{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:d80aaf1e-d8bb-5edb-ae5f-e1048669a60e",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/%40nuxt/schema@3.12.4-tuxcare.6",
      "type": "library",
      "name": "@nuxt/schema",
      "version": "3.12.4-tuxcare.6",
      "purl": "pkg:npm/%40nuxt/schema@3.12.4-tuxcare.6"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:604c79d5-39d5-55b9-9ee6-6a8655b43013",
      "id": "CVE-2022-25852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-25852 affects version 3.12.4-tuxcare.6 of @nuxt/schema."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/schema@3.12.4-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c5d3797-e5ff-531d-9674-5c6d293ccda1",
      "id": "CVE-2025-24360",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24360 is fixed in version 3.12.4-tuxcare.6 of @nuxt/schema."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/schema@3.12.4-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b767912e-97b2-5af3-8316-c21178b1feac",
      "id": "CVE-2025-24361",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24361 is fixed in version 3.12.4-tuxcare.6 of @nuxt/schema."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/schema@3.12.4-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:099122e8-ec15-5a42-8beb-6c029a5e9b98",
      "id": "CVE-2025-27415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27415 affects version 3.12.4-tuxcare.6 of @nuxt/schema."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/schema@3.12.4-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd52e80c-d4d9-5d01-be4d-f978cf70c5af",
      "id": "CVE-2025-58751",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58751 affects version 3.12.4-tuxcare.6 of @nuxt/schema."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/schema@3.12.4-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4c81902-a2a2-592d-8523-77554aba9c3b",
      "id": "CVE-2025-59414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59414 affects version 3.12.4-tuxcare.6 of @nuxt/schema."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/schema@3.12.4-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d72b71dd-58ea-57df-b28d-9f1568645a41",
      "id": "CVE-2025-62522",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-62522 is fixed in version 3.12.4-tuxcare.6 of @nuxt/schema."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/schema@3.12.4-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3a1ca73-6ea3-55d7-b1dc-b50f908c5a58",
      "id": "CVE-2026-41305",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41305 affects version 3.12.4-tuxcare.6 of @nuxt/schema."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/schema@3.12.4-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:760b3001-6fbb-58a3-874e-e978e9559e2b",
      "id": "CVE-2026-42338",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2026-42338 is a false positive for @nuxt/schema 3.12.4-tuxcare.6. false_positive \u2014 CVE-2026-42338 is a false positive match for this repository. The CVE concerns the 'ip-address' npm package (specifically XSS vulnerabilities in the Address6 class), but this repository is 'nuxt' (Nuxt.js web framework version 3.12.4-tuxcare.5). Exhaustive search confirmed that the ip-address package is not present in this repository as the project itself, as a vendored/bundled copy, or as a de..."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/schema@3.12.4-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d9d0c78-22bc-5512-ac2a-9075f4581d6e",
      "id": "CVE-2026-45669",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45669 affects version 3.12.4-tuxcare.6 of @nuxt/schema."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/schema@3.12.4-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0599671b-a5ed-51a2-8e4c-1f8bc730b58b",
      "id": "CVE-2026-46342",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46342 affects version 3.12.4-tuxcare.6 of @nuxt/schema."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/schema@3.12.4-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9ef45da-a2ac-5866-92bd-6f3a61b5b7a9",
      "id": "CVE-2026-47200",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47200 affects version 3.12.4-tuxcare.6 of @nuxt/schema."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/schema@3.12.4-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e368013-8fd3-5560-95f5-c44279396f05",
      "id": "CVE-2026-53721",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53721 affects version 3.12.4-tuxcare.6 of @nuxt/schema."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/schema@3.12.4-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88780b25-8bbe-5f6f-94f9-5de186d6d913",
      "id": "CVE-2026-53722",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53722 affects version 3.12.4-tuxcare.6 of @nuxt/schema."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/schema@3.12.4-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:292c4331-c64f-56af-ad07-8fccff6ddbfd",
      "id": "CVE-2026-56326",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56326 affects version 3.12.4-tuxcare.6 of @nuxt/schema."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/schema@3.12.4-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a4f5510-33e6-5dce-8766-05846b3b1d53",
      "id": "GHSA-c9cv-mq2m-ppp3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-c9cv-mq2m-ppp3 affects version 3.12.4-tuxcare.6 of @nuxt/schema."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/schema@3.12.4-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef619366-9002-55bc-901c-6d096058662e",
      "id": "GHSA-m3q2-p4fw-w38m",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability GHSA-m3q2-p4fw-w38m does not affect version 3.12.4-tuxcare.6 of @nuxt/schema. not_affected \u2014 Target version (nuxt@3.12.4-tuxcare.5) is NOT affected by GHSA-m3q2-p4fw-w38m. The vulnerability was introduced 1754 commits AFTER v3.12.4 when Nuxt upgraded from unhead v1 to v2 in v3.16.0. The target uses a fundamentally different, older implementation that does not contain the vulnerable innerHTML pattern."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/schema@3.12.4-tuxcare.6"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40nuxt/schema@3.12.4-tuxcare.6"
    }
  ]
}