{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:22251392-9005-5bc3-afbf-ad8613786ec6",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "better-auth",
      "purl": "pkg:npm/better-auth@1.7.16",
      "type": "library",
      "bom-ref": "pkg:npm/better-auth@1.7.16",
      "version": "1.7.16",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-56734",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.16"
        }
      ],
      "bom-ref": "urn:uuid:7fd86e8c-a16e-59c0-8cf2-f7c9b343297c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56734 affects version 1.7.16 of better-auth."
      }
    },
    {
      "id": "CVE-2025-27143",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.16"
        }
      ],
      "bom-ref": "urn:uuid:02083b55-e38e-58c8-babb-51afa916a975",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27143 affects version 1.7.16 of better-auth."
      }
    },
    {
      "id": "CVE-2025-53535",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.16"
        }
      ],
      "bom-ref": "urn:uuid:a64056c2-7bf4-5a55-9edc-b0ed000422da",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-53535 affects version 1.7.16 of better-auth."
      }
    },
    {
      "id": "CVE-2025-61928",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.16"
        }
      ],
      "bom-ref": "urn:uuid:75ee38d7-bddb-590c-bc40-296688ca8ba7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-61928 affects version 1.7.16 of better-auth."
      }
    },
    {
      "id": "CVE-2025-71401",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.16"
        }
      ],
      "bom-ref": "urn:uuid:2da85bd1-7f31-560e-a8f3-ce62e4eabaae",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-71401 affects version 1.7.16 of better-auth."
      }
    },
    {
      "id": "CVE-2026-114607",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.16"
        }
      ],
      "bom-ref": "urn:uuid:637e537a-7d71-5103-a837-697069755032",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114607 affects version 1.7.16 of better-auth."
      }
    },
    {
      "id": "CVE-2026-45337",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.16"
        }
      ],
      "bom-ref": "urn:uuid:40f804e7-90f9-51d1-b5fb-6a5572890524",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45337 affects version 1.7.16 of better-auth."
      }
    },
    {
      "id": "CVE-2026-45364",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.16"
        }
      ],
      "bom-ref": "urn:uuid:4767c8ce-ebc5-5111-bba0-32c894c4b4f6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45364 affects version 1.7.16 of better-auth."
      }
    },
    {
      "id": "CVE-2026-53512",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.16"
        }
      ],
      "bom-ref": "urn:uuid:047edf6f-f843-5e3d-b9f1-92936faf8901",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53512 affects version 1.7.16 of better-auth."
      }
    },
    {
      "id": "CVE-2026-53514",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.16"
        }
      ],
      "bom-ref": "urn:uuid:7f4be5b7-d61c-5b61-963d-52068f8e3918",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53514 affects version 1.7.16 of better-auth."
      }
    },
    {
      "id": "CVE-2026-53516",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.16"
        }
      ],
      "bom-ref": "urn:uuid:ea627b7d-217f-500e-879a-8c167c7a8568",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53516 affects version 1.7.16 of better-auth."
      }
    },
    {
      "id": "CVE-2026-53517",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.16"
        }
      ],
      "bom-ref": "urn:uuid:9324277e-e1e0-5a87-ba3d-04399d341915",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53517 affects version 1.7.16 of better-auth."
      }
    },
    {
      "id": "CVE-2026-53518",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.16"
        }
      ],
      "bom-ref": "urn:uuid:71c523cc-43d9-5d27-8815-6040a8ecdbbf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53518 affects version 1.7.16 of better-auth."
      }
    },
    {
      "id": "GHSA-2vg6-77g8-24mp",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.16"
        }
      ],
      "bom-ref": "urn:uuid:1a846890-b9cf-50d3-8c9e-75ca64116039",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-2vg6-77g8-24mp affects version 1.7.16 of better-auth."
      }
    },
    {
      "id": "GHSA-3q45-2fh7-66cj",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.16"
        }
      ],
      "bom-ref": "urn:uuid:1d2c3b04-711a-5a0b-b3cb-39bb9a455966",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-3q45-2fh7-66cj is a false positive for better-auth 1.7.16."
      }
    },
    {
      "id": "GHSA-44jh-23m7-hpcf",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.16"
        }
      ],
      "bom-ref": "urn:uuid:c195ee6f-7f02-5c2a-a470-8e7328b2e4d8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-44jh-23m7-hpcf affects version 1.7.16 of better-auth."
      }
    },
    {
      "id": "GHSA-86j7-9j95-vpqj",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.16"
        }
      ],
      "bom-ref": "urn:uuid:7d415867-2cc8-51c8-8602-0ab12610569d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-86j7-9j95-vpqj affects version 1.7.16 of better-auth."
      }
    },
    {
      "id": "GHSA-9h47-pqcx-hjr4",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.16"
        }
      ],
      "bom-ref": "urn:uuid:4f079e52-4acb-5e95-a1fc-f2e16a1514a6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-9h47-pqcx-hjr4 affects version 1.7.16 of better-auth."
      }
    },
    {
      "id": "GHSA-9x4v-xfq5-m8x5",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.16"
        }
      ],
      "bom-ref": "urn:uuid:a2be1c45-edc9-5775-9b81-17b019adbbb4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-9x4v-xfq5-m8x5 affects version 1.7.16 of better-auth."
      }
    },
    {
      "id": "GHSA-q84f-53jg-9ppm",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.16"
        }
      ],
      "bom-ref": "urn:uuid:0151c26a-6450-5cc4-ae4a-cd9a2b9eaee8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-q84f-53jg-9ppm affects version 1.7.16 of better-auth."
      }
    },
    {
      "id": "GHSA-qq9h-g4jm-xgf3",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.16"
        }
      ],
      "bom-ref": "urn:uuid:9664b5dc-f9ce-5e52-b826-a5517ad26f53",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-qq9h-g4jm-xgf3 affects version 1.7.16 of better-auth."
      }
    },
    {
      "id": "GHSA-r4xp-prcw-77qf",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.16"
        }
      ],
      "bom-ref": "urn:uuid:3181a5d8-7708-57f4-9117-140e73781983",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-r4xp-prcw-77qf affects version 1.7.16 of better-auth."
      }
    },
    {
      "id": "GHSA-vp58-j275-797x",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.16"
        }
      ],
      "bom-ref": "urn:uuid:ef2fe735-5136-5d02-9f0b-bf2e244ca785",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-vp58-j275-797x affects version 1.7.16 of better-auth."
      }
    },
    {
      "id": "GHSA-wmjr-v86c-m9jj",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.16"
        }
      ],
      "bom-ref": "urn:uuid:f5b7ea09-5042-5c49-a362-e1bb793035a3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-wmjr-v86c-m9jj affects version 1.7.16 of better-auth."
      }
    },
    {
      "id": "GHSA-wxw3-q3m9-c3jr",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.16"
        }
      ],
      "bom-ref": "urn:uuid:09cdf285-a096-579f-8814-96c2bea0ae6d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-wxw3-q3m9-c3jr affects version 1.7.16 of better-auth."
      }
    },
    {
      "id": "GHSA-x732-6j76-qmhm",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.16"
        }
      ],
      "bom-ref": "urn:uuid:7461765b-4a0d-595a-8a09-6bb35a4e9234",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-x732-6j76-qmhm affects version 1.7.16 of better-auth."
      }
    },
    {
      "id": "GHSA-xg6x-h9c9-2m83",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.16"
        }
      ],
      "bom-ref": "urn:uuid:ce6be0ec-fa2c-5456-a9f0-ec1d44053274",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xg6x-h9c9-2m83 affects version 1.7.16 of better-auth."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/better-auth@1.7.16"
    }
  ]
}