{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:38cb762a-e42b-5966-958a-8be3c0c83cbf",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@sveltejs/kit",
      "purl": "pkg:npm/%40sveltejs/kit@3.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/%40sveltejs/kit@3.0.1",
      "version": "3.0.1",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2023-29003",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:4d64d1fa-d7ed-51fd-9c3b-e10c2962f947",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-29003 affects version 3.0.1 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2023-29008",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:27b9e127-1c9a-5ad9-a855-57b6182c33cc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-29008 affects version 3.0.1 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2024-23641",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:c69a31cf-6285-55d2-b336-16d1fe07ab4e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23641 affects version 3.0.1 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2024-53261",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:359c0064-5fd5-598d-afc0-f795e7c5bf14",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-53261 affects version 3.0.1 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2024-53262",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:7e05fe7f-19ec-5d9f-aa85-97109ae2ed20",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-53262 affects version 3.0.1 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2025-32388",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:f2cad0c0-0fdb-5f36-9233-c817ade8a07b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-32388 affects version 3.0.1 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2025-67647",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:1250eaed-e525-5275-a901-16300e544c48",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-67647 affects version 3.0.1 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-114060",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:c7cf5392-b4fd-54e5-aeb3-612e2ad11621",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114060 affects version 3.0.1 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-114061",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:8164259e-d15e-5dc5-885b-7ab8be18d752",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114061 affects version 3.0.1 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-22803",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:35d15e23-17b6-5269-8ea2-4ad10a3a2061",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22803 affects version 3.0.1 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-40073",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:3d775f3b-2c6f-5242-a4c0-4ea7742b7df0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40073 affects version 3.0.1 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-40074",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:a56d92b8-8e6d-56a9-9c4e-95ea1eccedc2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40074 affects version 3.0.1 of @sveltejs/kit."
      }
    },
    {
      "id": "CVE-2026-66062",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:8e78a849-cc99-5e93-b504-e6dd59f9066a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66062 affects version 3.0.1 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-85pr-xr59-r75h",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:e186c2ce-49c5-5e68-b242-a65655531dad",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-85pr-xr59-r75h is a false positive for @sveltejs/kit 3.0.1."
      }
    },
    {
      "id": "GHSA-866w-xmhq-wj7x",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:8305cbcf-d80c-5284-b443-157851ac981b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-866w-xmhq-wj7x affects version 3.0.1 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-88qp-p4qg-rqm6",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:ff67898a-8d54-5625-af27-3665ab11c745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-88qp-p4qg-rqm6 affects version 3.0.1 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-fpg4-jhqr-589c",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:b253f91c-c74e-5247-8153-c5bb38a2cb5e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-fpg4-jhqr-589c affects version 3.0.1 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-hgv7-v322-mmgr",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:ae4375ae-02b2-51d6-acde-629d2ae85027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-hgv7-v322-mmgr affects version 3.0.1 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-pvhg-7v4p-f5q9",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:2e2da0f2-7022-56d0-a4a8-743c15a09359",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-pvhg-7v4p-f5q9 is a false positive for @sveltejs/kit 3.0.1."
      }
    },
    {
      "id": "GHSA-vrhm-gvg7-fpcf",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:ac6303ac-4582-528c-b055-e5b1ba996436",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-vrhm-gvg7-fpcf affects version 3.0.1 of @sveltejs/kit."
      }
    },
    {
      "id": "GHSA-wqjv-9729-c5q2",
      "affects": [
        {
          "ref": "pkg:npm/%40sveltejs/kit@3.0.1"
        }
      ],
      "bom-ref": "urn:uuid:4a04ba90-003f-58c2-a867-57d077beddc9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-wqjv-9729-c5q2 affects version 3.0.1 of @sveltejs/kit."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40sveltejs/kit@3.0.1"
    }
  ]
}