{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:59f2538b-120a-55a6-b193-6beb5764765b",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "better-auth",
      "purl": "pkg:npm/better-auth@1.7.22",
      "type": "library",
      "bom-ref": "pkg:npm/better-auth@1.7.22",
      "version": "1.7.22",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-56734",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.22"
        }
      ],
      "bom-ref": "urn:uuid:94b366ee-e7ee-5aae-871c-fed2d9351624",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56734 affects version 1.7.22 of better-auth."
      }
    },
    {
      "id": "CVE-2025-27143",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.22"
        }
      ],
      "bom-ref": "urn:uuid:f122e157-b51a-50e1-b2d6-dd9c3b66f919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27143 affects version 1.7.22 of better-auth."
      }
    },
    {
      "id": "CVE-2025-53535",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.22"
        }
      ],
      "bom-ref": "urn:uuid:a8a08fb8-7c79-5f71-b591-b3e18f84be8d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-53535 affects version 1.7.22 of better-auth."
      }
    },
    {
      "id": "CVE-2025-61928",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.22"
        }
      ],
      "bom-ref": "urn:uuid:2e4e8df7-43bf-5d32-8b35-48ed9cc6e064",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-61928 affects version 1.7.22 of better-auth."
      }
    },
    {
      "id": "CVE-2025-71401",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.22"
        }
      ],
      "bom-ref": "urn:uuid:fa941e23-faf2-5552-8af5-a1fd852097af",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-71401 affects version 1.7.22 of better-auth."
      }
    },
    {
      "id": "CVE-2026-114607",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.22"
        }
      ],
      "bom-ref": "urn:uuid:be5b2870-5ac5-5a45-9509-de5584944cfe",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114607 affects version 1.7.22 of better-auth."
      }
    },
    {
      "id": "CVE-2026-45337",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.22"
        }
      ],
      "bom-ref": "urn:uuid:e54b30ff-9afa-52cb-96dc-6e1861d5b1f8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45337 affects version 1.7.22 of better-auth."
      }
    },
    {
      "id": "CVE-2026-45364",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.22"
        }
      ],
      "bom-ref": "urn:uuid:dad5ad07-63a0-5040-88d9-cf9e5a647cc4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45364 affects version 1.7.22 of better-auth."
      }
    },
    {
      "id": "CVE-2026-53512",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.22"
        }
      ],
      "bom-ref": "urn:uuid:9a39b689-352c-5848-8032-998db33e1394",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53512 affects version 1.7.22 of better-auth."
      }
    },
    {
      "id": "CVE-2026-53514",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.22"
        }
      ],
      "bom-ref": "urn:uuid:cadbd393-9884-54c8-9f13-b59bbcfcffe5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53514 affects version 1.7.22 of better-auth."
      }
    },
    {
      "id": "CVE-2026-53516",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.22"
        }
      ],
      "bom-ref": "urn:uuid:865641ab-68ce-5869-bd40-ea437394aca1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53516 affects version 1.7.22 of better-auth."
      }
    },
    {
      "id": "CVE-2026-53517",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.22"
        }
      ],
      "bom-ref": "urn:uuid:8ddd75c0-5de1-5d88-ae83-ffe5383e3f7f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53517 affects version 1.7.22 of better-auth."
      }
    },
    {
      "id": "CVE-2026-53518",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.22"
        }
      ],
      "bom-ref": "urn:uuid:2a0d7ebb-6ebd-52ec-afe7-c92d36a9432e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53518 affects version 1.7.22 of better-auth."
      }
    },
    {
      "id": "GHSA-2vg6-77g8-24mp",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.22"
        }
      ],
      "bom-ref": "urn:uuid:adb069c5-0bc4-5e8a-8d7a-0ca66fc9b51a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-2vg6-77g8-24mp affects version 1.7.22 of better-auth."
      }
    },
    {
      "id": "GHSA-3q45-2fh7-66cj",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.22"
        }
      ],
      "bom-ref": "urn:uuid:ce9c8a11-cf0a-5535-8c6b-58c06be31266",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-3q45-2fh7-66cj is a false positive for better-auth 1.7.22."
      }
    },
    {
      "id": "GHSA-44jh-23m7-hpcf",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.22"
        }
      ],
      "bom-ref": "urn:uuid:b7d6c55c-9373-5e0a-b4af-7868b4c118ef",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-44jh-23m7-hpcf affects version 1.7.22 of better-auth."
      }
    },
    {
      "id": "GHSA-86j7-9j95-vpqj",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.22"
        }
      ],
      "bom-ref": "urn:uuid:2167d786-00ea-5a4c-984b-81c069dc9b67",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-86j7-9j95-vpqj affects version 1.7.22 of better-auth."
      }
    },
    {
      "id": "GHSA-9h47-pqcx-hjr4",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.22"
        }
      ],
      "bom-ref": "urn:uuid:510bc182-8336-5ce9-90e7-b1792bf09512",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-9h47-pqcx-hjr4 affects version 1.7.22 of better-auth."
      }
    },
    {
      "id": "GHSA-9x4v-xfq5-m8x5",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.22"
        }
      ],
      "bom-ref": "urn:uuid:2aa8ecb6-4823-568b-a9d5-eee206b3f17e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-9x4v-xfq5-m8x5 affects version 1.7.22 of better-auth."
      }
    },
    {
      "id": "GHSA-q84f-53jg-9ppm",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.22"
        }
      ],
      "bom-ref": "urn:uuid:5dab2a88-6cb2-5935-aef5-5f5d8b744ff1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-q84f-53jg-9ppm affects version 1.7.22 of better-auth."
      }
    },
    {
      "id": "GHSA-qq9h-g4jm-xgf3",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.22"
        }
      ],
      "bom-ref": "urn:uuid:ae4e3905-9497-5ac6-8048-e5075f5870df",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-qq9h-g4jm-xgf3 affects version 1.7.22 of better-auth."
      }
    },
    {
      "id": "GHSA-r4xp-prcw-77qf",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.22"
        }
      ],
      "bom-ref": "urn:uuid:82f32b0c-20e3-53fd-b09b-793140f43db6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-r4xp-prcw-77qf affects version 1.7.22 of better-auth."
      }
    },
    {
      "id": "GHSA-vp58-j275-797x",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.22"
        }
      ],
      "bom-ref": "urn:uuid:31a7d164-0158-55ae-ab0e-f8b1185e1636",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-vp58-j275-797x affects version 1.7.22 of better-auth."
      }
    },
    {
      "id": "GHSA-wmjr-v86c-m9jj",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.22"
        }
      ],
      "bom-ref": "urn:uuid:8c027789-9a91-5790-9ae5-aebcf60fd712",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-wmjr-v86c-m9jj affects version 1.7.22 of better-auth."
      }
    },
    {
      "id": "GHSA-wxw3-q3m9-c3jr",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.22"
        }
      ],
      "bom-ref": "urn:uuid:491272e7-3e36-59cf-a0fb-21bfe7db3eb6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-wxw3-q3m9-c3jr affects version 1.7.22 of better-auth."
      }
    },
    {
      "id": "GHSA-x732-6j76-qmhm",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.22"
        }
      ],
      "bom-ref": "urn:uuid:4374015a-a9e9-5266-8286-d778de52c214",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-x732-6j76-qmhm affects version 1.7.22 of better-auth."
      }
    },
    {
      "id": "GHSA-xg6x-h9c9-2m83",
      "affects": [
        {
          "ref": "pkg:npm/better-auth@1.7.22"
        }
      ],
      "bom-ref": "urn:uuid:90d152a7-4da8-52df-a5b7-2fe61dfb62e6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-xg6x-h9c9-2m83 affects version 1.7.22 of better-auth."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/better-auth@1.7.22"
    }
  ]
}