{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b5b16741-7b84-5a2f-bccc-c5c7bab1f257",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "devalue",
      "purl": "pkg:npm/devalue@5.6.3-tuxcare.1",
      "type": "library",
      "bom-ref": "pkg:npm/devalue@5.6.3-tuxcare.1",
      "version": "5.6.3-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "devalue",
            "purl": "pkg:npm/devalue@5.6.3",
            "type": "library",
            "version": "5.6.3"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-123561",
      "affects": [
        {
          "ref": "pkg:npm/devalue@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:04ed5f10-12ff-5ada-b61a-a6b3f371ff3b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-123561 affects version 5.6.3-tuxcare.1 of devalue, and is fixed in 5.6.3-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-123562",
      "affects": [
        {
          "ref": "pkg:npm/devalue@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f73d8f96-5e57-5463-941d-3d7f3747933d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-123562 affects version 5.6.3-tuxcare.1 of devalue."
      }
    },
    {
      "id": "CVE-2026-123563",
      "affects": [
        {
          "ref": "pkg:npm/devalue@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b58db509-20d0-52c8-801f-f435aaae115f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-123563 affects version 5.6.3-tuxcare.1 of devalue."
      }
    },
    {
      "id": "CVE-2026-123564",
      "affects": [
        {
          "ref": "pkg:npm/devalue@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a91df800-2758-5ae2-a927-cab28ab03319",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-123564 affects version 5.6.3-tuxcare.1 of devalue."
      }
    },
    {
      "id": "CVE-2026-123565",
      "affects": [
        {
          "ref": "pkg:npm/devalue@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:bd5fe2b3-e1b3-56b5-90eb-12d73e56b78a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-123565 affects version 5.6.3-tuxcare.1 of devalue."
      }
    },
    {
      "id": "CVE-2026-123566",
      "affects": [
        {
          "ref": "pkg:npm/devalue@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e790a2c1-d8fd-5dff-9a83-2cc4b7d0ba3c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-123566 affects version 5.6.3-tuxcare.1 of devalue."
      }
    },
    {
      "id": "CVE-2026-123567",
      "affects": [
        {
          "ref": "pkg:npm/devalue@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:431b70b8-d30a-5c77-8cab-53c1a0513771",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-123567 affects version 5.6.3-tuxcare.1 of devalue."
      }
    },
    {
      "id": "CVE-2026-123568",
      "affects": [
        {
          "ref": "pkg:npm/devalue@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c8a2991c-2796-5aa8-b198-eec6e0f46635",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-123568 affects version 5.6.3-tuxcare.1 of devalue."
      }
    },
    {
      "id": "CVE-2026-123569",
      "affects": [
        {
          "ref": "pkg:npm/devalue@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9537c0e0-245e-527d-9347-5e8362f07550",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-123569 affects version 5.6.3-tuxcare.1 of devalue."
      }
    },
    {
      "id": "CVE-2026-30226",
      "affects": [
        {
          "ref": "pkg:npm/devalue@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:27b4bb79-ca7b-58ea-8c0d-1d2a8f2e74b2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-30226 is fixed in version 5.6.3-tuxcare.1 of devalue."
      }
    },
    {
      "id": "CVE-2026-42570",
      "affects": [
        {
          "ref": "pkg:npm/devalue@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6c224df4-992c-53fb-bfc0-b9d4ffb1c80b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42570 affects version 5.6.3-tuxcare.1 of devalue."
      }
    },
    {
      "id": "CVE-2026-81176",
      "affects": [
        {
          "ref": "pkg:npm/devalue@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3e36d807-0479-5f7d-a637-5e14f8ab569c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-81176 affects version 5.6.3-tuxcare.1 of devalue, and is fixed in 5.6.3-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-92708",
      "affects": [
        {
          "ref": "pkg:npm/devalue@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7aefa6f5-a3d3-5937-ab7e-1488e124906e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-92708 affects version 5.6.3-tuxcare.1 of devalue."
      }
    },
    {
      "id": "GHSA-4q55-j62x-fr9h",
      "affects": [
        {
          "ref": "pkg:npm/devalue@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:02f97f87-39e6-5b4f-a8ec-333f9e204f1e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-4q55-j62x-fr9h affects version 5.6.3-tuxcare.1 of devalue."
      }
    },
    {
      "id": "GHSA-hx4r-w6wj-j8fg",
      "affects": [
        {
          "ref": "pkg:npm/devalue@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3b1786c6-7928-515a-81e6-32e11304fcb9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-hx4r-w6wj-j8fg affects version 5.6.3-tuxcare.1 of devalue."
      }
    },
    {
      "id": "GHSA-mcm9-63f2-9j32",
      "affects": [
        {
          "ref": "pkg:npm/devalue@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5f1a5704-493f-5616-bd3e-0767ea7cbf3b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mcm9-63f2-9j32 affects version 5.6.3-tuxcare.1 of devalue."
      }
    },
    {
      "id": "GHSA-mwv9-gp5h-frr4",
      "affects": [
        {
          "ref": "pkg:npm/devalue@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:883f2d79-6a8d-5876-8bd3-2ff4329732aa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mwv9-gp5h-frr4 affects version 5.6.3-tuxcare.1 of devalue."
      }
    },
    {
      "id": "GHSA-r9w8-h9r3-54w4",
      "affects": [
        {
          "ref": "pkg:npm/devalue@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d354be81-f194-5a56-800d-d4c2689a2efa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-r9w8-h9r3-54w4 affects version 5.6.3-tuxcare.1 of devalue."
      }
    },
    {
      "id": "GHSA-wf3x-273g-mvxv",
      "affects": [
        {
          "ref": "pkg:npm/devalue@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5f516bae-20e7-5a16-8199-e8b6c03c3056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-wf3x-273g-mvxv affects version 5.6.3-tuxcare.1 of devalue."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/devalue@5.6.3-tuxcare.1"
    }
  ]
}