{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:6567e4a7-5329-5dd4-b194-2be91424eb8c",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "elliptic",
      "purl": "pkg:npm/elliptic@6.5.1-tuxcare.1",
      "type": "library",
      "bom-ref": "pkg:npm/elliptic@6.5.1-tuxcare.1",
      "version": "6.5.1-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "elliptic",
            "purl": "pkg:npm/elliptic@6.5.1",
            "type": "library",
            "version": "6.5.1"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2020-13822",
      "affects": [
        {
          "ref": "pkg:npm/elliptic@6.5.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:00d8b695-2201-5fa1-a128-3b30665c4b99",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2020-13822 is fixed in version 6.5.1-tuxcare.1 of elliptic."
      }
    },
    {
      "id": "CVE-2020-28498",
      "affects": [
        {
          "ref": "pkg:npm/elliptic@6.5.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:334f45ad-efcc-57c0-a76d-5de1ee334a39",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-28498 affects version 6.5.1-tuxcare.1 of elliptic."
      }
    },
    {
      "id": "CVE-2024-42459",
      "affects": [
        {
          "ref": "pkg:npm/elliptic@6.5.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a38b2354-8387-5d25-b406-bec706994757",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-42459 affects version 6.5.1-tuxcare.1 of elliptic."
      }
    },
    {
      "id": "CVE-2024-42460",
      "affects": [
        {
          "ref": "pkg:npm/elliptic@6.5.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9eb99765-93f8-5562-bd0e-1e974578bca3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-42460 affects version 6.5.1-tuxcare.1 of elliptic."
      }
    },
    {
      "id": "CVE-2024-42461",
      "affects": [
        {
          "ref": "pkg:npm/elliptic@6.5.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b7614e63-62aa-50fc-960e-39676f7d818d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-42461 affects version 6.5.1-tuxcare.1 of elliptic."
      }
    },
    {
      "id": "CVE-2024-48948",
      "affects": [
        {
          "ref": "pkg:npm/elliptic@6.5.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2f17c4b9-51c2-57a1-a87d-7e1dc817b72e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-48948 affects version 6.5.1-tuxcare.1 of elliptic."
      }
    },
    {
      "id": "CVE-2024-48949",
      "affects": [
        {
          "ref": "pkg:npm/elliptic@6.5.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:69bfe1d9-f388-54d4-8d63-44efa644593a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-48949 affects version 6.5.1-tuxcare.1 of elliptic."
      }
    },
    {
      "id": "CVE-2025-14505",
      "affects": [
        {
          "ref": "pkg:npm/elliptic@6.5.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2f5445ae-f71b-5dae-9b9c-20ad3961b50f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-14505 affects version 6.5.1-tuxcare.1 of elliptic."
      }
    },
    {
      "id": "GHSA-vjh7-7g9h-fjfh",
      "affects": [
        {
          "ref": "pkg:npm/elliptic@6.5.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:154c6cc7-7bf8-5a74-9f1a-32bf06c38a76",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-vjh7-7g9h-fjfh affects version 6.5.1-tuxcare.1 of elliptic."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/elliptic@6.5.1-tuxcare.1"
    }
  ]
}