{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:86161e97-bee8-5cfb-a378-f685eaf9e869",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/axios@0.21.1",
      "type": "library",
      "name": "axios",
      "version": "0.21.1",
      "purl": "pkg:npm/axios@0.21.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:7538f208-8734-5e86-9ed9-cdfd84916524",
      "id": "CVE-2024-39338",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-39338 affects version 0.21.1 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae4b43ef-78ac-51af-afcd-e8adcfa07371",
      "id": "CVE-2026-44486",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44486 affects version 0.21.1 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1fcf38ea-7e3a-5174-9c15-8ad08fe3f765",
      "id": "CVE-2026-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44487 affects version 0.21.1 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33c2d93f-414e-569d-b2b5-4e1f9d868aac",
      "id": "CVE-2026-44490",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44490 affects version 0.21.1 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:263dd683-b9b4-5406-a8f5-da45b9af33c8",
      "id": "CVE-2026-44492",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44492 affects version 0.21.1 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e521628-164d-57bc-b801-10963a19dac1",
      "id": "CVE-2026-44495",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44495 affects version 0.21.1 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3152f80a-a92c-5bc4-a491-25211f0e1ad4",
      "id": "CVE-2026-44496",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44496 affects version 0.21.1 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@0.21.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/axios@0.21.1"
    }
  ]
}