{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:1f746882-52c4-566a-8553-7bf48843e6c4",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:composer/laravel/framework@7.30.7",
      "type": "library",
      "group": "laravel",
      "name": "framework",
      "version": "7.30.7",
      "purl": "pkg:composer/laravel/framework@7.30.7"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:775bad08-9308-5588-993a-5cd37ba8734f",
      "id": "CVE-2025-27515",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27515 affects version 7.30.7 of laravel/framework."
      },
      "affects": [
        {
          "ref": "pkg:composer/laravel/framework@7.30.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c85a4566-5977-54a1-ba1b-34f00a2e8349",
      "id": "GHSA-5vg9-5847-vvmq",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-5vg9-5847-vvmq affects version 7.30.7 of laravel/framework."
      },
      "affects": [
        {
          "ref": "pkg:composer/laravel/framework@7.30.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3fce7de9-bd14-5d77-afed-78e175a1a941",
      "id": "GHSA-crmm-hgp2-wgrp",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability GHSA-crmm-hgp2-wgrp does not affect version 7.30.7 of laravel/framework. not_affected \u2014 Laravel 7.30.7-p1+tuxcare is not affected by GHSA-crmm-hgp2-wgrp. The vulnerability exists in the LocalFilesystemAdapter class which provides temporary signed URL generation for local filesystems. This class and the associated local file serving feature were introduced in Laravel 9.x and do not exist in Laravel 7.x."
      },
      "affects": [
        {
          "ref": "pkg:composer/laravel/framework@7.30.7"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:composer/laravel/framework@7.30.7"
    }
  ]
}