{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:3775413b-48e4-5881-9b5d-183745677d92",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "dompurify",
      "purl": "pkg:npm/dompurify@2.3.10-tuxcare.1",
      "type": "library",
      "bom-ref": "pkg:npm/dompurify@2.3.10-tuxcare.1",
      "version": "2.3.10-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "dompurify",
            "purl": "pkg:npm/dompurify@2.3.10",
            "type": "library",
            "version": "2.3.10"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-45801",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:56f183f7-5959-583f-89ce-3ec7c5611702",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-45801 affects version 2.3.10-tuxcare.1 of dompurify, and is fixed in 2.3.10-tuxcare.3."
      }
    },
    {
      "id": "CVE-2024-47875",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:769f9602-d370-5d45-8dab-cd64ed3252f2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47875 affects version 2.3.10-tuxcare.1 of dompurify, and is fixed in 2.3.10-tuxcare.2."
      }
    },
    {
      "id": "CVE-2024-48910",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d154b998-d4c2-5840-af9f-2edf4bf602d9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-48910 affects version 2.3.10-tuxcare.1 of dompurify, and is fixed in 2.3.10-tuxcare.2."
      }
    },
    {
      "id": "CVE-2025-26791",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:24464173-4ee1-5ac5-95d9-183dc0259166",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-26791 affects version 2.3.10-tuxcare.1 of dompurify, and is fixed in 2.3.10-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-41239",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:612e3bc8-f150-5f3c-8a85-4162aa3aa5ac",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41239 affects version 2.3.10-tuxcare.1 of dompurify, and is fixed in 2.3.10-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-41240",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b2597def-1789-5ed3-af53-3a1e7014bda4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41240 affects version 2.3.10-tuxcare.1 of dompurify, and is fixed in 2.3.10-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-49458",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1de73d4d-9346-52e9-a9c9-0e86f343b469",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49458 affects version 2.3.10-tuxcare.1 of dompurify, and is fixed in 2.3.10-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-49459",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5e750b6e-494d-590a-bfd3-249b0e37b9b9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49459 affects version 2.3.10-tuxcare.1 of dompurify, and is fixed in 2.3.10-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-49978",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:70137318-3b23-5e8f-b64b-54c45833b823",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49978 affects version 2.3.10-tuxcare.1 of dompurify, and is fixed in 2.3.10-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65898",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:95c915ba-6b21-5618-b16f-47d2da52a6b1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65898 affects version 2.3.10-tuxcare.1 of dompurify, and is fixed in 2.3.10-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-65899",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6e213e77-b07f-5724-957d-06e6414db7ca",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65899 affects version 2.3.10-tuxcare.1 of dompurify, and is fixed in 2.3.10-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65901",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:250d0277-caa8-5443-b7f8-06987653b607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65901 affects version 2.3.10-tuxcare.1 of dompurify, and is fixed in 2.3.10-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65902",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:cab15107-990b-55f9-83ed-b5f7da19c2ca",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65902 affects version 2.3.10-tuxcare.1 of dompurify, and is fixed in 2.3.10-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65903",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:01ee9f48-d29a-5e9e-88d3-e1d070015aee",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65903 affects version 2.3.10-tuxcare.1 of dompurify, and is fixed in 2.3.10-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65912",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b91e14e9-6aba-53d9-97f1-98233217f295",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65912 affects version 2.3.10-tuxcare.1 of dompurify, and is fixed in 2.3.10-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65913",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3f4eb183-2d7a-5e75-bcc7-7607ed540af9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65913 affects version 2.3.10-tuxcare.1 of dompurify, and is fixed in 2.3.10-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-65914",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:05b465d4-772b-5555-873e-9d53cd9b192e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65914 affects version 2.3.10-tuxcare.1 of dompurify, and is fixed in 2.3.10-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-66010",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4ece7b36-fa70-59f6-ae7b-35e0bfc759a5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66010 affects version 2.3.10-tuxcare.1 of dompurify, and is fixed in 2.3.10-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-75838",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0022336d-3ea7-599d-b034-e091563557c4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-75838 affects version 2.3.10-tuxcare.1 of dompurify, and is fixed in 2.3.10-tuxcare.3."
      }
    },
    {
      "id": "GHSA-55q2-fjhq-7xh7",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fc4989ae-b752-5ed4-82dc-bda23e09aeac",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-55q2-fjhq-7xh7 affects version 2.3.10-tuxcare.1 of dompurify."
      }
    },
    {
      "id": "GHSA-6688-9rhm-gjv2",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a1dd3735-eb2d-5f83-bf79-8dd25e87d13a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-6688-9rhm-gjv2 is fixed in version 2.3.10-tuxcare.1 of dompurify."
      }
    },
    {
      "id": "GHSA-c6gr-qvv4-5v3f",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:74d159ed-d159-5b53-9c0b-1fed248de19e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-c6gr-qvv4-5v3f affects version 2.3.10-tuxcare.1 of dompurify, and is fixed in 2.3.10-tuxcare.4."
      }
    },
    {
      "id": "GHSA-jxrp-r7gx-q4j8",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:cb8ae45b-5bb3-58b7-a9df-a01d707c684b",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-jxrp-r7gx-q4j8 is a false positive for dompurify 2.3.10-tuxcare.1."
      }
    },
    {
      "id": "GHSA-mrv2-3pqr-j5jr",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@2.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:064d312c-3280-51f9-b490-3e7914eaa26e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mrv2-3pqr-j5jr affects version 2.3.10-tuxcare.1 of dompurify."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/dompurify@2.3.10-tuxcare.1"
    }
  ]
}