{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:44b37818-82f7-5325-885e-cb97ba401c1d",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "core",
      "purl": "pkg:composer/drupal/core@8.9.20-p7+tuxcare",
      "type": "library",
      "group": "drupal",
      "bom-ref": "pkg:composer/drupal/core@8.9.20-p7+tuxcare",
      "version": "8.9.20-p7+tuxcare",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2022-25270",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:ab3b9750-0f1d-5726-abf6-7079ab56169d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25270 is fixed in version 8.9.20-p7+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2022-25271",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:13e81be3-9b93-5bf9-881d-a451b54b61a2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25271 is fixed in version 8.9.20-p7+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2022-25273",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:1aafafb5-df2c-5abf-87c4-ef17379372a9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25273 is fixed in version 8.9.20-p7+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2022-25275",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:2fdf88be-1c31-5b50-b8bf-5d4f15fa1dda",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25275 is fixed in version 8.9.20-p7+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2022-25276",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:78fa9372-b6ce-546f-bb6d-9ae176dba6ee",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25276 is fixed in version 8.9.20-p7+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2022-25277",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:74901f23-fdd2-5318-b94b-9778e404b153",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25277 is fixed in version 8.9.20-p7+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2022-25278",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:e848a1fc-d50b-500f-b44a-26f7649bf3a2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25278 is fixed in version 8.9.20-p7+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2023-5256",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:18e9c9c1-e8aa-597a-860b-b61d1dd5e8e5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-5256 is fixed in version 8.9.20-p7+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2024-12393",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:d9954627-bcf0-52b4-b72f-ee53364633a4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-12393 is fixed in version 8.9.20-p7+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2024-55634",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:477efb5b-1ad9-589d-a387-17bfb32c0f73",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-55634 is fixed in version 8.9.20-p7+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2024-55636",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:69a8fc9c-87a9-57ad-a2dd-aef2434a060f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-55636 is fixed in version 8.9.20-p7+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2024-55637",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:a80303d6-05e8-5c21-9f0c-2292c9533290",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-55637 is fixed in version 8.9.20-p7+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2024-55638",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:6383250b-0285-589f-88a2-a086b5c93aff",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-55638 is fixed in version 8.9.20-p7+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-13080",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:ffecc323-08ae-52eb-a22c-59ef9a659e02",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-13080 is fixed in version 8.9.20-p7+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-13081",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:a4c8ba5a-40b7-5626-a5bb-31dad3aec9a7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-13081 is fixed in version 8.9.20-p7+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-13082",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:8954302c-6ec0-557e-9758-4096b9339ea1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-13082 is fixed in version 8.9.20-p7+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-13083",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:f2068840-e3cd-5f47-ab0b-5082305c75b3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-13083 is fixed in version 8.9.20-p7+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-3057",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:478b0eb9-dc56-508b-aff8-b147a5b6109f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-3057 is fixed in version 8.9.20-p7+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-31673",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:56788954-3369-5d65-9728-c930d6b84a77",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31673 is fixed in version 8.9.20-p7+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-31674",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:703bdfba-3d94-5ad5-8fce-68667367729c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31674 is fixed in version 8.9.20-p7+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2025-31675",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:ce031f5c-7bf2-5cad-8d77-f8d26da3e34a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31675 is fixed in version 8.9.20-p7+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2026-6365",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:7f7ff1eb-8896-5b8d-a320-1cd986545276",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-6365 is fixed in version 8.9.20-p7+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2026-6366",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:b9de9edb-f180-5d5e-ad0b-c7c8272c3400",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-6366 is fixed in version 8.9.20-p7+tuxcare of drupal/core."
      }
    },
    {
      "id": "CVE-2026-9082",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:d2bc321d-4f57-5612-bfb2-966075370f15",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-9082 is fixed in version 8.9.20-p7+tuxcare of drupal/core."
      }
    },
    {
      "id": "GHSA-6ccv-8fgf-cjpw",
      "affects": [
        {
          "ref": "pkg:composer/drupal/core@8.9.20-p7+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:5937cb31-1e40-5496-bcd9-fdf8a7b9be97",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-6ccv-8fgf-cjpw is fixed in version 8.9.20-p7+tuxcare of drupal/core."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:composer/drupal/core@8.9.20-p7+tuxcare"
    }
  ]
}