{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:bdbbee5d-a16c-56f6-8c21-9460e1dc3ffe", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "dompurify", "purl": "pkg:npm/dompurify@3.4.5-tuxcare.5", "type": "library", "bom-ref": "pkg:npm/dompurify@3.4.5-tuxcare.5", "version": "3.4.5-tuxcare.5", "pedigree": { "ancestors": [ { "name": "dompurify", "purl": "pkg:npm/dompurify@3.4.5", "type": "library", "version": "3.4.5" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2019-16728", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:16acdef8-df90-5eb5-9b6f-8d3fc3a21875", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-16728 affects version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "CVE-2019-25155", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:883a71e2-6225-5187-bc2e-b554fb5d2ca8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-25155 affects version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "CVE-2020-26870", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:56a0e513-506d-5ee3-af4c-c6370c6be81b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-26870 affects version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "CVE-2024-45801", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:47846954-9bf2-5479-8534-f59226557944", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45801 affects version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "CVE-2024-47875", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:15d4f789-015b-5fa7-899a-f61854b012a3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-47875 affects version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "CVE-2024-48910", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:9a925ff1-a716-5c99-a6df-d0cac94199ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-48910 affects version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "CVE-2025-15599", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:7e79b624-fc36-50ae-bc2c-a2343ae8f855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-15599 affects version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "CVE-2025-26791", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:6d240420-159f-57cd-9879-d00e0f69d826", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-26791 affects version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "CVE-2026-0540", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:31be85d5-91f8-53ea-a14f-a931e585ad21", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-0540 affects version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "CVE-2026-109345", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:5ecf80ff-829c-5dfc-8653-9cf8db8c1c31", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-109345 is fixed in version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "CVE-2026-116802", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:6efeba99-5460-5316-bdf9-a1226bf98294", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-116802 affects version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "CVE-2026-116803", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:e0a63f09-3c73-56d4-93a4-e9287b573a07", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-116803 is fixed in version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "CVE-2026-116804", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:266a5b32-8d6d-5350-ab6b-255905ca1ccd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-116804 is fixed in version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "CVE-2026-41238", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:97d9006a-0a4a-5872-9577-25c91e7b860f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41238 affects version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "CVE-2026-41239", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:6ec93cce-a2cc-5026-837f-f91e31fdc048", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41239 affects version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "CVE-2026-41240", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:66e528c4-80f2-5540-9f57-2a9cbb91ae9d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41240 affects version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "CVE-2026-47423", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:e6b1389e-bded-5374-b132-d58a78e7c75e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47423 affects version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "CVE-2026-49458", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:2a7d201f-81e6-5142-beb0-5c5a5fa35a3d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-49458 is fixed in version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "CVE-2026-49459", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:c50db77e-85e9-5e4d-8ef5-f5e425ea17e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-49459 is fixed in version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "CVE-2026-49978", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:e3e44928-ada5-544c-966c-bf25d4d8b02b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-49978 is fixed in version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "CVE-2026-65898", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:d8a35a56-709a-5fa0-a2f5-ed5ef84b81b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-65898 is fixed in version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "CVE-2026-65899", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:14dd0014-7e79-5e86-a4dc-9f33f8f382b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-65899 is fixed in version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "CVE-2026-65900", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:68ee44b2-7674-5126-90a0-0fa773a610a7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-65900 is fixed in version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "CVE-2026-65901", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:c5c2e28f-fbdd-5be4-9f1c-0dd9b7833c68", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-65901 is fixed in version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "CVE-2026-65902", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:c74dc81a-2fc6-59b8-9b8a-273c2dc00319", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-65902 is fixed in version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "CVE-2026-65903", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:98477967-5ab9-5542-ba78-d353ff29e701", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-65903 affects version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "CVE-2026-65912", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:0d9faa8d-2df2-5159-88ce-f0a5e68cb8fc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-65912 affects version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "CVE-2026-65913", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:9eff4527-ac81-50cf-bb30-bb78efd6adfc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-65913 affects version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "CVE-2026-65914", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:325309db-a1ca-546d-bfad-7a95588c810c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-65914 affects version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "CVE-2026-66010", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:6efa8f74-071b-58d8-9ae8-056b9379ef29", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-66010 is fixed in version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "CVE-2026-75838", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:02c92fdb-ef6b-5222-806c-fd1be844543b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-75838 is fixed in version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "GHSA-55q2-fjhq-7xh7", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:5fb5c754-5340-5c64-a5d4-44b02240b605", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-55q2-fjhq-7xh7 affects version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "GHSA-6688-9rhm-gjv2", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:21f17360-f013-5481-a9f1-da6f07f3e91b", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-6688-9rhm-gjv2 affects version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "GHSA-c6gr-qvv4-5v3f", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:70d4cae1-d010-5c1b-93f8-bed0570b624f", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-c6gr-qvv4-5v3f is fixed in version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "GHSA-cg2g-xh64-v4q7", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:5b5a6481-659b-5a51-8267-c95d74318e24", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-cg2g-xh64-v4q7 affects version 3.4.5-tuxcare.5 of dompurify, and is fixed in 3.4.5-tuxcare.6." } }, { "id": "GHSA-cmwh-pvxp-8882", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:4fbe22ee-43f3-5de9-9568-33ea6fcb1657", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-cmwh-pvxp-8882 is fixed in version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "GHSA-jxrp-r7gx-q4j8", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:f9413aeb-5325-5b53-971e-c16f39a9e68b", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-jxrp-r7gx-q4j8 is a false positive for dompurify 3.4.5-tuxcare.5." } }, { "id": "GHSA-mjjq-c88q-qhr6", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:7b2ee950-a131-5baa-80bd-34383e267c11", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mjjq-c88q-qhr6 affects version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "GHSA-mrv2-3pqr-j5jr", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:eacfc511-7de2-59e0-b11d-c19602b8a8e4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mrv2-3pqr-j5jr is fixed in version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "GHSA-p98j-92pf-mc4p", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:86eb9279-28a3-5865-b392-881d2777b6c9", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-p98j-92pf-mc4p affects version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "GHSA-r47g-fvhr-h676", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:5154fabc-1b1d-5474-8b40-2b871bb85a85", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-r47g-fvhr-h676 is fixed in version 3.4.5-tuxcare.5 of dompurify." } }, { "id": "GHSA-vxr8-fq34-vvx9", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ], "bom-ref": "urn:uuid:b237d4e9-7a01-5ae2-82d1-e6f7f9e9300a", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-vxr8-fq34-vvx9 is fixed in version 3.4.5-tuxcare.5 of dompurify." } } ], "dependencies": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.5" } ] }