{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:258ce1cf-7c8a-5e00-b51b-5506ccff581a", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "dompurify", "purl": "pkg:npm/dompurify@3.4.5-tuxcare.6", "type": "library", "bom-ref": "pkg:npm/dompurify@3.4.5-tuxcare.6", "version": "3.4.5-tuxcare.6", "pedigree": { "ancestors": [ { "name": "dompurify", "purl": "pkg:npm/dompurify@3.4.5", "type": "library", "version": "3.4.5" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2019-16728", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:114d9aaa-09ee-5691-9287-f9736143ec37", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-16728 affects version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "CVE-2019-25155", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:386e20ce-6a62-587e-968c-566dc468a7f6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-25155 affects version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "CVE-2020-26870", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:37c84ba5-7171-5757-b69e-511312776b71", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-26870 affects version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "CVE-2024-45801", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:2e785237-2a64-5a7c-ba3b-54ca193bb3c6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-45801 affects version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "CVE-2024-47875", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:39738720-7a8b-599d-ae07-520c90f114b2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-47875 affects version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "CVE-2024-48910", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:387ae973-4fb3-5c04-8164-e3a715cb40cb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-48910 affects version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "CVE-2025-15599", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:c6a0f132-3aa0-54e8-bace-8093e12104ec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-15599 affects version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "CVE-2025-26791", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:31a0b43b-3895-5381-ba03-9b7d5922bdf3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-26791 affects version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "CVE-2026-0540", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:9b62848c-9177-5a88-bf26-057a724548fb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-0540 affects version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "CVE-2026-109345", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:07606218-f175-5f40-bed2-cc496bc60e04", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-109345 is fixed in version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "CVE-2026-116802", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:954b9d0a-6970-5306-8bf8-c859dcd4f9cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-116802 affects version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "CVE-2026-116803", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:aef48a74-485f-55bd-8885-a081b7f4234b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-116803 is fixed in version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "CVE-2026-116804", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:20f29eb0-d54b-5aa8-85b7-4ceb73837c70", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-116804 is fixed in version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "CVE-2026-41238", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:dc62e848-f0fb-5b6f-99bd-0771a3b1c7e0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41238 affects version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "CVE-2026-41239", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:d1c03273-e429-5c2c-92cd-08b14d5d5096", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41239 affects version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "CVE-2026-41240", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:380e9983-c204-55ce-b833-bf362dd84ce2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41240 affects version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "CVE-2026-47423", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:68ce0ad6-25a6-5b1c-b7a7-36b62978a5e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47423 affects version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "CVE-2026-49458", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:fbe80969-c9eb-502c-a255-ad80b72600b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-49458 is fixed in version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "CVE-2026-49459", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:3b58416a-2a0e-5326-a95a-728a06677523", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-49459 is fixed in version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "CVE-2026-49978", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:cf35b87b-cb81-5527-a6cd-6722b15f1bdb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-49978 is fixed in version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "CVE-2026-65898", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:21a29b18-3700-5fb2-a5cd-173d855cea1e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-65898 is fixed in version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "CVE-2026-65899", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:09ba6c18-b18b-5677-a249-a447fdac4fda", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-65899 is fixed in version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "CVE-2026-65900", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:1fdab125-83e1-5ab9-a482-651b60682965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-65900 is fixed in version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "CVE-2026-65901", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:7aebfe4f-1a36-5b8d-ab74-604744b76e76", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-65901 is fixed in version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "CVE-2026-65902", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:5c5b2747-5e47-595f-8257-1296ce1f6771", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-65902 is fixed in version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "CVE-2026-65903", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:02561ad1-7bb0-5959-8155-a9397a12f073", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-65903 affects version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "CVE-2026-65912", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:7f4a7690-bc31-5252-9f3c-b5aebabb9496", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-65912 affects version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "CVE-2026-65913", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:0793d1cc-a60b-504c-baa3-6357ab59fd51", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-65913 affects version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "CVE-2026-65914", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:64a4aa5b-a58d-5359-8a8a-04cc06accea9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-65914 affects version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "CVE-2026-66010", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:d32be5fa-2e6d-5af5-b0c5-95e84850d631", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-66010 is fixed in version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "CVE-2026-75838", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:3cf97369-e58b-5767-bd4d-4e042203ebc9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-75838 is fixed in version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "GHSA-55q2-fjhq-7xh7", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:d3ad1d83-ea24-5adf-9d33-26d25d5ff4ab", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-55q2-fjhq-7xh7 affects version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "GHSA-6688-9rhm-gjv2", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:bee0201c-fd7e-5c10-aa17-28afd341c27d", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-6688-9rhm-gjv2 affects version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "GHSA-c6gr-qvv4-5v3f", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:406cd01e-16c2-5c1f-a778-6986724897e9", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-c6gr-qvv4-5v3f is fixed in version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "GHSA-cg2g-xh64-v4q7", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:9621eaaa-cef3-5dfc-825d-2b08454b436f", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-cg2g-xh64-v4q7 is fixed in version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "GHSA-cmwh-pvxp-8882", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:694568f1-1378-5d91-b706-042ede61fc25", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-cmwh-pvxp-8882 is fixed in version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "GHSA-jxrp-r7gx-q4j8", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:ae830ae0-9a83-5b89-adbb-8d859614328b", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-jxrp-r7gx-q4j8 is a false positive for dompurify 3.4.5-tuxcare.6." } }, { "id": "GHSA-mjjq-c88q-qhr6", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:9b27fad3-738e-5a0e-9c61-a61f82bae3d2", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mjjq-c88q-qhr6 affects version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "GHSA-mrv2-3pqr-j5jr", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:50bea1ce-359b-520e-bb25-b7944f714a7f", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mrv2-3pqr-j5jr is fixed in version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "GHSA-p98j-92pf-mc4p", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:afd3342a-ce59-55b5-b16a-d83e4d08ae96", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-p98j-92pf-mc4p affects version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "GHSA-r47g-fvhr-h676", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:955f3622-26e3-514e-9c43-c814034b8c37", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-r47g-fvhr-h676 is fixed in version 3.4.5-tuxcare.6 of dompurify." } }, { "id": "GHSA-vxr8-fq34-vvx9", "affects": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ], "bom-ref": "urn:uuid:8cd9e0b7-bbae-5a66-802f-225d8b88b8b0", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-vxr8-fq34-vvx9 is fixed in version 3.4.5-tuxcare.6 of dompurify." } } ], "dependencies": [ { "ref": "pkg:npm/dompurify@3.4.5-tuxcare.6" } ] }