{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:27a37a70-a885-5e97-95d1-beff3ceb52de",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "dompurify",
      "purl": "pkg:npm/dompurify@3.4.5-tuxcare.4",
      "type": "library",
      "bom-ref": "pkg:npm/dompurify@3.4.5-tuxcare.4",
      "version": "3.4.5-tuxcare.4",
      "pedigree": {
        "ancestors": [
          {
            "name": "dompurify",
            "purl": "pkg:npm/dompurify@3.4.5",
            "type": "library",
            "version": "3.4.5"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2019-16728",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:6f22d9f9-d518-597d-bb3f-1783ce598071",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-16728 affects version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2019-25155",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:0d19d2db-406c-5362-a921-5239a795a85a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-25155 affects version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2020-26870",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:180537c3-1151-56f8-9437-b140b35064a9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-26870 affects version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2024-45801",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:01af5313-5f95-5ae7-b1c8-21c88dbbdf1c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-45801 affects version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2024-47875",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:1fd4f525-2568-5c5e-b836-6ac6b1a64e85",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47875 affects version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2024-48910",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:4a01f6d2-fca7-5592-bad7-d5cd8e5e15ce",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-48910 affects version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2025-15599",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:5896b2a9-8324-5e1b-96c5-e98a9ea977fd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-15599 affects version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2025-26791",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:465a86e0-77c9-5ae4-8cf2-82a3d580196b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-26791 affects version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-0540",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:133d29aa-1c88-54a6-bf53-a52f67ee970e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-0540 affects version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-109345",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:8cfe83df-af12-5d0e-988b-abb017d4c2c6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-109345 is fixed in version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-116802",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:c2bc998a-5f0e-59b7-993e-23d9ee704e36",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-116802 affects version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-116803",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:f2975c1d-4823-5ed2-8d74-71ea13f2de05",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-116803 affects version 3.4.5-tuxcare.4 of dompurify, and is fixed in 3.4.5-tuxcare.5."
      }
    },
    {
      "id": "CVE-2026-116804",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:23e83952-e7c8-5e6f-94b5-291c3b5a7826",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-116804 affects version 3.4.5-tuxcare.4 of dompurify, and is fixed in 3.4.5-tuxcare.5."
      }
    },
    {
      "id": "CVE-2026-41238",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:f130917b-535e-5dd3-9861-9601181fcf4a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41238 affects version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41239",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:84ee4285-687e-5824-95fa-bbaebd176da2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41239 affects version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-41240",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:7d15ad1b-cf4a-5012-81e7-304d2bf5c88a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41240 affects version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-47423",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:0a57e40b-1e87-5cdb-967f-d9aad002a189",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47423 affects version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49458",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:3157fe17-fcdd-56d9-ad2e-e4971aadf775",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49458 is fixed in version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49459",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:ce352431-c98a-52c6-8945-7b61cbdfc035",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49459 is fixed in version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49978",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:235da146-91b2-5955-ba2b-f5a16c5708eb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49978 is fixed in version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65898",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:adac3edc-904a-5fea-bb06-c9cc4c2313c8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65898 is fixed in version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65899",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:d0fc1d75-0bb4-5b68-8b34-ba6e32ec871d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65899 is fixed in version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65900",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:f6417af0-af6e-599e-a751-cef8fef15c4b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65900 is fixed in version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65901",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:1a1e62a2-0c93-590d-b772-b3eb38c12e56",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65901 is fixed in version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65902",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:52fe8033-bbdc-5ebf-8252-39d71709d71d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65902 is fixed in version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65903",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:283842d1-566a-56a2-a29c-d2f3896c091a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65903 affects version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65912",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:b5520e24-99cd-5b22-af08-ef6878b5bc14",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65912 affects version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65913",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:ee9f4068-39c3-5cba-b420-08fcf5798481",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65913 affects version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65914",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:77577dee-3339-599b-b0cd-109232efa920",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65914 affects version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-66010",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:72276368-4207-5d60-984b-9c810967ab17",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-66010 is fixed in version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-75838",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:ac295cd0-d4bd-5116-9200-cc1897b0be0f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-75838 is fixed in version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "GHSA-55q2-fjhq-7xh7",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:7ee0273f-c1f4-5225-b90f-6842ab0f7a1b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-55q2-fjhq-7xh7 affects version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "GHSA-6688-9rhm-gjv2",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:453b5229-96dd-56d2-9712-691c7a5ba284",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-6688-9rhm-gjv2 affects version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "GHSA-c6gr-qvv4-5v3f",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:bdc5e05d-4258-5d25-8518-a11ef53ad835",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-c6gr-qvv4-5v3f is fixed in version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "GHSA-cg2g-xh64-v4q7",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:d7f654c4-7753-525f-97a4-a957dc35ab8b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-cg2g-xh64-v4q7 affects version 3.4.5-tuxcare.4 of dompurify, and is fixed in 3.4.5-tuxcare.6."
      }
    },
    {
      "id": "GHSA-cmwh-pvxp-8882",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:5796eb3d-e046-5d33-9f1d-c8793bf60c52",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-cmwh-pvxp-8882 is fixed in version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "GHSA-jxrp-r7gx-q4j8",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:2bcd1792-1749-5182-8a65-998e729a3213",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-jxrp-r7gx-q4j8 is a false positive for dompurify 3.4.5-tuxcare.4."
      }
    },
    {
      "id": "GHSA-mjjq-c88q-qhr6",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:9e598cec-9f6c-5d70-b335-90604f73e3cc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mjjq-c88q-qhr6 affects version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "GHSA-mrv2-3pqr-j5jr",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:31ce3096-4b26-5f30-9336-706544a7ffda",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mrv2-3pqr-j5jr affects version 3.4.5-tuxcare.4 of dompurify, and is fixed in 3.4.5-tuxcare.5."
      }
    },
    {
      "id": "GHSA-p98j-92pf-mc4p",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:e5b1655a-851f-55d2-a520-2b317930321d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-p98j-92pf-mc4p affects version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "GHSA-r47g-fvhr-h676",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:7ab8a03e-f5ee-5e2c-a79c-4f8c46e561d3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-r47g-fvhr-h676 is fixed in version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "GHSA-vxr8-fq34-vvx9",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:3d8e16ce-c28b-50a8-ab66-0025fde3277d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-vxr8-fq34-vvx9 is fixed in version 3.4.5-tuxcare.4 of dompurify."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
    }
  ]
}