{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e9f69281-2f27-5e65-90c6-f5a9bc80185f",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:composer/laravel/framework@12.58.0-p1+tuxcare",
      "type": "library",
      "group": "laravel",
      "name": "framework",
      "version": "12.58.0-p1+tuxcare",
      "purl": "pkg:composer/laravel/framework@12.58.0-p1+tuxcare"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:5fe472b6-cff5-5712-928a-517393a2ff26",
      "id": "AIKIDO-2026-10659",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability AIKIDO-2026-10659 is fixed in version 12.58.0-p1+tuxcare of laravel/framework."
      },
      "affects": [
        {
          "ref": "pkg:composer/laravel/framework@12.58.0-p1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3fde97e2-71c9-5eb3-b3f7-91a8063edf25",
      "id": "GHSA-5vg9-5847-vvmq",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-5vg9-5847-vvmq affects version 12.58.0-p1+tuxcare of laravel/framework."
      },
      "affects": [
        {
          "ref": "pkg:composer/laravel/framework@12.58.0-p1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf838b6a-87c7-5574-b827-27698dc7f39b",
      "id": "GHSA-crmm-hgp2-wgrp",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability GHSA-crmm-hgp2-wgrp does not affect version 12.58.0-p1+tuxcare of laravel/framework. Version 12.58.0 is not vulnerable. Summary: The target repository (Laravel v12.58.0) predates the introduction of the vulnerability. The vulnerable code pattern was introduced in v12.60.0 on May 15, 2026, but the target is at v12.58.0 from May 5, 2026."
      },
      "affects": [
        {
          "ref": "pkg:composer/laravel/framework@12.58.0-p1+tuxcare"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:composer/laravel/framework@12.58.0-p1+tuxcare"
    }
  ]
}