{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:62d81079-147f-550d-bb45-1e53967f91ab",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@smithy/config-resolver",
      "purl": "pkg:npm/%40smithy/config-resolver@3.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/%40smithy/config-resolver@3.0.4",
      "version": "3.0.4",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "GHSA-6475-r3vj-m8vf",
      "affects": [
        {
          "ref": "pkg:npm/%40smithy/config-resolver@3.0.4"
        }
      ],
      "bom-ref": "urn:uuid:915b1c6c-f92e-5c38-86dd-9d421a3715f2",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability GHSA-6475-r3vj-m8vf does not affect version 3.0.4 of @smithy/config-resolver. not_affected \u2014 The target @smithy/config-resolver v3.0.4 is NOT AFFECTED by GHSA-6475-r3vj-m8vf. The DNS host label validation that prevents malformed region values from being used in endpoint URL construction was already present in the upstream release, added by AWS developer Trivikram Kamat on 2021-08-25 (commit 2255185ea2), well before this version was released (2024-06-27) and 850 commits before TuxCare's...",
        "justification": "code_not_present"
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40smithy/config-resolver@3.0.4"
    }
  ]
}