{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:95dbf13e-5d34-577a-a5be-c542c0fc50f2",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/%40nuxt/webpack-builder@3.12.4-tuxcare.7",
      "type": "library",
      "name": "@nuxt/webpack-builder",
      "version": "3.12.4-tuxcare.7",
      "purl": "pkg:npm/%40nuxt/webpack-builder@3.12.4-tuxcare.7"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:39ee73a7-8567-523e-b390-b744e56c65ed",
      "id": "CVE-2022-25852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-25852 affects version 3.12.4-tuxcare.7 of @nuxt/webpack-builder."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/webpack-builder@3.12.4-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce392923-6666-5831-93be-d89b7953587a",
      "id": "CVE-2025-24360",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24360 is fixed in version 3.12.4-tuxcare.7 of @nuxt/webpack-builder."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/webpack-builder@3.12.4-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9394a02c-334c-5f64-a3a9-8784c6d3905a",
      "id": "CVE-2025-24361",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24361 is fixed in version 3.12.4-tuxcare.7 of @nuxt/webpack-builder."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/webpack-builder@3.12.4-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3f30e66-76d4-59ec-b1b6-a797fdc2f42e",
      "id": "CVE-2025-27415",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27415 affects version 3.12.4-tuxcare.7 of @nuxt/webpack-builder."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/webpack-builder@3.12.4-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a61a56bc-22d0-549f-a1b7-f3b52780e0a9",
      "id": "CVE-2025-58751",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58751 affects version 3.12.4-tuxcare.7 of @nuxt/webpack-builder."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/webpack-builder@3.12.4-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7c58714-95f9-5d7e-8341-5a2258154abd",
      "id": "CVE-2025-59414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59414 affects version 3.12.4-tuxcare.7 of @nuxt/webpack-builder."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/webpack-builder@3.12.4-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70c8b0e4-a582-5096-baf6-b006b90780ea",
      "id": "CVE-2025-62522",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-62522 is fixed in version 3.12.4-tuxcare.7 of @nuxt/webpack-builder."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/webpack-builder@3.12.4-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:605e4c07-9231-5793-9eef-abeda6eff701",
      "id": "CVE-2026-41305",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41305 is fixed in version 3.12.4-tuxcare.7 of @nuxt/webpack-builder."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/webpack-builder@3.12.4-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7092db3b-4d5e-5adb-a9cf-d656bc8b48e3",
      "id": "CVE-2026-42338",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2026-42338 is a false positive for @nuxt/webpack-builder 3.12.4-tuxcare.7. false_positive \u2014 CVE-2026-42338 is a false positive match for this repository. The CVE concerns the 'ip-address' npm package (specifically XSS vulnerabilities in the Address6 class), but this repository is 'nuxt' (Nuxt.js web framework version 3.12.4-tuxcare.5). Exhaustive search confirmed that the ip-address package is not present in this repository as the project itself, as a vendored/bundled copy, or as a de..."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/webpack-builder@3.12.4-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b6bc77b-0773-595f-a8f9-e3cf56422a9b",
      "id": "CVE-2026-45669",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45669 affects version 3.12.4-tuxcare.7 of @nuxt/webpack-builder."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/webpack-builder@3.12.4-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a1cff68-8ba1-50cf-bd4f-e4e985d142ac",
      "id": "CVE-2026-46342",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46342 affects version 3.12.4-tuxcare.7 of @nuxt/webpack-builder."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/webpack-builder@3.12.4-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef9c23c6-778c-5c93-90ef-1ebcb1ebb017",
      "id": "CVE-2026-47200",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47200 affects version 3.12.4-tuxcare.7 of @nuxt/webpack-builder."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/webpack-builder@3.12.4-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa0590f2-6a10-5546-b697-46aaa72da010",
      "id": "CVE-2026-53721",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53721 affects version 3.12.4-tuxcare.7 of @nuxt/webpack-builder."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/webpack-builder@3.12.4-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14e3d1ec-9955-531c-8490-237d4853734e",
      "id": "CVE-2026-53722",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53722 affects version 3.12.4-tuxcare.7 of @nuxt/webpack-builder."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/webpack-builder@3.12.4-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b84e069-047c-5e88-adfe-888ab0dc61da",
      "id": "CVE-2026-56326",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-56326 affects version 3.12.4-tuxcare.7 of @nuxt/webpack-builder."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/webpack-builder@3.12.4-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:91f88575-7bb7-5e50-94cb-4ff98b8740c1",
      "id": "GHSA-c9cv-mq2m-ppp3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-c9cv-mq2m-ppp3 is fixed in version 3.12.4-tuxcare.7 of @nuxt/webpack-builder."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/webpack-builder@3.12.4-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9f6d237-fc85-5b44-be5d-072ef2f0cf02",
      "id": "GHSA-m3q2-p4fw-w38m",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability GHSA-m3q2-p4fw-w38m does not affect version 3.12.4-tuxcare.7 of @nuxt/webpack-builder. not_affected \u2014 Target version (nuxt@3.12.4-tuxcare.5) is NOT affected by GHSA-m3q2-p4fw-w38m. The vulnerability was introduced 1754 commits AFTER v3.12.4 when Nuxt upgraded from unhead v1 to v2 in v3.16.0. The target uses a fundamentally different, older implementation that does not contain the vulnerable innerHTML pattern."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40nuxt/webpack-builder@3.12.4-tuxcare.7"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40nuxt/webpack-builder@3.12.4-tuxcare.7"
    }
  ]
}