{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:1ac506e6-d90d-5380-bc33-5bed0d113990",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/nuxt@4.0.3-tuxcare.4",
      "type": "library",
      "name": "nuxt",
      "version": "4.0.3-tuxcare.4",
      "purl": "pkg:npm/nuxt@4.0.3-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:35a3acdf-d878-5382-bca4-b127c9e5fd4a",
      "id": "CVE-2022-21670",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-21670 is fixed in version 4.0.3-tuxcare.4 of nuxt."
      },
      "affects": [
        {
          "ref": "pkg:npm/nuxt@4.0.3-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d7efaf8-f3e0-55f4-8185-36106de8007f",
      "id": "CVE-2022-25852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-25852 affects version 4.0.3-tuxcare.4 of nuxt."
      },
      "affects": [
        {
          "ref": "pkg:npm/nuxt@4.0.3-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e796fed-f5c4-52ec-8608-eaf501a63a71",
      "id": "CVE-2025-59414",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59414 is fixed in version 4.0.3-tuxcare.4 of nuxt."
      },
      "affects": [
        {
          "ref": "pkg:npm/nuxt@4.0.3-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:935cbbce-ccc0-54f6-ac14-64a9d6e5bb17",
      "id": "CVE-2026-25128",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-25128 is fixed in version 4.0.3-tuxcare.4 of nuxt."
      },
      "affects": [
        {
          "ref": "pkg:npm/nuxt@4.0.3-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c34e609-b546-54f8-8b3e-c1244098d348",
      "id": "CVE-2026-41305",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41305 is fixed in version 4.0.3-tuxcare.4 of nuxt."
      },
      "affects": [
        {
          "ref": "pkg:npm/nuxt@4.0.3-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69707e8f-4818-5d93-8e3d-335fa890ade7",
      "id": "CVE-2026-42338",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2026-42338 is a false positive for nuxt 4.0.3-tuxcare.4. false_positive \u2014 CVE-2026-42338 concerns the 'ip-address' npm package, but this repository is the 'nuxt' framework. The affected component (ip-address library) is completely absent from the repository - not as the project itself, not as vendored/bundled code, and not as a declared dependency. This is a wrong-project match."
      },
      "affects": [
        {
          "ref": "pkg:npm/nuxt@4.0.3-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ccf9198-2751-51d7-ae43-d7feb92c1ec3",
      "id": "CVE-2026-44372",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44372 is fixed in version 4.0.3-tuxcare.4 of nuxt."
      },
      "affects": [
        {
          "ref": "pkg:npm/nuxt@4.0.3-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:335a3d0a-995f-5750-b30a-0a0b297ee0a6",
      "id": "CVE-2026-45669",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45669 is fixed in version 4.0.3-tuxcare.4 of nuxt."
      },
      "affects": [
        {
          "ref": "pkg:npm/nuxt@4.0.3-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:737380e3-eaf8-591e-8523-9103bb74fa72",
      "id": "CVE-2026-45670",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45670 is fixed in version 4.0.3-tuxcare.4 of nuxt."
      },
      "affects": [
        {
          "ref": "pkg:npm/nuxt@4.0.3-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb7a1f7c-91a1-57d0-8fbb-d0e8adc0cf66",
      "id": "CVE-2026-45736",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2026-45736 is a false positive for nuxt 4.0.3-tuxcare.4. false_positive \u2014 CVE-2026-45736 is a wrong-project match. The advisory concerns the 'ws' WebSocket library for Node.js, but the target repository is Nuxt.js framework. The ws library's source code (specifically lib/sender.js containing the vulnerable WebSocket close implementation) does not exist anywhere in this repository. While ws appears as a transitive dependency in pnpm-lock.yaml, no ws source code is pre..."
      },
      "affects": [
        {
          "ref": "pkg:npm/nuxt@4.0.3-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25e282d5-6d7c-58a8-ae78-a529f938a36a",
      "id": "CVE-2026-46342",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46342 is fixed in version 4.0.3-tuxcare.4 of nuxt."
      },
      "affects": [
        {
          "ref": "pkg:npm/nuxt@4.0.3-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a3730f6-5a89-562d-8249-aeb126cb0d1a",
      "id": "CVE-2026-47200",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47200 affects version 4.0.3-tuxcare.4 of nuxt."
      },
      "affects": [
        {
          "ref": "pkg:npm/nuxt@4.0.3-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1bd1dc76-fc21-53c9-9b36-c4a153eb6442",
      "id": "CVE-2026-49993",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49993 is fixed in version 4.0.3-tuxcare.4 of nuxt."
      },
      "affects": [
        {
          "ref": "pkg:npm/nuxt@4.0.3-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:475b6314-3da7-5527-9b29-b2ed216bac3c",
      "id": "CVE-2026-53721",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-53721 is fixed in version 4.0.3-tuxcare.4 of nuxt."
      },
      "affects": [
        {
          "ref": "pkg:npm/nuxt@4.0.3-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d781f4f-5f3a-5aae-9e48-57c1e7972640",
      "id": "CVE-2026-53722",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53722 affects version 4.0.3-tuxcare.4 of nuxt."
      },
      "affects": [
        {
          "ref": "pkg:npm/nuxt@4.0.3-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83b96189-7352-5984-a720-b2dfd4c18ec3",
      "id": "CVE-2026-56326",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56326 is fixed in version 4.0.3-tuxcare.4 of nuxt."
      },
      "affects": [
        {
          "ref": "pkg:npm/nuxt@4.0.3-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:caf1c557-ce9e-591f-a50d-6ad1863e2713",
      "id": "GHSA-534h-c3cw-v3h9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-534h-c3cw-v3h9 is fixed in version 4.0.3-tuxcare.4 of nuxt."
      },
      "affects": [
        {
          "ref": "pkg:npm/nuxt@4.0.3-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e65212b0-2a7a-5e01-9843-d2172a04c652",
      "id": "GHSA-c9cv-mq2m-ppp3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-c9cv-mq2m-ppp3 is fixed in version 4.0.3-tuxcare.4 of nuxt."
      },
      "affects": [
        {
          "ref": "pkg:npm/nuxt@4.0.3-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad78e75d-3614-504e-ac64-cc8f483d9180",
      "id": "GHSA-m3q2-p4fw-w38m",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-m3q2-p4fw-w38m affects version 4.0.3-tuxcare.4 of nuxt."
      },
      "affects": [
        {
          "ref": "pkg:npm/nuxt@4.0.3-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c4af0b26-0609-5bfc-8f78-bcbae3b5f8b2",
      "id": "GHSA-rq7w-g337-39qq",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-rq7w-g337-39qq is fixed in version 4.0.3-tuxcare.4 of nuxt."
      },
      "affects": [
        {
          "ref": "pkg:npm/nuxt@4.0.3-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/nuxt@4.0.3-tuxcare.4"
    }
  ]
}