{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e161351a-4a8f-5c96-8113-810407783f3a",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "werkzeug",
      "purl": "pkg:pypi/werkzeug@2.2.3.post6+tuxcare",
      "type": "library",
      "bom-ref": "pkg:pypi/werkzeug@2.2.3.post6+tuxcare",
      "version": "2.2.3.post6+tuxcare",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "AIKIDO-2024-10085",
      "affects": [
        {
          "ref": "pkg:pypi/werkzeug@2.2.3.post6+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:f0733ce9-dac8-5b5b-bd17-46482032a0f8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability AIKIDO-2024-10085 is fixed in version 2.2.3.post6+tuxcare of werkzeug."
      }
    },
    {
      "id": "AIKIDO-2024-10410",
      "affects": [
        {
          "ref": "pkg:pypi/werkzeug@2.2.3.post6+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:dbb56b27-e131-5237-920c-b4884950a47a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability AIKIDO-2024-10410 is fixed in version 2.2.3.post6+tuxcare of werkzeug."
      }
    },
    {
      "id": "CVE-2023-46136",
      "affects": [
        {
          "ref": "pkg:pypi/werkzeug@2.2.3.post6+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:a1cc4863-34d6-5615-b1ca-e944bf70af3f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-46136 is fixed in version 2.2.3.post6+tuxcare of werkzeug."
      }
    },
    {
      "id": "CVE-2024-34069",
      "affects": [
        {
          "ref": "pkg:pypi/werkzeug@2.2.3.post6+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:3029150f-562f-5068-895c-34b4d850fe43",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-34069 is fixed in version 2.2.3.post6+tuxcare of werkzeug."
      }
    },
    {
      "id": "CVE-2024-49766",
      "affects": [
        {
          "ref": "pkg:pypi/werkzeug@2.2.3.post6+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:f3fa6a83-ed01-5075-a214-aae8d76fe237",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-49766 is fixed in version 2.2.3.post6+tuxcare of werkzeug."
      }
    },
    {
      "id": "CVE-2024-49767",
      "affects": [
        {
          "ref": "pkg:pypi/werkzeug@2.2.3.post6+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:2ed9ba4a-3daf-5a94-b7a0-1e4edcd9a7a3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-49767 is fixed in version 2.2.3.post6+tuxcare of werkzeug."
      }
    },
    {
      "id": "CVE-2025-66221",
      "affects": [
        {
          "ref": "pkg:pypi/werkzeug@2.2.3.post6+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:3a122f5d-0aa9-5fcc-a5c5-df147fe02803",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66221 is fixed in version 2.2.3.post6+tuxcare of werkzeug."
      }
    },
    {
      "id": "CVE-2026-102598",
      "affects": [
        {
          "ref": "pkg:pypi/werkzeug@2.2.3.post6+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:5051c733-6bc7-5b1b-9502-54ec61a66d96",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-102598 is fixed in version 2.2.3.post6+tuxcare of werkzeug."
      }
    },
    {
      "id": "CVE-2026-21860",
      "affects": [
        {
          "ref": "pkg:pypi/werkzeug@2.2.3.post6+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:98528b2e-d12c-54b7-bb90-3c1adbf65b3e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-21860 is fixed in version 2.2.3.post6+tuxcare of werkzeug."
      }
    },
    {
      "id": "CVE-2026-27199",
      "affects": [
        {
          "ref": "pkg:pypi/werkzeug@2.2.3.post6+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:1d479f00-8390-5b66-a837-6aa4dcfb3ec2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27199 is fixed in version 2.2.3.post6+tuxcare of werkzeug."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:pypi/werkzeug@2.2.3.post6+tuxcare"
    }
  ]
}