{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f77fe556-f28a-5fc4-8748-31df9cca5962",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "happy-dom",
      "purl": "pkg:npm/happy-dom@9.10.9-tuxcare.2",
      "type": "library",
      "bom-ref": "pkg:npm/happy-dom@9.10.9-tuxcare.2",
      "version": "9.10.9-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "happy-dom",
            "purl": "pkg:npm/happy-dom@9.10.9",
            "type": "library",
            "version": "9.10.9"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-51757",
      "affects": [
        {
          "ref": "pkg:npm/happy-dom@9.10.9-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:625b38a5-ae76-559b-8b2b-4c7d289740dd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-51757 is fixed in version 9.10.9-tuxcare.2 of happy-dom."
      }
    },
    {
      "id": "CVE-2025-61927",
      "affects": [
        {
          "ref": "pkg:npm/happy-dom@9.10.9-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:714df1bc-ab6e-54fc-b193-cf6dcd88e563",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61927 is fixed in version 9.10.9-tuxcare.2 of happy-dom."
      }
    },
    {
      "id": "CVE-2025-62410",
      "affects": [
        {
          "ref": "pkg:npm/happy-dom@9.10.9-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:aafcf324-59f3-5dbd-aeca-484615664ea1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-62410 affects version 9.10.9-tuxcare.2 of happy-dom."
      }
    },
    {
      "id": "CVE-2026-115895",
      "affects": [
        {
          "ref": "pkg:npm/happy-dom@9.10.9-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3c6c8a77-f39f-539b-b00e-790b9c1ac600",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-115895 affects version 9.10.9-tuxcare.2 of happy-dom."
      }
    },
    {
      "id": "CVE-2026-118660",
      "affects": [
        {
          "ref": "pkg:npm/happy-dom@9.10.9-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5d149502-f2e4-502f-8074-89997c65f02b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-118660 is fixed in version 9.10.9-tuxcare.2 of happy-dom."
      }
    },
    {
      "id": "CVE-2026-118661",
      "affects": [
        {
          "ref": "pkg:npm/happy-dom@9.10.9-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7594a3fe-23fc-5a33-9644-1a69e29cd656",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-118661 is fixed in version 9.10.9-tuxcare.2 of happy-dom."
      }
    },
    {
      "id": "CVE-2026-33943",
      "affects": [
        {
          "ref": "pkg:npm/happy-dom@9.10.9-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:793b43aa-ae74-5363-b03f-b4fe4acc7712",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-33943 does not affect version 9.10.9-tuxcare.2 of happy-dom. not_affected \u2014 Version 9.10.9 does not contain the vulnerable ECMAScriptModuleCompiler component. The module compilation feature that enables this vulnerability was introduced in version 17.0.0, which is 7+ major versions after the target version.",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-34226",
      "affects": [
        {
          "ref": "pkg:npm/happy-dom@9.10.9-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:01e522b4-c8ca-576c-8d55-fc734a543d07",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34226 is fixed in version 9.10.9-tuxcare.2 of happy-dom."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/happy-dom@9.10.9-tuxcare.2"
    }
  ]
}