{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:32c9578a-d9ea-5fec-899a-cfee55f906d0",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@babel/runtime",
      "purl": "pkg:npm/%40babel/runtime@7.29.0-tuxcare.6",
      "type": "library",
      "bom-ref": "pkg:npm/%40babel/runtime@7.29.0-tuxcare.6",
      "version": "7.29.0-tuxcare.6",
      "pedigree": {
        "ancestors": [
          {
            "name": "@babel/runtime",
            "purl": "pkg:npm/%40babel/runtime@7.29.0",
            "type": "library",
            "version": "7.29.0"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-27789",
      "affects": [
        {
          "ref": "pkg:npm/%40babel/runtime@7.29.0-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:8755626b-3bfc-50ed-ae0f-573f1902bb55",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-27789 does not affect version 7.29.0-tuxcare.6 of @babel/runtime. not_affected \u2014 The target repository (babel 7.29.0-tuxcare.2) is NOT AFFECTED by CVE-2025-27789. The vulnerability (ReDoS in wrapRegExp's replacement pattern processing) was fixed by upstream commit d5952e80c0faa5ec20e35085531b6e572d31dad4 in March 2025, which was included in upstream release v7.26.10. This fix was already present in the upstream codebase before TuxCare onboarded this version (first TuxCare c...",
        "justification": "code_not_present"
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40babel/runtime@7.29.0-tuxcare.6"
    }
  ]
}