{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:90c8c9d3-b681-55f6-b9a4-da3e1220539b",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@sveltejs/kit",
      "purl": "pkg:npm/%40sveltejs/kit@2.70.4",
      "type": "library",
      "bom-ref": "pkg:npm/%40sveltejs/kit@2.70.4",
      "version": "2.70.4",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2023-29003",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@2.70.4"
        }
      ],
      "bom-ref": "urn:uuid:6b3891f9-eca4-5c24-96ed-b2b6ff3251a6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-29003 affects version 2.70.4 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2023-29008",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@2.70.4"
        }
      ],
      "bom-ref": "urn:uuid:bf5f0d93-0e2a-5671-9ba6-1e2d36cae76c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-29008 affects version 2.70.4 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2024-23641",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@2.70.4"
        }
      ],
      "bom-ref": "urn:uuid:0330354d-2b74-5305-9f31-c74ece7b4161",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23641 affects version 2.70.4 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2024-53261",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@2.70.4"
        }
      ],
      "bom-ref": "urn:uuid:71b1b4c5-5ff1-5548-a74e-c679aaa054a7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-53261 affects version 2.70.4 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2024-53262",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@2.70.4"
        }
      ],
      "bom-ref": "urn:uuid:8ab2f86c-45a0-56cd-be14-9fead85f6bc1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-53262 affects version 2.70.4 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2025-32388",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@2.70.4"
        }
      ],
      "bom-ref": "urn:uuid:c7ae142b-1f80-59be-a745-e113ccbc3121",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-32388 affects version 2.70.4 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2025-67647",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@2.70.4"
        }
      ],
      "bom-ref": "urn:uuid:92a08a7e-dde3-5741-a904-c5c062582294",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67647 affects version 2.70.4 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-114060",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@2.70.4"
        }
      ],
      "bom-ref": "urn:uuid:7bc65274-b98d-5615-9e66-615b3dda3a83",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114060 affects version 2.70.4 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-114061",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@2.70.4"
        }
      ],
      "bom-ref": "urn:uuid:9da7c55d-a17d-5f38-a0b5-9feb76adbf4a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114061 affects version 2.70.4 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-22803",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@2.70.4"
        }
      ],
      "bom-ref": "urn:uuid:c19dd450-0eda-5c44-92a0-3c2b12a3bd79",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22803 affects version 2.70.4 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-40073",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@2.70.4"
        }
      ],
      "bom-ref": "urn:uuid:7606d642-cc1d-56c8-9f6c-2f6a4ff38f9a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40073 affects version 2.70.4 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-40074",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@2.70.4"
        }
      ],
      "bom-ref": "urn:uuid:003ae761-21ea-5e03-862c-fa99babaea61",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40074 affects version 2.70.4 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-66062",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@2.70.4"
        }
      ],
      "bom-ref": "urn:uuid:5e3c78b3-15ad-5992-922d-6fd5e4a4ce55",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66062 affects version 2.70.4 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-85pr-xr59-r75h",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@2.70.4"
        }
      ],
      "bom-ref": "urn:uuid:73a41465-d64f-5699-ab23-08c48cef7656",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-85pr-xr59-r75h is a false positive for @sveltejs/kit 2.70.4."
      }
    },
    {
      "id": "GHSA-866w-xmhq-wj7x",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@2.70.4"
        }
      ],
      "bom-ref": "urn:uuid:6da41eed-e6b3-5abc-9279-1ac07ffb0ed8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-866w-xmhq-wj7x affects version 2.70.4 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-88qp-p4qg-rqm6",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@2.70.4"
        }
      ],
      "bom-ref": "urn:uuid:d0a7869a-2cb0-5a89-9fa9-4b7f4306da92",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-88qp-p4qg-rqm6 affects version 2.70.4 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-fpg4-jhqr-589c",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@2.70.4"
        }
      ],
      "bom-ref": "urn:uuid:5c6cf37e-d294-5c2e-9820-1a4a1d1d1560",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-fpg4-jhqr-589c affects version 2.70.4 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-hgv7-v322-mmgr",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@2.70.4"
        }
      ],
      "bom-ref": "urn:uuid:dd548dc6-332d-5316-a0d9-71769641b943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-hgv7-v322-mmgr affects version 2.70.4 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-pvhg-7v4p-f5q9",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@2.70.4"
        }
      ],
      "bom-ref": "urn:uuid:d7551a07-da74-5788-a0e3-edf1ec94a742",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-pvhg-7v4p-f5q9 is a false positive for @sveltejs/kit 2.70.4."
      }
    },
    {
      "id": "GHSA-vrhm-gvg7-fpcf",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@2.70.4"
        }
      ],
      "bom-ref": "urn:uuid:06234009-3306-5cd8-be61-d25f4228fe5e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-vrhm-gvg7-fpcf affects version 2.70.4 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-wqjv-9729-c5q2",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@2.70.4"
        }
      ],
      "bom-ref": "urn:uuid:c52a55c8-82c3-5fa9-915d-a75b97eb7889",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-wqjv-9729-c5q2 affects version 2.70.4 of @sveltejs/kit."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40sveltejs/kit@2.70.4"
    }
  ]
}