{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:523e81bd-6658-5b55-ba0b-805ff80dafad",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/fast-xml-parser@4.2.7-tuxcare.1",
      "type": "library",
      "name": "fast-xml-parser",
      "version": "4.2.7-tuxcare.1",
      "purl": "pkg:npm/fast-xml-parser@4.2.7-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:9834fd0b-aa1a-55f8-8ebc-9e9008375e04",
      "id": "CVE-2026-25128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-25128 affects version 4.2.7-tuxcare.1 of fast-xml-parser."
      },
      "affects": [
        {
          "ref": "pkg:npm/fast-xml-parser@4.2.7-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ffd10fc-995d-59a9-b9fa-b4b87067a79d",
      "id": "CVE-2026-25896",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-25896 is fixed in version 4.2.7-tuxcare.1 of fast-xml-parser."
      },
      "affects": [
        {
          "ref": "pkg:npm/fast-xml-parser@4.2.7-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7da787bf-c070-5dc7-9327-83480e75b527",
      "id": "CVE-2026-26278",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-26278 is fixed in version 4.2.7-tuxcare.1 of fast-xml-parser."
      },
      "affects": [
        {
          "ref": "pkg:npm/fast-xml-parser@4.2.7-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24b6aa1f-f3ce-528e-93ec-ff806d11f6b6",
      "id": "CVE-2026-27942",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27942 is fixed in version 4.2.7-tuxcare.1 of fast-xml-parser."
      },
      "affects": [
        {
          "ref": "pkg:npm/fast-xml-parser@4.2.7-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d315b8fe-8de5-58f3-b652-93c9430355af",
      "id": "CVE-2026-33036",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33036 is fixed in version 4.2.7-tuxcare.1 of fast-xml-parser."
      },
      "affects": [
        {
          "ref": "pkg:npm/fast-xml-parser@4.2.7-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7277db83-4a72-5346-9b69-f96a7d43fbfe",
      "id": "CVE-2026-33349",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33349 is fixed in version 4.2.7-tuxcare.1 of fast-xml-parser."
      },
      "affects": [
        {
          "ref": "pkg:npm/fast-xml-parser@4.2.7-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e048dabc-7d53-5540-8ce2-c33bb00fd527",
      "id": "CVE-2026-41650",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41650 is fixed in version 4.2.7-tuxcare.1 of fast-xml-parser."
      },
      "affects": [
        {
          "ref": "pkg:npm/fast-xml-parser@4.2.7-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/fast-xml-parser@4.2.7-tuxcare.1"
    }
  ]
}