{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:7d0149db-e21b-57f0-a4eb-aea9d3ed8e54",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "dulwich",
      "purl": "pkg:pypi/dulwich@0.25.2.post8+tuxcare",
      "type": "library",
      "bom-ref": "pkg:pypi/dulwich@0.25.2.post8+tuxcare",
      "version": "0.25.2.post8+tuxcare",
      "pedigree": {
        "ancestors": [
          {
            "name": "dulwich",
            "purl": "pkg:pypi/dulwich@0.25.2",
            "type": "library",
            "version": "0.25.2"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "AIKIDO-2026-10554",
      "affects": [
        {
          "ref": "pkg:pypi/dulwich@0.25.2.post8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:57299e83-b362-51b9-be8d-95578d9791ea",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability AIKIDO-2026-10554 is fixed in version 0.25.2.post8+tuxcare of dulwich."
      }
    },
    {
      "id": "CVE-2026-114094",
      "affects": [
        {
          "ref": "pkg:pypi/dulwich@0.25.2.post8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:63aa54ef-cf03-5851-8928-122be259ef77",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114094 affects version 0.25.2.post8+tuxcare of dulwich."
      }
    },
    {
      "id": "CVE-2026-114095",
      "affects": [
        {
          "ref": "pkg:pypi/dulwich@0.25.2.post8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:8a7e6650-eeed-5dea-aa2b-3c898d76c4f1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114095 affects version 0.25.2.post8+tuxcare of dulwich."
      }
    },
    {
      "id": "CVE-2026-114096",
      "affects": [
        {
          "ref": "pkg:pypi/dulwich@0.25.2.post8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:51e9e840-e177-548d-aec4-6e7badf36fc3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114096 affects version 0.25.2.post8+tuxcare of dulwich."
      }
    },
    {
      "id": "CVE-2026-114097",
      "affects": [
        {
          "ref": "pkg:pypi/dulwich@0.25.2.post8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:f22d802f-be6d-5930-977d-a3e3e7150e27",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114097 affects version 0.25.2.post8+tuxcare of dulwich."
      }
    },
    {
      "id": "CVE-2026-114098",
      "affects": [
        {
          "ref": "pkg:pypi/dulwich@0.25.2.post8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:57240e59-5198-5f20-a7d9-f87d817abcb0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114098 affects version 0.25.2.post8+tuxcare of dulwich."
      }
    },
    {
      "id": "CVE-2026-42305",
      "affects": [
        {
          "ref": "pkg:pypi/dulwich@0.25.2.post8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:435e388b-644b-55ea-a857-5f02d6354454",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42305 is fixed in version 0.25.2.post8+tuxcare of dulwich."
      }
    },
    {
      "id": "CVE-2026-42563",
      "affects": [
        {
          "ref": "pkg:pypi/dulwich@0.25.2.post8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:a6a597c9-4861-55c5-9f73-6fbdd680eeb8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42563 is fixed in version 0.25.2.post8+tuxcare of dulwich."
      }
    },
    {
      "id": "CVE-2026-47712",
      "affects": [
        {
          "ref": "pkg:pypi/dulwich@0.25.2.post8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:be17e487-f9b6-5eb7-af5f-3ab4012593d1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47712 is fixed in version 0.25.2.post8+tuxcare of dulwich."
      }
    },
    {
      "id": "CVE-2026-47734",
      "affects": [
        {
          "ref": "pkg:pypi/dulwich@0.25.2.post8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:af2b3171-d1ff-5d1f-9071-760c1e59008a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47734 is fixed in version 0.25.2.post8+tuxcare of dulwich."
      }
    },
    {
      "id": "CVE-2026-52726",
      "affects": [
        {
          "ref": "pkg:pypi/dulwich@0.25.2.post8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:56fdf75d-04cc-5ef2-ad6f-0285ff3e28d1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-52726 is fixed in version 0.25.2.post8+tuxcare of dulwich."
      }
    },
    {
      "id": "GHSA-35mr-4567-66vg",
      "affects": [
        {
          "ref": "pkg:pypi/dulwich@0.25.2.post8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:0b69e6f1-7bff-5819-81c6-7be76644ba1d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-35mr-4567-66vg is fixed in version 0.25.2.post8+tuxcare of dulwich."
      }
    },
    {
      "id": "GHSA-5fqc-mrg8-w798",
      "affects": [
        {
          "ref": "pkg:pypi/dulwich@0.25.2.post8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:70b0ffa9-ed52-56ed-b3ab-e0021488c7d4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-5fqc-mrg8-w798 is fixed in version 0.25.2.post8+tuxcare of dulwich."
      }
    },
    {
      "id": "GHSA-8mcx-5rqc-vhmf",
      "affects": [
        {
          "ref": "pkg:pypi/dulwich@0.25.2.post8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:d7724f93-3823-5d48-93e8-ef2470876735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-8mcx-5rqc-vhmf is fixed in version 0.25.2.post8+tuxcare of dulwich."
      }
    },
    {
      "id": "GHSA-8w8g-wq8h-fq33",
      "affects": [
        {
          "ref": "pkg:pypi/dulwich@0.25.2.post8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:e5a36ad2-055b-5c9d-91bc-2c814433a1fe",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-8w8g-wq8h-fq33 is fixed in version 0.25.2.post8+tuxcare of dulwich."
      }
    },
    {
      "id": "GHSA-cm62-gvxx-vmxx",
      "affects": [
        {
          "ref": "pkg:pypi/dulwich@0.25.2.post8+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:eb6ba383-f558-54e6-ab71-5da920d52419",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-cm62-gvxx-vmxx is fixed in version 0.25.2.post8+tuxcare of dulwich."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:pypi/dulwich@0.25.2.post8+tuxcare"
    }
  ]
}