{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:ef0cd8b3-2e0d-5d9d-b122-5e4606b81dba",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "commonmark",
      "purl": "pkg:composer/league/commonmark@1.6.7-p6+tuxcare",
      "type": "library",
      "group": "league",
      "bom-ref": "pkg:composer/league/commonmark@1.6.7-p6+tuxcare",
      "version": "1.6.7-p6+tuxcare",
      "pedigree": {
        "ancestors": [
          {
            "name": "commonmark",
            "purl": "pkg:composer/league/commonmark@1.6.7",
            "type": "library",
            "group": "league",
            "version": "1.6.7"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-46734",
      "affects": [
        {
          "ref": "pkg:composer/league/commonmark@1.6.7-p6+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:08f0bd1d-d35b-5cb5-9431-118be57c3d1a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-46734 is fixed in version 1.6.7-p6+tuxcare of league/commonmark."
      }
    },
    {
      "id": "CVE-2026-30838",
      "affects": [
        {
          "ref": "pkg:composer/league/commonmark@1.6.7-p6+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:9c3f7d98-5965-5af5-aa27-0afa8def02d3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-30838 is fixed in version 1.6.7-p6+tuxcare of league/commonmark."
      }
    },
    {
      "id": "CVE-2026-33347",
      "affects": [
        {
          "ref": "pkg:composer/league/commonmark@1.6.7-p6+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:5462bd7a-e69d-5b5e-94b8-6d672eef35d1",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-33347 does not affect version 1.6.7-p6+tuxcare of league/commonmark. The affected files doesn't exist in the version 1.6.7 and also The GitHub Advisory (GHSA-hh8v-hgvp-g3f5) lists the vulnerable range as >= 2.3.0 <= 2.8.1",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-71478",
      "affects": [
        {
          "ref": "pkg:composer/league/commonmark@1.6.7-p6+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:9a0373ea-f7b7-5aa2-84d8-5e9718b1d7f3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-71478 is fixed in version 1.6.7-p6+tuxcare of league/commonmark."
      }
    },
    {
      "id": "CVE-2026-71488",
      "affects": [
        {
          "ref": "pkg:composer/league/commonmark@1.6.7-p6+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:795f5edf-f6a8-5fc1-a3d0-76030f8538a2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-71488 is fixed in version 1.6.7-p6+tuxcare of league/commonmark."
      }
    },
    {
      "id": "GHSA-3q6v-r5mr-hxv8",
      "affects": [
        {
          "ref": "pkg:composer/league/commonmark@1.6.7-p6+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:11b58080-ddae-5366-bc4d-b71a8a7d7f11",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-3q6v-r5mr-hxv8 affects version 1.6.7-p6+tuxcare of league/commonmark."
      }
    },
    {
      "id": "GHSA-8rr7-cvq3-gmfh",
      "affects": [
        {
          "ref": "pkg:composer/league/commonmark@1.6.7-p6+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:54c5f53a-3555-5c13-b4d7-4b99116285a2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-8rr7-cvq3-gmfh is fixed in version 1.6.7-p6+tuxcare of league/commonmark."
      }
    },
    {
      "id": "GHSA-97jj-33gv-5xf9",
      "affects": [
        {
          "ref": "pkg:composer/league/commonmark@1.6.7-p6+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:4ea8c4c7-1519-581f-af02-ace91639979b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-97jj-33gv-5xf9 is fixed in version 1.6.7-p6+tuxcare of league/commonmark."
      }
    },
    {
      "id": "GHSA-c2pc-g5qf-rfrf",
      "affects": [
        {
          "ref": "pkg:composer/league/commonmark@1.6.7-p6+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:d5a22d71-4749-5bd2-9ebc-594c0ff18912",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-c2pc-g5qf-rfrf is fixed in version 1.6.7-p6+tuxcare of league/commonmark."
      }
    },
    {
      "id": "GHSA-g2gp-3wwq-f4ph",
      "affects": [
        {
          "ref": "pkg:composer/league/commonmark@1.6.7-p6+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:7b98f13e-b83e-5b95-bbba-fbf6bb6605dc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-g2gp-3wwq-f4ph is fixed in version 1.6.7-p6+tuxcare of league/commonmark."
      }
    },
    {
      "id": "GHSA-j8pm-gj4c-rq4x",
      "affects": [
        {
          "ref": "pkg:composer/league/commonmark@1.6.7-p6+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:a4da7faf-bdbb-5cc7-8893-757ac2cd81fd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-j8pm-gj4c-rq4x is fixed in version 1.6.7-p6+tuxcare of league/commonmark."
      }
    },
    {
      "id": "GHSA-jfm3-95jq-q3rf",
      "affects": [
        {
          "ref": "pkg:composer/league/commonmark@1.6.7-p6+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:861e54ff-94e8-544c-b118-baea1570e4d8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-jfm3-95jq-q3rf is fixed in version 1.6.7-p6+tuxcare of league/commonmark."
      }
    },
    {
      "id": "GHSA-jjv6-8j6v-6j52",
      "affects": [
        {
          "ref": "pkg:composer/league/commonmark@1.6.7-p6+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:6be0b2a5-26bf-500a-85ff-f8a4619056f5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-jjv6-8j6v-6j52 is fixed in version 1.6.7-p6+tuxcare of league/commonmark."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:composer/league/commonmark@1.6.7-p6+tuxcare"
    }
  ]
}