{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:fe6731d6-8d32-594c-834e-dc8380206b26",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@hono/node-server",
      "purl": "pkg:npm/%40hono/node-server@2.0.5-tuxcare.1",
      "type": "library",
      "bom-ref": "pkg:npm/%40hono/node-server@2.0.5-tuxcare.1",
      "version": "2.0.5-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "@hono/node-server",
            "purl": "pkg:npm/%40hono/node-server@2.0.5",
            "type": "library",
            "version": "2.0.5"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-23340",
      "affects": [
        {
          "ref": "pkg:npm/%40hono/node-server@2.0.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:bed5e6c1-f9d0-58ac-93d2-0a99cc9aafa4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23340 affects version 2.0.5-tuxcare.1 of @hono/node-server."
      }
    },
    {
      "id": "CVE-2024-32652",
      "affects": [
        {
          "ref": "pkg:npm/%40hono/node-server@2.0.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f18a7071-5d9f-55f1-b42b-07826d22ff84",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-32652 affects version 2.0.5-tuxcare.1 of @hono/node-server."
      }
    },
    {
      "id": "CVE-2026-118663",
      "affects": [
        {
          "ref": "pkg:npm/%40hono/node-server@2.0.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6ae50deb-d68d-532a-a3e0-c238650a7ecb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-118663 affects version 2.0.5-tuxcare.1 of @hono/node-server."
      }
    },
    {
      "id": "CVE-2026-126210",
      "affects": [
        {
          "ref": "pkg:npm/%40hono/node-server@2.0.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5e46a4bc-3510-56f2-a230-13a482422677",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-126210 affects version 2.0.5-tuxcare.1 of @hono/node-server, and is fixed in 2.0.5-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-126343",
      "affects": [
        {
          "ref": "pkg:npm/%40hono/node-server@2.0.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ac6bd33b-b868-52c5-a4ef-3c091a0a87dd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-126343 affects version 2.0.5-tuxcare.1 of @hono/node-server."
      }
    },
    {
      "id": "CVE-2026-29087",
      "affects": [
        {
          "ref": "pkg:npm/%40hono/node-server@2.0.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:95e7421b-9db1-5c31-b30e-1c71a47583f8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-29087 affects version 2.0.5-tuxcare.1 of @hono/node-server."
      }
    },
    {
      "id": "CVE-2026-39406",
      "affects": [
        {
          "ref": "pkg:npm/%40hono/node-server@2.0.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6576c410-7471-5fe1-8a25-8c504c88bbf3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-39406 affects version 2.0.5-tuxcare.1 of @hono/node-server."
      }
    },
    {
      "id": "CVE-2026-73565",
      "affects": [
        {
          "ref": "pkg:npm/%40hono/node-server@2.0.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2a12f795-ba51-5946-a70f-857694bfa258",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73565 is fixed in version 2.0.5-tuxcare.1 of @hono/node-server."
      }
    },
    {
      "id": "GHSA-9mqv-5hh9-4cgg",
      "affects": [
        {
          "ref": "pkg:npm/%40hono/node-server@2.0.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:64df6b75-6f6a-5539-8b75-b1eb0f9f40b2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-9mqv-5hh9-4cgg is fixed in version 2.0.5-tuxcare.1 of @hono/node-server."
      }
    },
    {
      "id": "GHSA-frvp-7c67-39w9",
      "affects": [
        {
          "ref": "pkg:npm/%40hono/node-server@2.0.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9fd6f2a9-e6e3-55c8-9a00-e0dfb599f5b0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-frvp-7c67-39w9 affects version 2.0.5-tuxcare.1 of @hono/node-server."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40hono/node-server@2.0.5-tuxcare.1"
    }
  ]
}