{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:59b978aa-3c75-53c1-a5e6-1507a8a49865",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:composer/drupal/core@8.9.20-p1+tuxcare",
      "type": "library",
      "group": "drupal",
      "name": "core",
      "version": "8.9.20-p1+tuxcare",
      "purl": "pkg:composer/drupal/core@8.9.20-p1+tuxcare"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:86070eec-b9a7-5941-a301-743710459a87",
      "id": "CVE-2022-25270",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25270 is fixed in version 8.9.20-p1+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03539f72-b39a-51ce-a2ba-ec76953d2106",
      "id": "CVE-2022-25271",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25271 is fixed in version 8.9.20-p1+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c64edff5-04cb-5e16-b7a5-7dcf46a69143",
      "id": "CVE-2022-25273",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25273 is fixed in version 8.9.20-p1+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3fcb2959-6299-5cf3-97c3-a900fda725d4",
      "id": "CVE-2022-25275",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25275 is fixed in version 8.9.20-p1+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ea70225-0abd-5365-a83e-c7f3ed5bbf8e",
      "id": "CVE-2022-25276",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25276 is fixed in version 8.9.20-p1+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28cf7712-f18f-5094-bc9c-673ba4e37b90",
      "id": "CVE-2022-25277",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25277 is fixed in version 8.9.20-p1+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28b0cb14-b425-574c-8505-2ced2d00ba4e",
      "id": "CVE-2022-25278",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25278 is fixed in version 8.9.20-p1+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22e58dce-f41f-5a95-9f85-6ad8aee012ad",
      "id": "CVE-2023-5256",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-5256 is fixed in version 8.9.20-p1+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44e34410-e903-5c6f-b3ec-fc819c855d0c",
      "id": "CVE-2024-12393",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-12393 is fixed in version 8.9.20-p1+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d2fbe80-8d2e-5729-bcf9-82d1700d11ac",
      "id": "CVE-2024-55634",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-55634 is fixed in version 8.9.20-p1+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ac6c949-ab72-5210-9e9b-d29ba63bc09e",
      "id": "CVE-2024-55636",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-55636 is fixed in version 8.9.20-p1+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2898f9a5-d816-5a4d-9718-a7a557e1420d",
      "id": "CVE-2024-55637",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-55637 is fixed in version 8.9.20-p1+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a053ab1a-fdce-5da8-bd8a-7bd817d6eaa8",
      "id": "CVE-2024-55638",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-55638 is fixed in version 8.9.20-p1+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64e9099e-458c-5430-9939-4d400cb91642",
      "id": "CVE-2025-13080",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-13080 is fixed in version 8.9.20-p1+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a2bfff5-df98-51c5-bcde-c6378baecd80",
      "id": "CVE-2025-13081",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-13081 affects version 8.9.20-p1+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60146035-02d4-5a13-a932-51b224879331",
      "id": "CVE-2025-13082",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-13082 affects version 8.9.20-p1+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5b30503-03e3-50cb-8eb2-3adf0ff74555",
      "id": "CVE-2025-13083",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-13083 affects version 8.9.20-p1+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:167a78a7-0c1f-5890-9302-b7939d525a7c",
      "id": "CVE-2025-3057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-3057 affects version 8.9.20-p1+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94d86a28-d0f6-5907-99c3-c02c640efc54",
      "id": "CVE-2025-31673",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31673 is fixed in version 8.9.20-p1+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc84d42a-2183-591c-8a83-7d75fd6a6e9b",
      "id": "CVE-2025-31674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31674 is fixed in version 8.9.20-p1+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0cc287be-fdbc-515b-a795-1548c021d270",
      "id": "CVE-2025-31675",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31675 is fixed in version 8.9.20-p1+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31a8e407-48f9-5cc1-8954-277d430169e3",
      "id": "CVE-2026-6365",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-6365 is fixed in version 8.9.20-p1+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30fce05a-10b6-5692-b563-48767e1273bb",
      "id": "CVE-2026-6366",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-6366 is fixed in version 8.9.20-p1+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bcb00c07-12cb-56d6-b969-ecf44e056015",
      "id": "CVE-2026-9082",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-9082 is fixed in version 8.9.20-p1+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6da4770-2341-5056-835f-33416fa6172e",
      "id": "GHSA-6ccv-8fgf-cjpw",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-6ccv-8fgf-cjpw is fixed in version 8.9.20-p1+tuxcare of drupal/core."
      },
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p1+tuxcare"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:composer/drupal/core@8.9.20-p1+tuxcare"
    }
  ]
}