{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:65c29ec3-36d4-5ea9-9e10-8f82c19e6d3b",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/tar@6.2.0-tuxcare.3",
      "type": "library",
      "name": "tar",
      "version": "6.2.0-tuxcare.3",
      "purl": "pkg:npm/tar@6.2.0-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:8b8c87dc-8a4b-571a-b49c-a35353d2a80e",
      "id": "CVE-2021-29489",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-29489 is fixed in version 6.2.0-tuxcare.3 of tar."
      },
      "affects": [
        {
          "ref": "pkg:npm/tar@6.2.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a1c6b7bf-bbf3-5583-b0c8-f8beba0369df",
      "id": "CVE-2024-28863",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-28863 is fixed in version 6.2.0-tuxcare.3 of tar."
      },
      "affects": [
        {
          "ref": "pkg:npm/tar@6.2.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f2ad36a-3043-554c-a148-24e753300467",
      "id": "CVE-2026-23745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-23745 is fixed in version 6.2.0-tuxcare.3 of tar."
      },
      "affects": [
        {
          "ref": "pkg:npm/tar@6.2.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e51c825-1b7b-59c9-bf9b-c70f0e2dbda8",
      "id": "CVE-2026-23950",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-23950 is fixed in version 6.2.0-tuxcare.3 of tar."
      },
      "affects": [
        {
          "ref": "pkg:npm/tar@6.2.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc5503d7-6249-501e-8346-f35be3060833",
      "id": "CVE-2026-24842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24842 affects version 6.2.0-tuxcare.3 of tar."
      },
      "affects": [
        {
          "ref": "pkg:npm/tar@6.2.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bef98fb3-765e-560c-9529-a9574c022e3a",
      "id": "CVE-2026-26960",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-26960 is fixed in version 6.2.0-tuxcare.3 of tar."
      },
      "affects": [
        {
          "ref": "pkg:npm/tar@6.2.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cfa06fe6-1473-56f9-acc5-48c568a3c69e",
      "id": "CVE-2026-29786",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-29786 affects version 6.2.0-tuxcare.3 of tar."
      },
      "affects": [
        {
          "ref": "pkg:npm/tar@6.2.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23766cf4-e74c-559f-906f-6e81a69171a7",
      "id": "CVE-2026-31802",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-31802 affects version 6.2.0-tuxcare.3 of tar."
      },
      "affects": [
        {
          "ref": "pkg:npm/tar@6.2.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8cfd4afb-dd71-5440-b500-d8c19e62b5f1",
      "id": "CVE-2026-53655",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-53655 is fixed in version 6.2.0-tuxcare.3 of tar."
      },
      "affects": [
        {
          "ref": "pkg:npm/tar@6.2.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c74c493-1e29-58d7-9d68-c90800f63d9b",
      "id": "CVE-2026-59871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59871 affects version 6.2.0-tuxcare.3 of tar."
      },
      "affects": [
        {
          "ref": "pkg:npm/tar@6.2.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:623300c2-d12a-5a78-a963-ae3561750422",
      "id": "CVE-2026-59873",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59873 affects version 6.2.0-tuxcare.3 of tar."
      },
      "affects": [
        {
          "ref": "pkg:npm/tar@6.2.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a5156c1-220c-5484-b38a-fca59bc14464",
      "id": "CVE-2026-59874",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59874 affects version 6.2.0-tuxcare.3 of tar."
      },
      "affects": [
        {
          "ref": "pkg:npm/tar@6.2.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13a5ee3a-3987-528c-aeec-b9651e03a58a",
      "id": "CVE-2026-59875",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59875 affects version 6.2.0-tuxcare.3 of tar."
      },
      "affects": [
        {
          "ref": "pkg:npm/tar@6.2.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d12590e1-7760-54df-b32b-c65329899753",
      "id": "GHSA-6chw-6frg-f759",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-6chw-6frg-f759 is fixed in version 6.2.0-tuxcare.3 of tar."
      },
      "affects": [
        {
          "ref": "pkg:npm/tar@6.2.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64a295c8-1098-5f14-8eb9-11c26872b170",
      "id": "GHSA-gr4j-r575-g665",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-gr4j-r575-g665 is fixed in version 6.2.0-tuxcare.3 of tar."
      },
      "affects": [
        {
          "ref": "pkg:npm/tar@6.2.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b90befe8-a596-5237-bb23-39e800a44fd9",
      "id": "GHSA-qffp-2rhf-9h96",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-qffp-2rhf-9h96 affects version 6.2.0-tuxcare.3 of tar."
      },
      "affects": [
        {
          "ref": "pkg:npm/tar@6.2.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9c05971-c0c2-5a6d-ab66-c92b98af70b5",
      "id": "GHSA-r292-9mhp-454m",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-r292-9mhp-454m affects version 6.2.0-tuxcare.3 of tar."
      },
      "affects": [
        {
          "ref": "pkg:npm/tar@6.2.0-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/tar@6.2.0-tuxcare.3"
    }
  ]
}