{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:73eccdb3-0d75-518f-9981-9420630c2359",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/dompurify@3.0.3-tuxcare.2",
      "type": "library",
      "name": "dompurify",
      "version": "3.0.3-tuxcare.2",
      "purl": "pkg:npm/dompurify@3.0.3-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:f369778e-c181-5599-83fb-38431e1194d1",
      "id": "CVE-2015-8861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2015-8861 is fixed in version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09c6bd55-e0cd-5860-915a-c132fc0db9a2",
      "id": "CVE-2019-19919",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2019-19919 is fixed in version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83870739-0bd8-5f5b-bec3-833bacc1bb66",
      "id": "CVE-2019-20920",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2019-20920 is fixed in version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1bb6f8c7-afd9-500e-99e5-423789331ad1",
      "id": "CVE-2021-23369",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-23369 is fixed in version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3859cafc-334d-5ac4-bb34-dde99ca1f6d8",
      "id": "CVE-2021-23383",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-23383 is fixed in version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65b4ec67-6075-5cb1-a427-61512221a65b",
      "id": "CVE-2024-45801",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-45801 is fixed in version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29a69b3c-ad35-5b95-afbe-e8336fe45fb6",
      "id": "CVE-2024-47875",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47875 is fixed in version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2f5be09-7762-54ec-8598-c68cec916eb1",
      "id": "CVE-2025-26791",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-26791 is fixed in version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed8e9973-4886-55b1-9a77-a972e8ec1d21",
      "id": "CVE-2025-32996",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-32996 is fixed in version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8da2485-c302-52b7-b232-8a1becfb6ed5",
      "id": "CVE-2025-32997",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-32997 is fixed in version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a13adbfd-3f1b-5905-b25c-d8410fc74b69",
      "id": "CVE-2026-0540",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-0540 is fixed in version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dbd9c9f8-737b-586d-b967-4c79ad8a2f3c",
      "id": "CVE-2026-13676",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-13676 is fixed in version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6fe54ce9-fecf-5dfd-9e12-eaed84798265",
      "id": "CVE-2026-16221",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-16221 is fixed in version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63b4a6b9-9eb9-5592-9019-771c28bc8643",
      "id": "CVE-2026-33940",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33940 is fixed in version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9db8c5f4-fbaa-5955-a488-66d4fd1bdc16",
      "id": "CVE-2026-33941",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33941 is fixed in version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:914550a5-d1d1-50c5-b058-6bfe7418bb3b",
      "id": "CVE-2026-41238",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41238 is fixed in version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58c6af4b-6269-50e3-8b8b-0d2b82acb6b8",
      "id": "CVE-2026-41239",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41239 is fixed in version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f474be7-770d-5302-8ed4-e11adc91fc97",
      "id": "CVE-2026-41240",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41240 is fixed in version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eddca761-e45b-5bfe-82d9-e517ec2dce1c",
      "id": "CVE-2026-49458",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49458 affects version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21d643b1-7dea-5cd8-b2da-5c3e7fe9df10",
      "id": "CVE-2026-49459",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49459 affects version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c928b1e7-6d67-5f8b-a3ec-f9cbff034597",
      "id": "CVE-2026-49978",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49978 affects version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:612478d3-51c9-58cf-aa55-e3dded7216ef",
      "id": "CVE-2026-55602",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55602 is fixed in version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39a4300f-c548-5ce4-83e5-a90a33539185",
      "id": "CVE-2026-6321",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-6321 is fixed in version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3b1ec54-3780-5fc1-91e5-b400fa971d70",
      "id": "CVE-2026-6322",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-6322 is fixed in version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6ba948c-8dad-523c-adf7-334cd5f4c625",
      "id": "CVE-2026-65898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65898 affects version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83c0ed7b-ea40-5dd4-a436-01019f67e0b9",
      "id": "CVE-2026-65899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65899 affects version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45406328-f3b3-5479-8ee5-3463f45e8c70",
      "id": "CVE-2026-65900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65900 affects version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a999b0af-a776-569c-9039-5e77f869c1d3",
      "id": "CVE-2026-65901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65901 affects version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b049c788-7401-532d-9604-1a99107ce817",
      "id": "CVE-2026-65902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65902 affects version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0dc46d7e-195f-51b9-8b06-fc0934c8a7a0",
      "id": "CVE-2026-65903",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-65903 does not affect version 3.0.3-tuxcare.2 of dompurify. not_affected \u2014 Target version 3.0.3-tuxcare.3 is not affected by CVE-2026-65903. The vulnerable code pattern described in the CVE (single-line condition with short-circuit evaluation bypassing FORBID_TAGS) does not exist in this version. The target uses a nested conditional structure that explicitly checks !FORBID_TAGS[tagName] before allowing custom element tagNameCheck evaluation, which is the exact mitigat..."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a61330fe-e54e-5047-9428-fb18f6bae3bf",
      "id": "CVE-2026-65912",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65912 affects version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5dc45958-ddb5-5e02-aff9-59aa937963e9",
      "id": "CVE-2026-65913",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65913 affects version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7472fce4-06fa-5992-9496-8b7b2819bb5c",
      "id": "CVE-2026-65914",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65914 affects version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69d5e895-13c6-5013-98e7-f396f2866343",
      "id": "GHSA-2cf5-4w76-r9qv",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-2cf5-4w76-r9qv is fixed in version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db04c2ea-df0b-55bb-96b4-bf610278a9fe",
      "id": "GHSA-39q2-94rc-95cp",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-39q2-94rc-95cp is fixed in version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f569536e-6b9b-52c5-8b71-d8f5647bc86b",
      "id": "GHSA-76mc-f452-cxcm",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-76mc-f452-cxcm is fixed in version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e16cf2c-d5de-5d2d-b056-52305e40321b",
      "id": "GHSA-c2j3-45gr-mqc4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-c2j3-45gr-mqc4 affects version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10ac7142-d539-552f-89f8-8d4003d38d0e",
      "id": "GHSA-cj63-jhhr-wcxv",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-cj63-jhhr-wcxv is fixed in version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9637af3-ac00-5c97-a3ac-82e036d91412",
      "id": "GHSA-cjmm-f4jc-qw8r",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-cjmm-f4jc-qw8r is fixed in version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9316e845-f644-558b-a115-49c5d5e28093",
      "id": "GHSA-cmwh-pvxp-8882",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-cmwh-pvxp-8882 is fixed in version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f02fc8e2-46fa-521b-b2a0-ee4a157e3203",
      "id": "GHSA-g9r4-xpmj-mj65",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-g9r4-xpmj-mj65 is fixed in version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0cb0402-21f8-5967-b792-50546db95b54",
      "id": "GHSA-gvmj-g25r-r7wr",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-gvmj-g25r-r7wr is fixed in version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dacbe4a9-2051-54ec-b868-14c41e469418",
      "id": "GHSA-h8r8-wccr-v5f2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-h8r8-wccr-v5f2 is fixed in version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08672e71-5233-5f49-a837-7625c5f0cb3e",
      "id": "GHSA-q2c6-c6pm-g3gh",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-q2c6-c6pm-g3gh is fixed in version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c2ebe93-a798-52ac-91f9-bfaa9b1f8049",
      "id": "GHSA-q42p-pg8m-cqh6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-q42p-pg8m-cqh6 is fixed in version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32bccfea-e7e4-5828-8036-ebf0dfccb168",
      "id": "GHSA-vxr8-fq34-vvx9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-vxr8-fq34-vvx9 is fixed in version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf3c6b6e-3389-5b39-8621-dfcd1f2055db",
      "id": "GHSA-x4vx-rjvf-j5p4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-x4vx-rjvf-j5p4 is fixed in version 3.0.3-tuxcare.2 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/dompurify@3.0.3-tuxcare.2"
    }
  ]
}