{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:77c69b3f-a7f2-537c-8be4-1870ed270eaa",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/%40nuxt/kit@4.0.3-tuxcare.5",
      "type": "library",
      "name": "@nuxt/kit",
      "version": "4.0.3-tuxcare.5",
      "purl": "pkg:npm/%40nuxt/kit@4.0.3-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:c4607a33-16e4-5d44-b068-49ca2a8781b9",
      "id": "CVE-2022-21670",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-21670 is fixed in version 4.0.3-tuxcare.5 of @nuxt/kit."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/kit@4.0.3-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:724136b9-498b-5e45-b748-0f980ff51727",
      "id": "CVE-2022-25852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-25852 affects version 4.0.3-tuxcare.5 of @nuxt/kit."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/kit@4.0.3-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd09cd0c-56a8-50da-aab8-e93ad1262a1e",
      "id": "CVE-2025-59414",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59414 is fixed in version 4.0.3-tuxcare.5 of @nuxt/kit."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/kit@4.0.3-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe3efaa7-261e-52a6-9c60-6168b8ed0979",
      "id": "CVE-2026-25128",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-25128 is fixed in version 4.0.3-tuxcare.5 of @nuxt/kit."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/kit@4.0.3-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8791f22-fd98-5756-a9c7-ebaec8e9c8ee",
      "id": "CVE-2026-41305",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41305 is fixed in version 4.0.3-tuxcare.5 of @nuxt/kit."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/kit@4.0.3-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c58da89-f90a-526e-b535-e87042d13bd3",
      "id": "CVE-2026-42338",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2026-42338 is a false positive for @nuxt/kit 4.0.3-tuxcare.5. false_positive \u2014 CVE-2026-42338 concerns the 'ip-address' npm package, but this repository is the 'nuxt' framework. The affected component (ip-address library) is completely absent from the repository - not as the project itself, not as vendored/bundled code, and not as a declared dependency. This is a wrong-project match."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/kit@4.0.3-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4491e9f-ed9a-51eb-a637-054fd2efa6c6",
      "id": "CVE-2026-44372",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44372 is fixed in version 4.0.3-tuxcare.5 of @nuxt/kit."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/kit@4.0.3-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f7c5f61-e2b1-5cb9-a192-f49d86b5f641",
      "id": "CVE-2026-45669",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45669 is fixed in version 4.0.3-tuxcare.5 of @nuxt/kit."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/kit@4.0.3-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a95d6edd-4ff3-5238-ad9e-f1165be62cf2",
      "id": "CVE-2026-45670",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45670 is fixed in version 4.0.3-tuxcare.5 of @nuxt/kit."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/kit@4.0.3-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:67aaa70d-cc71-5d64-a382-e7122d4cda90",
      "id": "CVE-2026-45736",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2026-45736 is a false positive for @nuxt/kit 4.0.3-tuxcare.5. false_positive \u2014 CVE-2026-45736 is a wrong-project match. The advisory concerns the 'ws' WebSocket library for Node.js, but the target repository is Nuxt.js framework. The ws library's source code (specifically lib/sender.js containing the vulnerable WebSocket close implementation) does not exist anywhere in this repository. While ws appears as a transitive dependency in pnpm-lock.yaml, no ws source code is pre..."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/kit@4.0.3-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aecca1c9-8467-52e0-b58c-fbd85f7e5adf",
      "id": "CVE-2026-46342",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46342 is fixed in version 4.0.3-tuxcare.5 of @nuxt/kit."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/kit@4.0.3-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b77e54e6-1304-5864-a080-b130fa399b96",
      "id": "CVE-2026-47200",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47200 affects version 4.0.3-tuxcare.5 of @nuxt/kit."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/kit@4.0.3-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9151969e-7251-5d11-8389-66028599c37c",
      "id": "CVE-2026-49993",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49993 is fixed in version 4.0.3-tuxcare.5 of @nuxt/kit."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/kit@4.0.3-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34c74166-c1b4-580a-8c93-166031de03f9",
      "id": "CVE-2026-53721",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-53721 is fixed in version 4.0.3-tuxcare.5 of @nuxt/kit."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/kit@4.0.3-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:daea1862-5f1c-5c89-84ea-c0b3c71b7372",
      "id": "CVE-2026-53722",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-53722 is fixed in version 4.0.3-tuxcare.5 of @nuxt/kit."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/kit@4.0.3-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd27299b-7fa8-5acf-89c8-3997ca262ba3",
      "id": "CVE-2026-56326",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56326 is fixed in version 4.0.3-tuxcare.5 of @nuxt/kit."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/kit@4.0.3-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63a26e18-d473-590c-90e0-c63e3885b9d4",
      "id": "GHSA-534h-c3cw-v3h9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-534h-c3cw-v3h9 is fixed in version 4.0.3-tuxcare.5 of @nuxt/kit."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/kit@4.0.3-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1871215-234f-5989-a727-322b555c6c6b",
      "id": "GHSA-c9cv-mq2m-ppp3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-c9cv-mq2m-ppp3 is fixed in version 4.0.3-tuxcare.5 of @nuxt/kit."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/kit@4.0.3-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8439ad4d-8cd0-5960-a6ee-9f6ec9b88423",
      "id": "GHSA-m3q2-p4fw-w38m",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-m3q2-p4fw-w38m affects version 4.0.3-tuxcare.5 of @nuxt/kit."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/kit@4.0.3-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba7ac11d-4a44-5823-b538-9c55cf97009f",
      "id": "GHSA-rq7w-g337-39qq",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-rq7w-g337-39qq is fixed in version 4.0.3-tuxcare.5 of @nuxt/kit."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/kit@4.0.3-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40nuxt/kit@4.0.3-tuxcare.5"
    }
  ]
}