{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:c7208ac8-15a7-502c-8394-a68a008a7f63",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/axios@1.7.9-tuxcare.2",
      "type": "library",
      "name": "axios",
      "version": "1.7.9-tuxcare.2",
      "purl": "pkg:npm/axios@1.7.9-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:c19eab2a-59f4-545a-a7e5-395be81af5bd",
      "id": "CVE-2020-7676",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2020-7676 is fixed in version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6285220-c4c2-5ed7-a21e-f6dd3c2ea39d",
      "id": "CVE-2022-25844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25844 is fixed in version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27695276-4edf-58ec-92e4-ae8fbec96394",
      "id": "CVE-2022-25869",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-25869 is fixed in version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:220d2785-b7b8-5186-860c-6a89c3a2812f",
      "id": "CVE-2023-26116",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-26116 is fixed in version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2da3db8d-4e74-5e66-a152-ecf185c948e1",
      "id": "CVE-2023-26117",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-26117 is fixed in version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24c49757-5b9e-5898-b749-b2a3bb406fc9",
      "id": "CVE-2023-26118",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-26118 is fixed in version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1466a4e3-a294-5ce0-8ecd-f281662a243d",
      "id": "CVE-2024-21490",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-21490 is fixed in version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce57b48a-3fa9-5a58-989b-993be6c0266f",
      "id": "CVE-2024-8372",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-8372 is fixed in version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70deb3fa-073f-5d8e-88ce-0f69e0cec3b8",
      "id": "CVE-2024-8373",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-8373 is fixed in version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be7f6f7b-7722-5f46-b0b0-a8969bbfc5d7",
      "id": "CVE-2025-0716",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-0716 is fixed in version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0d99960-5aec-5b47-b0b4-9f6fafacc0c2",
      "id": "CVE-2025-27152",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-27152 is fixed in version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e56c4311-ccf4-528d-a5a0-a42d8162ee74",
      "id": "CVE-2025-58754",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58754 is fixed in version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9897943d-5c48-5dcd-9a0e-352e8e20021a",
      "id": "CVE-2025-62718",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-62718 is fixed in version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:066f6162-4305-5d04-8a03-6af1c9d3991b",
      "id": "CVE-2026-25639",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-25639 does not affect version 1.7.9-tuxcare.2 of axios. Version 1.7.9 is not vulnerable. Summary: The target repository (axios v1.7.9) is NOT vulnerable to CVE-2026-25639. The target uses Object.assign({}, config1, config2) for key iteration, which does not include __proto__ in Object.keys() results, preventing the DoS crash. The vulnerable code pattern was introduced later in v1.11.0 when the code was refactored to use the spread operator ({...config1, ...config2}). [terminalized not_affected from patch_application_manual/not_vulnerable]"
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ba6ed56-5de1-5d00-bbda-e1f035594cfc",
      "id": "CVE-2026-40175",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40175 is fixed in version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7050ed4-d375-56cc-882e-c7cbc0341e6c",
      "id": "CVE-2026-42033",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42033 is fixed in version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b407fe8-4840-529e-ac85-95e3ea8ea016",
      "id": "CVE-2026-42034",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42034 is fixed in version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3dd61e50-8642-5fb8-87a9-a9f3ae94a347",
      "id": "CVE-2026-42035",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42035 is fixed in version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a293f8e0-e5c2-500e-982c-bd056e046e30",
      "id": "CVE-2026-42036",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42036 is fixed in version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32c5eb0c-6832-555f-a6a9-5cef2d2a2b0c",
      "id": "CVE-2026-42037",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42037 is fixed in version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5d65252-cc0d-51d6-b412-5fe292c7091f",
      "id": "CVE-2026-42038",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42038 is fixed in version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:849cdfb8-540e-5f30-968e-074a02b238fa",
      "id": "CVE-2026-42039",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42039 is fixed in version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60df5cd5-909f-5795-99d6-e14f4d6b9151",
      "id": "CVE-2026-42040",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42040 is fixed in version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c368df04-1043-50cf-b2f7-a6567076b9bc",
      "id": "CVE-2026-42041",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42041 is fixed in version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2479b6f-532b-5fd4-818a-c8de1827852f",
      "id": "CVE-2026-42042",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42042 is fixed in version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d19bbb4-18aa-5deb-97bd-def195830304",
      "id": "CVE-2026-42043",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-42043 does not affect version 1.7.9-tuxcare.2 of axios. Version 1.7.9 is not vulnerable. Summary: The target version (axios v1.7.9) is NOT vulnerable to CVE-2026-42043 because the vulnerable shouldBypassProxy feature does not exist in this version. The target uses the external 'proxy-from-env' package for proxy handling, whereas the vulnerability exists in axios's own shouldBypassProxy implementation that was only introduced in version 1.15.0. [terminalized not_affected from patch_application_manual/not_vulnerable]"
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f4adc39-0117-51cf-9e24-bee3bcf3ce62",
      "id": "CVE-2026-42044",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42044 is fixed in version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e065f8d-6be7-5b5d-952e-c1fb3931a986",
      "id": "CVE-2026-42264",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42264 is fixed in version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d7a198c-8466-569b-95b3-0c671d112623",
      "id": "CVE-2026-44486",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44486 affects version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20910886-43c1-5d86-b299-3c56f5bf43be",
      "id": "CVE-2026-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44487 is fixed in version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96ade030-15f4-5919-81ef-e1011ec5194f",
      "id": "CVE-2026-44488",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44488 is fixed in version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ede4ec7f-4f8f-54bf-bcab-a408efa8ab37",
      "id": "CVE-2026-44490",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44490 is fixed in version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fdf219f0-8163-5f54-a367-c3d4f01b155c",
      "id": "CVE-2026-44492",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44492 affects version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29dd9e2e-08c8-5812-8746-a1843becb3c7",
      "id": "CVE-2026-44494",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44494 is fixed in version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d17649c2-42c3-5887-8a98-d5a54a1ae72d",
      "id": "CVE-2026-44495",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44495 affects version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11154dd1-93e0-5f15-a191-343e1effe367",
      "id": "CVE-2026-44496",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44496 is fixed in version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea21350d-e6bf-5e02-ab97-2f89160e5905",
      "id": "GHSA-42h9-826w-cgv3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-42h9-826w-cgv3 affects version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6a333cf-2295-5f30-ac9f-f3f10f075150",
      "id": "GHSA-7q8q-rj6j-mhjq",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-7q8q-rj6j-mhjq is fixed in version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:286c6eca-c0e5-5df6-b6b2-08152ba379a0",
      "id": "GHSA-jqh4-m9w3-8hp9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-jqh4-m9w3-8hp9 affects version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6079dfdb-9595-52b7-851e-3be505600c21",
      "id": "GHSA-mmx7-hfxf-jppx",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-mmx7-hfxf-jppx is fixed in version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d58fb4b1-58aa-5ac2-b188-7241d493b34b",
      "id": "GHSA-pmv8-rq9r-6j72",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-pmv8-rq9r-6j72 affects version 1.7.9-tuxcare.2 of axios."
      },
      "affects": [
        {
          "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/axios@1.7.9-tuxcare.2"
    }
  ]
}