{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:972fa290-4333-5fbd-b45c-f4ab9b97be9f",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "better-auth",
      "purl": "pkg:npm/better-auth@1.7.21",
      "type": "library",
      "bom-ref": "pkg:npm/better-auth@1.7.21",
      "version": "1.7.21",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-56734",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.21"
        }
      ],
      "bom-ref": "urn:uuid:1d7fed3d-418e-553a-b1f5-481cf9596447",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56734 affects version 1.7.21 of better-auth."
      }
    },
    {
      "id": "CVE-2025-27143",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.21"
        }
      ],
      "bom-ref": "urn:uuid:6ae6386d-56e9-552d-8ec3-fdbf9b2604d9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27143 affects version 1.7.21 of better-auth."
      }
    },
    {
      "id": "CVE-2025-53535",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.21"
        }
      ],
      "bom-ref": "urn:uuid:546cddb7-73f8-5777-8709-ddfa8ef351e4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-53535 affects version 1.7.21 of better-auth."
      }
    },
    {
      "id": "CVE-2025-61928",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.21"
        }
      ],
      "bom-ref": "urn:uuid:e7404bdc-507c-5b4d-9208-ab068a912076",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-61928 affects version 1.7.21 of better-auth."
      }
    },
    {
      "id": "CVE-2025-71401",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.21"
        }
      ],
      "bom-ref": "urn:uuid:4df52a02-23cf-56dc-a44d-ef220347547b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-71401 affects version 1.7.21 of better-auth."
      }
    },
    {
      "id": "CVE-2026-114607",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.21"
        }
      ],
      "bom-ref": "urn:uuid:9fce0491-558d-552e-a829-b48d97fb2c77",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114607 affects version 1.7.21 of better-auth."
      }
    },
    {
      "id": "CVE-2026-45337",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.21"
        }
      ],
      "bom-ref": "urn:uuid:d21e1623-4c78-524f-9a72-e3881abedd49",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45337 affects version 1.7.21 of better-auth."
      }
    },
    {
      "id": "CVE-2026-45364",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.21"
        }
      ],
      "bom-ref": "urn:uuid:a9b314f1-bc76-54a2-b156-758f699a6c83",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45364 affects version 1.7.21 of better-auth."
      }
    },
    {
      "id": "CVE-2026-53512",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.21"
        }
      ],
      "bom-ref": "urn:uuid:f5807dba-4c7f-597b-a97f-321a2fb55fae",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53512 affects version 1.7.21 of better-auth."
      }
    },
    {
      "id": "CVE-2026-53514",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.21"
        }
      ],
      "bom-ref": "urn:uuid:a7f18ebf-9f53-54cb-ae33-2262257828d1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53514 affects version 1.7.21 of better-auth."
      }
    },
    {
      "id": "CVE-2026-53516",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.21"
        }
      ],
      "bom-ref": "urn:uuid:38d9071d-8d1c-50ed-863b-6836af73c08b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53516 affects version 1.7.21 of better-auth."
      }
    },
    {
      "id": "CVE-2026-53517",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.21"
        }
      ],
      "bom-ref": "urn:uuid:ba6da239-4a77-51a5-8b2b-066d9763880d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53517 affects version 1.7.21 of better-auth."
      }
    },
    {
      "id": "CVE-2026-53518",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.21"
        }
      ],
      "bom-ref": "urn:uuid:2a89636e-51f0-5e1f-81ee-0fd830845e93",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53518 affects version 1.7.21 of better-auth."
      }
    },
    {
      "id": "GHSA-2vg6-77g8-24mp",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.21"
        }
      ],
      "bom-ref": "urn:uuid:c8ea353e-ca82-5e58-ba6b-39acb628b4c7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-2vg6-77g8-24mp affects version 1.7.21 of better-auth."
      }
    },
    {
      "id": "GHSA-3q45-2fh7-66cj",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.21"
        }
      ],
      "bom-ref": "urn:uuid:0df10aff-1356-547e-83c6-5880a0dcca5b",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-3q45-2fh7-66cj is a false positive for better-auth 1.7.21."
      }
    },
    {
      "id": "GHSA-44jh-23m7-hpcf",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.21"
        }
      ],
      "bom-ref": "urn:uuid:7e799952-0071-5b77-a6e0-3d95be6fd88a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-44jh-23m7-hpcf affects version 1.7.21 of better-auth."
      }
    },
    {
      "id": "GHSA-86j7-9j95-vpqj",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.21"
        }
      ],
      "bom-ref": "urn:uuid:4bb9ce95-48b7-5929-a4e2-9c370dfb527b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-86j7-9j95-vpqj affects version 1.7.21 of better-auth."
      }
    },
    {
      "id": "GHSA-9h47-pqcx-hjr4",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.21"
        }
      ],
      "bom-ref": "urn:uuid:1aa2257a-cbd0-57f7-acf4-43c748f96685",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-9h47-pqcx-hjr4 affects version 1.7.21 of better-auth."
      }
    },
    {
      "id": "GHSA-9x4v-xfq5-m8x5",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.21"
        }
      ],
      "bom-ref": "urn:uuid:1298e09c-3a16-5e80-8c8b-dc0ab1c67fcc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-9x4v-xfq5-m8x5 affects version 1.7.21 of better-auth."
      }
    },
    {
      "id": "GHSA-q84f-53jg-9ppm",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.21"
        }
      ],
      "bom-ref": "urn:uuid:7dee9255-f67b-57e7-ac81-f65ec4c62697",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-q84f-53jg-9ppm affects version 1.7.21 of better-auth."
      }
    },
    {
      "id": "GHSA-qq9h-g4jm-xgf3",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.21"
        }
      ],
      "bom-ref": "urn:uuid:05a20784-9301-5f03-8dd1-0a9bfac4a8db",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-qq9h-g4jm-xgf3 affects version 1.7.21 of better-auth."
      }
    },
    {
      "id": "GHSA-r4xp-prcw-77qf",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.21"
        }
      ],
      "bom-ref": "urn:uuid:d1f3e9d5-23ff-5d14-8a64-a1e3059e3251",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-r4xp-prcw-77qf affects version 1.7.21 of better-auth."
      }
    },
    {
      "id": "GHSA-vp58-j275-797x",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.21"
        }
      ],
      "bom-ref": "urn:uuid:2376d33a-6f5c-555e-b1d6-b74f51cfeb13",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-vp58-j275-797x affects version 1.7.21 of better-auth."
      }
    },
    {
      "id": "GHSA-wmjr-v86c-m9jj",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.21"
        }
      ],
      "bom-ref": "urn:uuid:ee59bf7d-cf46-5cba-9ca3-b126d70c9564",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-wmjr-v86c-m9jj affects version 1.7.21 of better-auth."
      }
    },
    {
      "id": "GHSA-wxw3-q3m9-c3jr",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.21"
        }
      ],
      "bom-ref": "urn:uuid:2022de94-e925-5f97-bf1c-26645376f56e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-wxw3-q3m9-c3jr affects version 1.7.21 of better-auth."
      }
    },
    {
      "id": "GHSA-x732-6j76-qmhm",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.21"
        }
      ],
      "bom-ref": "urn:uuid:2bc3262d-2315-5d4d-a3e1-4dc5453e2419",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-x732-6j76-qmhm affects version 1.7.21 of better-auth."
      }
    },
    {
      "id": "GHSA-xg6x-h9c9-2m83",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.21"
        }
      ],
      "bom-ref": "urn:uuid:03bfda1d-3dfd-5330-99a5-9ed2587f7963",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xg6x-h9c9-2m83 affects version 1.7.21 of better-auth."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/better-auth@1.7.21"
    }
  ]
}