{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:12a7b923-e170-5fdc-ba57-6ff5ddf8f823",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/dompurify@3.0.3-tuxcare.3",
      "type": "library",
      "name": "dompurify",
      "version": "3.0.3-tuxcare.3",
      "purl": "pkg:npm/dompurify@3.0.3-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:66bb0d15-676b-5b9e-940c-5aa8db58dd3f",
      "id": "CVE-2015-8861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2015-8861 is fixed in version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb7f4dc9-6c0d-589d-b93e-c6db0c7a1193",
      "id": "CVE-2019-19919",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2019-19919 is fixed in version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2616456f-aa3e-5ce3-bc9d-8728c64a1f11",
      "id": "CVE-2019-20920",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2019-20920 is fixed in version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51a4f8e6-b3ef-5d3a-a126-21681adba934",
      "id": "CVE-2021-23369",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-23369 is fixed in version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:77e55747-16b0-5467-b9b8-65b99045fec0",
      "id": "CVE-2021-23383",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-23383 is fixed in version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e150e42f-d534-5e7b-ad13-195864719ac7",
      "id": "CVE-2024-45801",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-45801 is fixed in version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68783f24-6a83-5c76-be4d-dde0afdecea1",
      "id": "CVE-2024-47875",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47875 is fixed in version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19974457-66e8-5dea-8b9a-0aa48f08ef35",
      "id": "CVE-2025-26791",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-26791 is fixed in version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9e70c82-8229-529c-b2fc-b43f9c6fd42e",
      "id": "CVE-2025-32996",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-32996 is fixed in version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34518247-3426-512e-921b-9e0d99bdeb9e",
      "id": "CVE-2025-32997",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-32997 is fixed in version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3494f6b6-b7cb-5bf7-8415-dd28865a47ed",
      "id": "CVE-2026-0540",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-0540 is fixed in version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50d5d904-c9d2-57c5-bf7f-8b6ef23d246b",
      "id": "CVE-2026-13676",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-13676 is fixed in version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce4eb218-ce69-5c58-9c7b-17ee16399d1d",
      "id": "CVE-2026-16221",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-16221 is fixed in version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:506e8100-c2cc-5d22-96ec-247acece1e48",
      "id": "CVE-2026-33940",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33940 is fixed in version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1795399e-166d-5d45-ab4a-7cabf9298f01",
      "id": "CVE-2026-33941",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33941 is fixed in version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1155e141-7043-57e1-a581-f9155f40baed",
      "id": "CVE-2026-41238",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41238 is fixed in version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dddf0753-4304-55c4-8d37-a12b3039afba",
      "id": "CVE-2026-41239",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41239 is fixed in version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1faa19b9-72b8-51bf-baf5-27c0dd3fc170",
      "id": "CVE-2026-41240",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41240 is fixed in version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b308188f-c13c-56b1-ae22-f207226e79b3",
      "id": "CVE-2026-49458",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49458 affects version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d6a8bf6-6faa-53ed-8c58-9e5f1312d6cf",
      "id": "CVE-2026-49459",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49459 affects version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79fee4d0-bc40-55d7-9d6d-dbe2cf1881b5",
      "id": "CVE-2026-49978",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49978 affects version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c3f8754-7ffd-5b99-90b6-4a83239da03b",
      "id": "CVE-2026-55602",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55602 is fixed in version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08e2432e-4769-524b-b648-be80b8ddf5c9",
      "id": "CVE-2026-6321",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-6321 is fixed in version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ff03508c-10ff-5b99-8351-b9ffe48a838a",
      "id": "CVE-2026-6322",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-6322 is fixed in version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce7200ea-ed07-59f3-ab4a-d831b25d0d9a",
      "id": "CVE-2026-65898",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65898 affects version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d65152aa-699d-5cdf-a70b-7070022f94e0",
      "id": "CVE-2026-65899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65899 affects version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fdb95f2b-6c43-5099-8c66-eb895258c5e9",
      "id": "CVE-2026-65900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65900 affects version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3cb6c40d-a31f-555f-9205-f79f65c5e2f7",
      "id": "CVE-2026-65901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65901 affects version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:98c73861-73b1-5bc6-a08a-b2f3a662e10a",
      "id": "CVE-2026-65902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65902 affects version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ca1d7bd-ab68-5dda-9a10-97503368a571",
      "id": "CVE-2026-65903",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-65903 does not affect version 3.0.3-tuxcare.3 of dompurify. not_affected \u2014 Target version 3.0.3-tuxcare.3 is not affected by CVE-2026-65903. The vulnerable code pattern described in the CVE (single-line condition with short-circuit evaluation bypassing FORBID_TAGS) does not exist in this version. The target uses a nested conditional structure that explicitly checks !FORBID_TAGS[tagName] before allowing custom element tagNameCheck evaluation, which is the exact mitigat..."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c4059e6-c278-599c-a3dd-ce1dd2b82abc",
      "id": "CVE-2026-65912",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65912 affects version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a8d6dd2-d34b-5cb3-b583-de7e533b5d9a",
      "id": "CVE-2026-65913",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65913 affects version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0eb8ced-5119-5fe3-b6b4-1895158b825f",
      "id": "CVE-2026-65914",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65914 affects version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30583632-8f26-55a5-bae2-14cc28aa47d0",
      "id": "GHSA-2cf5-4w76-r9qv",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-2cf5-4w76-r9qv is fixed in version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7887e177-9bda-5913-8ecd-0c394a59501b",
      "id": "GHSA-39q2-94rc-95cp",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-39q2-94rc-95cp is fixed in version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:829cd7e6-eafd-5afe-baeb-49f34be15d4e",
      "id": "GHSA-76mc-f452-cxcm",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-76mc-f452-cxcm is fixed in version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71f16e3c-3d48-5296-828f-5417d18c779a",
      "id": "GHSA-c2j3-45gr-mqc4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-c2j3-45gr-mqc4 is fixed in version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6c70971-1af2-5e5d-91fd-aa03d2f291f9",
      "id": "GHSA-cj63-jhhr-wcxv",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-cj63-jhhr-wcxv is fixed in version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eff82111-15fb-57d4-be0f-1b0b0e8c61af",
      "id": "GHSA-cjmm-f4jc-qw8r",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-cjmm-f4jc-qw8r is fixed in version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:582f01c3-4302-58f7-9647-0ee64940d310",
      "id": "GHSA-cmwh-pvxp-8882",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-cmwh-pvxp-8882 is fixed in version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85b8f30d-32b3-57f8-992b-d8fa7cab1a51",
      "id": "GHSA-g9r4-xpmj-mj65",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-g9r4-xpmj-mj65 is fixed in version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f80760a-a5f6-5f19-a5f8-9d2bf6db8ca6",
      "id": "GHSA-gvmj-g25r-r7wr",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-gvmj-g25r-r7wr is fixed in version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f668e33c-2ddd-53ef-b3d9-3dc83331422e",
      "id": "GHSA-h8r8-wccr-v5f2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-h8r8-wccr-v5f2 is fixed in version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88c9ae08-4f5b-5290-adad-c12c146a5953",
      "id": "GHSA-q2c6-c6pm-g3gh",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-q2c6-c6pm-g3gh is fixed in version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c0a1b05-3c97-52e9-95d5-0aaad4248132",
      "id": "GHSA-q42p-pg8m-cqh6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-q42p-pg8m-cqh6 is fixed in version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4b3ba3a-58cd-585c-970f-fb9b0479ea1f",
      "id": "GHSA-vxr8-fq34-vvx9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-vxr8-fq34-vvx9 is fixed in version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:67954731-9261-56ca-922b-40a254131212",
      "id": "GHSA-x4vx-rjvf-j5p4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-x4vx-rjvf-j5p4 is fixed in version 3.0.3-tuxcare.3 of dompurify."
      },
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/dompurify@3.0.3-tuxcare.3"
    }
  ]
}