{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:cfa18f0a-a950-5192-9a7f-e3e25eeb5be9",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/tar@6.1.15-tuxcare.1",
      "type": "library",
      "name": "tar",
      "version": "6.1.15-tuxcare.1",
      "purl": "pkg:npm/tar@6.1.15-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:7d2dd1d6-4f87-5fbc-89fd-8fd79d2d5d2a",
      "id": "CVE-2024-28863",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-28863 affects version 6.1.15-tuxcare.1 of tar."
      },
      "affects": [
        {
          "ref": "pkg:npm/tar@6.1.15-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49985512-a577-5f49-b558-3045287f4281",
      "id": "CVE-2026-23745",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-23745 does not affect version 6.1.15-tuxcare.1 of tar. CVE-2026-23745 fix already exists in commit b8f98d4e9cff5b5afab83b6c18a29bd914c3076e"
      },
      "affects": [
        {
          "ref": "pkg:npm/tar@6.1.15-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93c968e4-c1c7-579e-9edd-5f3f0aadeb53",
      "id": "CVE-2026-23950",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-23950 does not affect version 6.1.15-tuxcare.1 of tar. CVE-2026-23950 fix already exists in commit e070fb8dae2284da050eedd6e4a4e560b09fe36c"
      },
      "affects": [
        {
          "ref": "pkg:npm/tar@6.1.15-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7c6e288-4d99-5f56-8f6d-ad3464238a10",
      "id": "CVE-2026-24842",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-24842 does not affect version 6.1.15-tuxcare.1 of tar. CVE-2026-24842 fix already exists in commit 8e3c4c8ed01073d5df52e6b25adfe445bdf635c4"
      },
      "affects": [
        {
          "ref": "pkg:npm/tar@6.1.15-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e1251ae-6841-52c6-bcb9-8b3af2e7d885",
      "id": "CVE-2026-26960",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-26960 is fixed in version 6.1.15-tuxcare.1 of tar."
      },
      "affects": [
        {
          "ref": "pkg:npm/tar@6.1.15-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c60263a7-5205-548d-905a-a2c78f04d99d",
      "id": "CVE-2026-29786",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-29786 does not affect version 6.1.15-tuxcare.1 of tar. CVE-2026-29786 fix already exists in commit 7b089d96cfae892c77b1590f89b485b6a1c7fb5a"
      },
      "affects": [
        {
          "ref": "pkg:npm/tar@6.1.15-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4705e4d-1d33-5fd1-bbb1-865e939f5838",
      "id": "CVE-2026-31802",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-31802 is fixed in version 6.1.15-tuxcare.1 of tar."
      },
      "affects": [
        {
          "ref": "pkg:npm/tar@6.1.15-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:655dde0e-9b02-5aa9-9f30-9a95ce8be12e",
      "id": "CVE-2026-53655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53655 affects version 6.1.15-tuxcare.1 of tar."
      },
      "affects": [
        {
          "ref": "pkg:npm/tar@6.1.15-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0af048d-0e58-5ee6-88b4-849a502d9c80",
      "id": "CVE-2026-59871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59871 affects version 6.1.15-tuxcare.1 of tar."
      },
      "affects": [
        {
          "ref": "pkg:npm/tar@6.1.15-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36548168-b871-5012-9045-21da26f2f19b",
      "id": "CVE-2026-59873",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59873 affects version 6.1.15-tuxcare.1 of tar."
      },
      "affects": [
        {
          "ref": "pkg:npm/tar@6.1.15-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6167220e-493f-5c40-8d56-3e0f95fecfe8",
      "id": "CVE-2026-59874",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59874 affects version 6.1.15-tuxcare.1 of tar."
      },
      "affects": [
        {
          "ref": "pkg:npm/tar@6.1.15-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e74c19f-35cb-584c-b517-4a17bb59788c",
      "id": "CVE-2026-59875",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59875 affects version 6.1.15-tuxcare.1 of tar."
      },
      "affects": [
        {
          "ref": "pkg:npm/tar@6.1.15-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4732226-0b3d-5340-94e8-6873a2e95607",
      "id": "GHSA-r292-9mhp-454m",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-r292-9mhp-454m affects version 6.1.15-tuxcare.1 of tar."
      },
      "affects": [
        {
          "ref": "pkg:npm/tar@6.1.15-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/tar@6.1.15-tuxcare.1"
    }
  ]
}