-2022-25270",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25270 is fixed in version 8.9.20-p4+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p4+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09702cd5-1796-5f33-99be-aa229f7f5f81",
      "id": "CVE-2022-25271",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25271 is fixed in version 8.9.20-p4+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p4+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ec3b0ba-2bd5-5442-85b5-bbcab47c2d30",
      "id": "CVE-2022-25273",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25273 is fixed in version 8.9.20-p4+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p4+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50b0dc5a-32cc-53c9-a070-d9e6ecefcfd0",
      "id": "CVE-2022-25275",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25275 is fixed in version 8.9.20-p4+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p4+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2a0fb73-6b67-54ca-a41b-1e16434dd50c",
      "id": "CVE-2022-25276",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25276 is fixed in version 8.9.20-p4+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p4+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a9479cd-db3a-5f7d-87e1-af5e15162c96",
      "id": "CVE-2022-25277",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25277 is fixed in version 8.9.20-p4+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p4+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d4cc1cf-27ce-593f-8a50-403770364302",
      "id": "CVE-2022-25278",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25278 is fixed in version 8.9.20-p4+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p4+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0664f619-ba99-5d28-acde-14dcc398f40f",
      "id": "CVE-2023-5256",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-5256 is fixed in version 8.9.20-p4+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p4+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a885e7e9-4201-5077-98ae-ab060888ac6f",
      "id": "CVE-2024-12393",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-12393 is fixed in version 8.9.20-p4+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p4+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1ef123c-e100-5e8e-b937-7d42b9bf6363",
      "id": "CVE-2024-55634",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-55634 is fixed in version 8.9.20-p4+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p4+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06888936-9eeb-5fa4-b19c-ffdfe77664d7",
      "id": "CVE-2024-55636",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-55636 is fixed in version 8.9.20-p4+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p4+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e3f680c-ba50-59a7-be5c-af4986959126",
      "id": "CVE-2024-55637",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-55637 is fixed in version 8.9.20-p4+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p4+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:17362722-f645-51db-bd11-6b9c9b6eda42",
      "id": "CVE-2024-55638",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-55638 is fixed in version 8.9.20-p4+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p4+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6783ec4-3881-5546-958f-4eb2fd628bc2",
      "id": "CVE-2025-13080",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-13080 is fixed in version 8.9.20-p4+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p4+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9a1a379-02e1-563e-9d01-ff132e5faf23",
      "id": "CVE-2025-13081",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-13081 is fixed in version 8.9.20-p4+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p4+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:abf67020-ece3-5ce8-9cf9-ffb58d770378",
      "id": "CVE-2025-13082",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-13082 is fixed in version 8.9.20-p4+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p4+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca32bb31-cd19-53fc-8874-01cc4a19ed95",
      "id": "CVE-2025-13083",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-13083 is fixed in version 8.9.20-p4+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p4+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5bde9f66-a3f2-5ee4-8df7-26a4afcf8375",
      "id": "CVE-2025-3057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-3057 is fixed in version 8.9.20-p4+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p4+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0068d985-18d5-523c-b848-cef18736623a",
      "id": "CVE-2025-31673",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31673 is fixed in version 8.9.20-p4+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p4+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25c157a8-681c-58c5-8e17-0b9fa6d67021",
      "id": "CVE-2025-31674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31674 is fixed in version 8.9.20-p4+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p4+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70638353-68b7-5647-b0fb-a49b4d7ab6b7",
      "id": "CVE-2025-31675",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31675 is fixed in version 8.9.20-p4+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p4+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:981b4fc9-de76-52cd-bd47-6586c92a9dfa",
      "id": "CVE-2026-6365",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-6365 is fixed in version 8.9.20-p4+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p4+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70ffc8df-777c-56ef-acbb-ba78041753dc",
      "id": "CVE-2026-6366",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-6366 is fixed in version 8.9.20-p4+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p4+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33e21bcb-0352-55d0-ac4b-59b806f5e2ab",
      "id": "CVE-2026-9082",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-9082 is fixed in version 8.9.20-p4+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p4+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d75ecbd6-90e1-51d7-9d6c-0c455d524124",
      "id": "GHSA-6ccv-8fgf-cjpw",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-6ccv-8fgf-cjpw is fixed in version 8.9.20-p4+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p4+tuxcare"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:composer/drupal/core@8.9.20-p4+tuxcare"
    }
  ]
}