{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:1a749007-ccaf-5375-8acf-84fd97e7ce93",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "dompurify",
      "purl": "pkg:npm/dompurify@3.2.6-tuxcare.5",
      "type": "library",
      "bom-ref": "pkg:npm/dompurify@3.2.6-tuxcare.5",
      "version": "3.2.6-tuxcare.5",
      "pedigree": {
        "ancestors": [
          {
            "name": "dompurify",
            "purl": "pkg:npm/dompurify@3.2.6",
            "type": "library",
            "version": "3.2.6"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2019-16728",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:75479262-767b-5c69-a481-e4aaad8742f3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-16728 affects version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2019-25155",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:40629b95-0684-5348-a2f4-7b6ea809fb27",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-25155 affects version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2020-26870",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:d6e8fb16-6bcb-5cbb-80bb-9abad5deda17",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-26870 affects version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2024-45801",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:c9e7e2d9-5320-568a-a85a-40168dd3c002",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-45801 affects version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2024-47875",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:e2d39b52-c8f7-5f61-abbb-f7fa1964bbb0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47875 affects version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2024-48910",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:f1932a69-ca5e-5699-90de-641d1945d626",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-48910 affects version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2025-15599",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:59a8c6ba-503e-5261-ac77-d585d07ef594",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-15599 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2025-26791",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:f783101f-dbc9-50b9-b980-0b3d965786f0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-26791 affects version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-0540",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:761d89c8-b9f8-56a5-835e-316850811a3c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-0540 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-116802",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:3d1a27f0-8bd3-5029-84ea-3e574fd9e3b9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-116802 affects version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-116803",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:99680e15-3d74-5e1c-8f71-7ed677c1e0c9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-116803 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-116804",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:a0ddc40b-21eb-5c7e-a2f3-42d5a2ef04f7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-116804 affects version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41238",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:e3ef0425-8fdc-50f1-924b-3f1cf62c5f3f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41238 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41239",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:54990300-2bef-5a10-9b1d-98ad79952ba3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41239 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41240",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:a209f67a-503c-5362-9e43-503fe3521ec2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41240 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-47423",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:dc89e63a-6344-5049-a7ed-f4f39d8acf61",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47423 affects version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49458",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:442d9faa-11b3-50b4-90a1-e1b0dac51919",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49458 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49459",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:4d1e591c-1a26-55a0-bffa-8857632f92bf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49459 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49978",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:138ef1f7-9108-5179-a5ea-b870c1c10d30",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49978 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65898",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:69e78ac9-aa69-59a6-8c44-d699a076498b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65898 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65899",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:dd2f07e0-1f14-59ee-8d22-3570abf95273",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65899 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65900",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:303c6ee2-105b-5454-a508-e2d581b90686",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65900 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65901",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:70b5f59e-ffbc-5937-a91c-153694ca1371",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65901 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65902",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:32a83e36-d323-5855-9fe5-6fb53e31d711",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65902 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65903",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:bedaf452-65c8-5b98-9226-064e18549b54",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65903 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65912",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:0893487f-17fc-53c1-b721-1b770772c553",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65912 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65913",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:cf474811-f8d0-5851-aa7e-d90364967e9e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65913 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65914",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:6bf60a19-d65a-5c0e-b6de-c3cf35844428",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65914 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-66010",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:c9015725-4e5d-56c1-aab2-cb24d30cd05b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-66010 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "CVE-2026-75838",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:d71979f9-9aeb-57cd-84fa-974549fd366c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-75838 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "GHSA-55q2-fjhq-7xh7",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:201c40ce-02f6-5bba-b455-eb0680bff912",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-55q2-fjhq-7xh7 affects version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "GHSA-6688-9rhm-gjv2",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:0dd7a080-2c86-55d5-9757-807cf1c59891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-6688-9rhm-gjv2 is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "GHSA-c6gr-qvv4-5v3f",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:ec5479a2-f381-5437-b0e9-967b00fe29ec",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-c6gr-qvv4-5v3f is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "GHSA-cg2g-xh64-v4q7",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:722d009a-c46d-505a-b46b-7f457a5acbaf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-cg2g-xh64-v4q7 affects version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "GHSA-jxrp-r7gx-q4j8",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:657dd109-6387-5e8a-81a5-673cfeccfa99",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-jxrp-r7gx-q4j8 is a false positive for dompurify 3.2.6-tuxcare.5."
      }
    },
    {
      "id": "GHSA-mjjq-c88q-qhr6",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:a4d5f1c3-9a51-5564-a3ad-8042c651b63d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mjjq-c88q-qhr6 affects version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "GHSA-mrv2-3pqr-j5jr",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:9acefbdf-e509-5d5a-a2df-1d3c201cde09",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-mrv2-3pqr-j5jr is fixed in version 3.2.6-tuxcare.5 of dompurify."
      }
    },
    {
      "id": "GHSA-p98j-92pf-mc4p",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:1211deb9-8406-5e5e-97ec-1690be20ec55",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-p98j-92pf-mc4p affects version 3.2.6-tuxcare.5 of dompurify."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/dompurify@3.2.6-tuxcare.5"
    }
  ]
}