{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:66babd76-dfeb-566f-8d14-13562c7cfae9",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "dompurify",
      "purl": "pkg:npm/dompurify@3.1.3-tuxcare.1",
      "type": "library",
      "bom-ref": "pkg:npm/dompurify@3.1.3-tuxcare.1",
      "version": "3.1.3-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "dompurify",
            "purl": "pkg:npm/dompurify@3.1.3",
            "type": "library",
            "version": "3.1.3"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-15599",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:73a28c83-61d9-554d-820c-4482a4d731c4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-15599 affects version 3.1.3-tuxcare.1 of dompurify, and is fixed in 3.1.3-tuxcare.3."
      }
    },
    {
      "id": "CVE-2025-26791",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e40ff0e7-3438-54a6-9d94-6bbc235d0498",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-26791 affects version 3.1.3-tuxcare.1 of dompurify, and is fixed in 3.1.3-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-0540",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:39cefb4e-0ddf-5629-93da-a909c2ada1d3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-0540 affects version 3.1.3-tuxcare.1 of dompurify, and is fixed in 3.1.3-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-109345",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1d6ef099-1ea7-5492-b9b2-4e02c8f14edf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-109345 affects version 3.1.3-tuxcare.1 of dompurify, and is fixed in 3.1.3-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-41238",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5930194c-c40d-5425-9c30-1588074c61bc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41238 affects version 3.1.3-tuxcare.1 of dompurify, and is fixed in 3.1.3-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-41239",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9a2ee636-ae38-57d3-9edc-b2eb6a6a9c95",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41239 affects version 3.1.3-tuxcare.1 of dompurify, and is fixed in 3.1.3-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-41240",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b5f59987-c49c-559c-a114-d6e70380359b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41240 affects version 3.1.3-tuxcare.1 of dompurify, and is fixed in 3.1.3-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-49458",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9b49bfad-6532-562e-8107-9468611c982b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49458 affects version 3.1.3-tuxcare.1 of dompurify, and is fixed in 3.1.3-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-49459",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6a4ca628-83fe-5d3d-86e4-ea91cea05fc2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49459 affects version 3.1.3-tuxcare.1 of dompurify, and is fixed in 3.1.3-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-49978",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f8274d14-de27-528e-8547-b612a375729d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49978 affects version 3.1.3-tuxcare.1 of dompurify, and is fixed in 3.1.3-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65898",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:aee3029c-65d1-598a-987d-9652d812c987",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65898 affects version 3.1.3-tuxcare.1 of dompurify, and is fixed in 3.1.3-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-65899",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2dbea184-6a04-5dd5-8237-4d93e8a965c1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65899 affects version 3.1.3-tuxcare.1 of dompurify, and is fixed in 3.1.3-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-65900",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5f7a025d-2ff3-5df3-b352-d43d7afbe718",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65900 affects version 3.1.3-tuxcare.1 of dompurify, and is fixed in 3.1.3-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-65901",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3090d7c1-782b-51d5-89bd-67cdbf0fab8b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65901 affects version 3.1.3-tuxcare.1 of dompurify, and is fixed in 3.1.3-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65902",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7a357218-2bf1-545e-8bfb-fbbbf9172dbc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65902 affects version 3.1.3-tuxcare.1 of dompurify, and is fixed in 3.1.3-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65903",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:88204c07-b308-54e9-85d8-4a01a2e9cd28",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65903 affects version 3.1.3-tuxcare.1 of dompurify, and is fixed in 3.1.3-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65912",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8c754760-b28a-5ed9-a1db-490311d17411",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65912 affects version 3.1.3-tuxcare.1 of dompurify, and is fixed in 3.1.3-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-65913",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0824933c-ce8e-585f-aebd-6c3a0b3164e0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65913 affects version 3.1.3-tuxcare.1 of dompurify, and is fixed in 3.1.3-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-65914",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:da75d3a4-e0e1-5ab3-8072-d61a66a64ec9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65914 affects version 3.1.3-tuxcare.1 of dompurify, and is fixed in 3.1.3-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-66010",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:74e1a0de-93fe-571b-898c-fcf71d3eef45",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66010 affects version 3.1.3-tuxcare.1 of dompurify, and is fixed in 3.1.3-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-75838",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0969165e-9e44-5bf0-90f8-3a72ccb16f4d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-75838 affects version 3.1.3-tuxcare.1 of dompurify, and is fixed in 3.1.3-tuxcare.2."
      }
    },
    {
      "id": "GHSA-55q2-fjhq-7xh7",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f1afe56d-7d1f-523e-b508-00b3e993c388",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-55q2-fjhq-7xh7 affects version 3.1.3-tuxcare.1 of dompurify."
      }
    },
    {
      "id": "GHSA-6688-9rhm-gjv2",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8cdfbca4-5de7-51a5-af0c-51326b6acf4d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-6688-9rhm-gjv2 is fixed in version 3.1.3-tuxcare.1 of dompurify."
      }
    },
    {
      "id": "GHSA-c6gr-qvv4-5v3f",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:58e353de-2f7c-51b5-85c3-bb91acc295f3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-c6gr-qvv4-5v3f affects version 3.1.3-tuxcare.1 of dompurify, and is fixed in 3.1.3-tuxcare.4."
      }
    },
    {
      "id": "GHSA-jxrp-r7gx-q4j8",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:aeac884e-8cc4-50cf-b351-69ae3987b606",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-jxrp-r7gx-q4j8 is a false positive for dompurify 3.1.3-tuxcare.1."
      }
    },
    {
      "id": "GHSA-mrv2-3pqr-j5jr",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.1.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c08c032d-43bb-57af-bb72-8f1233d7b2f8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mrv2-3pqr-j5jr affects version 3.1.3-tuxcare.1 of dompurify."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/dompurify@3.1.3-tuxcare.1"
    }
  ]
}