{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:a4d6ad17-cf73-5fb5-9011-54813c500b52",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/serialize-javascript@1.9.1-tuxcare.1",
      "type": "library",
      "name": "serialize-javascript",
      "version": "1.9.1-tuxcare.1",
      "purl": "pkg:npm/serialize-javascript@1.9.1-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:eae51e11-59e7-50cb-ad9e-3fc4666e3e7d",
      "id": "CVE-2019-16769",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2019-16769 is fixed in version 1.9.1-tuxcare.1 of serialize-javascript."
      },
      "affects": [
        {
          "ref": "pkg:npm/serialize-javascript@1.9.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3d9069e-609b-5081-ac80-aada0dc45ce1",
      "id": "CVE-2020-7660",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2020-7660 is fixed in version 1.9.1-tuxcare.1 of serialize-javascript."
      },
      "affects": [
        {
          "ref": "pkg:npm/serialize-javascript@1.9.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34e4e256-07f6-5f47-894b-aa846b65f4f2",
      "id": "CVE-2026-34043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-34043 does not affect version 1.9.1-tuxcare.1 of serialize-javascript. not_affected \u2014 Version 1.9.1-tuxcare.1 is not affected by CVE-2026-34043. The vulnerable sparse array detection code (using instanceof Array and .filter()) was introduced in v5.0.0, several versions after 1.9.1. This version does not contain the code pattern that could cause CPU exhaustion when processing array-like objects with large length properties."
      },
      "affects": [
        {
          "ref": "pkg:npm/serialize-javascript@1.9.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d82ef27-60bc-59b6-bc9a-381ae395ccc0",
      "id": "GHSA-5c6j-r48x-rmvq",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-5c6j-r48x-rmvq is fixed in version 1.9.1-tuxcare.1 of serialize-javascript."
      },
      "affects": [
        {
          "ref": "pkg:npm/serialize-javascript@1.9.1-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/serialize-javascript@1.9.1-tuxcare.1"
    }
  ]
}