{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2399f84a-0ba5-5bdc-afe8-59e3f00d536e",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/serialize-javascript@3.1.0-tuxcare.1",
      "type": "library",
      "name": "serialize-javascript",
      "version": "3.1.0-tuxcare.1",
      "purl": "pkg:npm/serialize-javascript@3.1.0-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:6c5d28cf-9afd-5bff-9c3f-ece101f1ed69",
      "id": "CVE-2016-2515",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2016-2515 is fixed in version 3.1.0-tuxcare.1 of serialize-javascript."
      },
      "affects": [
        {
          "ref": "pkg:npm/serialize-javascript@3.1.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76fe207c-5d5e-5774-b309-4eafe3e86d6b",
      "id": "CVE-2017-1000048",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2017-1000048 is fixed in version 3.1.0-tuxcare.1 of serialize-javascript."
      },
      "affects": [
        {
          "ref": "pkg:npm/serialize-javascript@3.1.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f00dc5e-86ed-5656-a681-377bc69ddf92",
      "id": "CVE-2017-16137",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2017-16137 is fixed in version 3.1.0-tuxcare.1 of serialize-javascript."
      },
      "affects": [
        {
          "ref": "pkg:npm/serialize-javascript@3.1.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ebbdc7fb-f3fa-5b70-acc9-2e8745767ea9",
      "id": "CVE-2022-29167",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-29167 is fixed in version 3.1.0-tuxcare.1 of serialize-javascript."
      },
      "affects": [
        {
          "ref": "pkg:npm/serialize-javascript@3.1.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f67bd3ab-aee5-5c07-aa9d-b4002139ac32",
      "id": "CVE-2026-34043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-34043 does not affect version 3.1.0-tuxcare.1 of serialize-javascript. not_affected \u2014 Version 3.1.0 is NOT affected by CVE-2026-34043. The vulnerable sparse array detection code (using `instanceof Array` and `.filter()`) was introduced in commit 96431aa after v5.0.0, well after the target version 3.1.0. The vulnerability only affects versions 5.0.1 through 7.0.4. Version 3.1.0 delegates array serialization to native JSON.stringify without custom sparse array handling, making the..."
      },
      "affects": [
        {
          "ref": "pkg:npm/serialize-javascript@3.1.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62fe16e0-ccb9-5d7c-932c-ac36c4368ce0",
      "id": "GHSA-5c6j-r48x-rmvq",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-5c6j-r48x-rmvq is fixed in version 3.1.0-tuxcare.1 of serialize-javascript."
      },
      "affects": [
        {
          "ref": "pkg:npm/serialize-javascript@3.1.0-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/serialize-javascript@3.1.0-tuxcare.1"
    }
  ]
}