{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:29bb2ed2-e38d-5772-924e-dddecd1db53b",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/serialize-javascript@4.0.0-tuxcare.1",
      "type": "library",
      "name": "serialize-javascript",
      "version": "4.0.0-tuxcare.1",
      "purl": "pkg:npm/serialize-javascript@4.0.0-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:84948cf1-f4c4-5bba-b1ef-929c4052bb8a",
      "id": "CVE-2020-7774",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2020-7774 is fixed in version 4.0.0-tuxcare.1 of serialize-javascript."
      },
      "affects": [
        {
          "ref": "pkg:npm/serialize-javascript@4.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00310c7c-05ae-501a-9cfc-c663b9def4e1",
      "id": "CVE-2025-7783",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-7783 is fixed in version 4.0.0-tuxcare.1 of serialize-javascript."
      },
      "affects": [
        {
          "ref": "pkg:npm/serialize-javascript@4.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bdae4c63-6916-50a6-b9f9-29641a399f5e",
      "id": "CVE-2026-34043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-34043 does not affect version 4.0.0-tuxcare.1 of serialize-javascript. not_affected \u2014 Version 4.0.0 does not contain the vulnerable sparse array handling feature that causes CPU exhaustion. The vulnerable code (instanceof Array check with .filter() iteration) was introduced in commit 96431aa after v4.0.0 was released, appearing first in version 5.0.0+."
      },
      "affects": [
        {
          "ref": "pkg:npm/serialize-javascript@4.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f248581-3c8c-5a81-9906-52c33392c26c",
      "id": "GHSA-5c6j-r48x-rmvq",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-5c6j-r48x-rmvq is fixed in version 4.0.0-tuxcare.1 of serialize-javascript."
      },
      "affects": [
        {
          "ref": "pkg:npm/serialize-javascript@4.0.0-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/serialize-javascript@4.0.0-tuxcare.1"
    }
  ]
}