{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:c304ffa9-fa96-5bd5-89d2-38572caa58a7",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@xmldom/xmldom",
      "purl": "pkg:npm/%40xmldom/xmldom@0.9.10-tuxcare.1",
      "type": "library",
      "bom-ref": "pkg:npm/%40xmldom/xmldom@0.9.10-tuxcare.1",
      "version": "0.9.10-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "@xmldom/xmldom",
            "purl": "pkg:npm/%40xmldom/xmldom@0.9.10",
            "type": "library",
            "version": "0.9.10"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2021-32796",
      "affects": [
        {
          "ref": "pkg:npm/%40xmldom/xmldom@0.9.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9a4c2326-d8f2-5248-9209-c7d510442715",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-32796 affects version 0.9.10-tuxcare.1 of @xmldom/xmldom."
      }
    },
    {
      "id": "CVE-2022-37616",
      "affects": [
        {
          "ref": "pkg:npm/%40xmldom/xmldom@0.9.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8da6b049-3d8d-5da5-b714-9993a8d08457",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2022-37616 is a false positive for @xmldom/xmldom 0.9.10-tuxcare.1."
      }
    },
    {
      "id": "CVE-2022-39353",
      "affects": [
        {
          "ref": "pkg:npm/%40xmldom/xmldom@0.9.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3592933a-1f7b-5594-89ff-788077d6fee8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-39353 affects version 0.9.10-tuxcare.1 of @xmldom/xmldom."
      }
    },
    {
      "id": "CVE-2026-34601",
      "affects": [
        {
          "ref": "pkg:npm/%40xmldom/xmldom@0.9.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2caa7956-f6c0-5ef7-9193-39be907a7d60",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34601 affects version 0.9.10-tuxcare.1 of @xmldom/xmldom."
      }
    },
    {
      "id": "CVE-2026-41672",
      "affects": [
        {
          "ref": "pkg:npm/%40xmldom/xmldom@0.9.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:39559b4a-0887-5eb7-a858-ad020d0dd1d5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41672 affects version 0.9.10-tuxcare.1 of @xmldom/xmldom."
      }
    },
    {
      "id": "CVE-2026-41673",
      "affects": [
        {
          "ref": "pkg:npm/%40xmldom/xmldom@0.9.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b0bed662-01ff-52f4-bf52-f6f430163824",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41673 affects version 0.9.10-tuxcare.1 of @xmldom/xmldom."
      }
    },
    {
      "id": "CVE-2026-41674",
      "affects": [
        {
          "ref": "pkg:npm/%40xmldom/xmldom@0.9.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b38cedf9-4d20-5e89-bace-bcaaac61fadd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41674 affects version 0.9.10-tuxcare.1 of @xmldom/xmldom."
      }
    },
    {
      "id": "CVE-2026-41675",
      "affects": [
        {
          "ref": "pkg:npm/%40xmldom/xmldom@0.9.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:90cd6730-60c1-5d87-8685-e33102b93a56",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41675 affects version 0.9.10-tuxcare.1 of @xmldom/xmldom."
      }
    },
    {
      "id": "CVE-2026-83605",
      "affects": [
        {
          "ref": "pkg:npm/%40xmldom/xmldom@0.9.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:942b109a-932a-5604-8e17-921e073f0370",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-83605 is fixed in version 0.9.10-tuxcare.1 of @xmldom/xmldom."
      }
    },
    {
      "id": "CVE-2026-83606",
      "affects": [
        {
          "ref": "pkg:npm/%40xmldom/xmldom@0.9.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:44a02b5f-91e0-5ea6-9701-6c8a95a0ba5d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-83606 is fixed in version 0.9.10-tuxcare.1 of @xmldom/xmldom."
      }
    },
    {
      "id": "CVE-2026-83607",
      "affects": [
        {
          "ref": "pkg:npm/%40xmldom/xmldom@0.9.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:dc182a7a-3266-532c-9f27-90389e079948",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-83607 is fixed in version 0.9.10-tuxcare.1 of @xmldom/xmldom."
      }
    },
    {
      "id": "CVE-2026-83608",
      "affects": [
        {
          "ref": "pkg:npm/%40xmldom/xmldom@0.9.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:09f708b3-f686-57ad-ae57-b1da62fd2cca",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-83608 is fixed in version 0.9.10-tuxcare.1 of @xmldom/xmldom."
      }
    },
    {
      "id": "CVE-2026-83609",
      "affects": [
        {
          "ref": "pkg:npm/%40xmldom/xmldom@0.9.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:86050b4c-02eb-58fc-9365-66c36c714dbb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-83609 affects version 0.9.10-tuxcare.1 of @xmldom/xmldom, and is fixed in 0.9.10-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-83610",
      "affects": [
        {
          "ref": "pkg:npm/%40xmldom/xmldom@0.9.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3db322a4-b852-5d66-bb53-32dc58727ad5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-83610 is fixed in version 0.9.10-tuxcare.1 of @xmldom/xmldom."
      }
    },
    {
      "id": "CVE-2026-83611",
      "affects": [
        {
          "ref": "pkg:npm/%40xmldom/xmldom@0.9.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0abc49ea-4385-5bf0-8a6e-c5c25835497d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-83611 affects version 0.9.10-tuxcare.1 of @xmldom/xmldom, and is fixed in 0.9.10-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-83612",
      "affects": [
        {
          "ref": "pkg:npm/%40xmldom/xmldom@0.9.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9e148bea-3292-5bcd-991c-666e0a54033e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-83612 is fixed in version 0.9.10-tuxcare.1 of @xmldom/xmldom."
      }
    },
    {
      "id": "CVE-2026-83613",
      "affects": [
        {
          "ref": "pkg:npm/%40xmldom/xmldom@0.9.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:847696f2-986e-507c-9cd5-43506e417198",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-83613 is fixed in version 0.9.10-tuxcare.1 of @xmldom/xmldom."
      }
    },
    {
      "id": "CVE-2026-83614",
      "affects": [
        {
          "ref": "pkg:npm/%40xmldom/xmldom@0.9.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6df74aa6-7e24-599a-ba7b-43255a12ca4f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-83614 is fixed in version 0.9.10-tuxcare.1 of @xmldom/xmldom."
      }
    },
    {
      "id": "CVE-2026-83615",
      "affects": [
        {
          "ref": "pkg:npm/%40xmldom/xmldom@0.9.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:99a96787-564f-5592-87bd-0798c99b522c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-83615 affects version 0.9.10-tuxcare.1 of @xmldom/xmldom, and is fixed in 0.9.10-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-83616",
      "affects": [
        {
          "ref": "pkg:npm/%40xmldom/xmldom@0.9.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:74c6fd43-48cf-5ede-be8c-8a098743b05f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-83616 affects version 0.9.10-tuxcare.1 of @xmldom/xmldom, and is fixed in 0.9.10-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-83617",
      "affects": [
        {
          "ref": "pkg:npm/%40xmldom/xmldom@0.9.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:509d2457-5d4d-5181-9747-8b9b5bae10fc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-83617 affects version 0.9.10-tuxcare.1 of @xmldom/xmldom."
      }
    },
    {
      "id": "CVE-2026-83618",
      "affects": [
        {
          "ref": "pkg:npm/%40xmldom/xmldom@0.9.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:17e6cdb0-8c57-541f-b346-dac0d6702b64",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-83618 is fixed in version 0.9.10-tuxcare.1 of @xmldom/xmldom."
      }
    },
    {
      "id": "CVE-2026-83619",
      "affects": [
        {
          "ref": "pkg:npm/%40xmldom/xmldom@0.9.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0a2c7505-3e99-53d6-8f04-812142e1ec08",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-83619 affects version 0.9.10-tuxcare.1 of @xmldom/xmldom."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40xmldom/xmldom@0.9.10-tuxcare.1"
    }
  ]
}