{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e5cf1276-890c-5b59-b8d6-5d5aa7d198d3",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/vite@4.5.5-tuxcare.7",
      "type": "library",
      "name": "vite",
      "version": "4.5.5-tuxcare.7",
      "purl": "pkg:npm/vite@4.5.5-tuxcare.7"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:e0356744-93e0-59f7-a8e6-0a9b274e37a3",
      "id": "CVE-2024-23331",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23331 affects version 4.5.5-tuxcare.7 of vite."
      },
      "affects": [
        {
          "ref": "pkg:npm/vite@4.5.5-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b52a82a-2a64-5eae-9d06-3f920dfa8aec",
      "id": "CVE-2024-31207",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31207 affects version 4.5.5-tuxcare.7 of vite."
      },
      "affects": [
        {
          "ref": "pkg:npm/vite@4.5.5-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b9cfaa1-d464-5454-aa18-1082048f005d",
      "id": "CVE-2024-45811",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2024-45811 does not affect version 4.5.5-tuxcare.7 of vite. Version 4.5.5 is not vulnerable. Summary: The target repository is NOT vulnerable to CVE-2024-45811. The fix is present in a semantically equivalent form, using `checkServingAccess` with `deniedServingAccessForTransform` instead of the vendor's `ensureServingAccess`, but providing identical protection against the ?import&raw bypass vulnerability. [terminalized not_affected from patch_application_manual/not_vulnerable]"
      },
      "affects": [
        {
          "ref": "pkg:npm/vite@4.5.5-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa08231f-d537-5fc1-a2bc-6ef0309349d9",
      "id": "CVE-2024-52011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-52011 affects version 4.5.5-tuxcare.7 of vite."
      },
      "affects": [
        {
          "ref": "pkg:npm/vite@4.5.5-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b9aea7da-51d3-5ef8-9709-5b160f83f116",
      "id": "CVE-2025-24010",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24010 is fixed in version 4.5.5-tuxcare.7 of vite."
      },
      "affects": [
        {
          "ref": "pkg:npm/vite@4.5.5-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27df4162-6d94-5749-803e-352ec2ba09d9",
      "id": "CVE-2025-30208",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-30208 is fixed in version 4.5.5-tuxcare.7 of vite."
      },
      "affects": [
        {
          "ref": "pkg:npm/vite@4.5.5-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c715fed8-672e-5a28-834d-f96f0b42f69f",
      "id": "CVE-2025-31125",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31125 is fixed in version 4.5.5-tuxcare.7 of vite."
      },
      "affects": [
        {
          "ref": "pkg:npm/vite@4.5.5-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:98eb0645-5726-50d3-a1ac-b99adb4d9fcb",
      "id": "CVE-2025-31486",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31486 is fixed in version 4.5.5-tuxcare.7 of vite."
      },
      "affects": [
        {
          "ref": "pkg:npm/vite@4.5.5-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b150eff1-0be7-55c2-b662-ad41470d5f4a",
      "id": "CVE-2025-32395",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-32395 is fixed in version 4.5.5-tuxcare.7 of vite."
      },
      "affects": [
        {
          "ref": "pkg:npm/vite@4.5.5-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:504b5c72-abf0-56b4-9b39-a2a60d1127d6",
      "id": "CVE-2025-46565",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-46565 is fixed in version 4.5.5-tuxcare.7 of vite."
      },
      "affects": [
        {
          "ref": "pkg:npm/vite@4.5.5-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bfb56a33-4754-594c-af32-4b3b9289bd58",
      "id": "CVE-2025-58751",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58751 affects version 4.5.5-tuxcare.7 of vite."
      },
      "affects": [
        {
          "ref": "pkg:npm/vite@4.5.5-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df3ee4a9-f5c0-5216-9afd-7368d332ca2d",
      "id": "CVE-2025-58752",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-58752 is fixed in version 4.5.5-tuxcare.7 of vite."
      },
      "affects": [
        {
          "ref": "pkg:npm/vite@4.5.5-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f914d5e-b780-5b85-9263-fb4ec59cd268",
      "id": "CVE-2025-62522",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-62522 is fixed in version 4.5.5-tuxcare.7 of vite."
      },
      "affects": [
        {
          "ref": "pkg:npm/vite@4.5.5-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9eb4b7a5-68f3-5fb9-bcfb-9f54a5384de0",
      "id": "CVE-2026-39363",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-39363 does not affect version 4.5.5-tuxcare.7 of vite. Version 4.5.5 is not vulnerable. Summary: CVE-2026-39363 does not affect Vite 4.5.5. The vulnerability requires fetchModule method and vite:invoke WebSocket event, which were introduced in later versions (5.x/6.x). [terminalized not_affected from patch_application_manual/not_vulnerable]"
      },
      "affects": [
        {
          "ref": "pkg:npm/vite@4.5.5-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97c2b85f-f4b3-5f28-907a-7eefb5057b3e",
      "id": "CVE-2026-39364",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-39364 affects version 4.5.5-tuxcare.7 of vite."
      },
      "affects": [
        {
          "ref": "pkg:npm/vite@4.5.5-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a380ad65-f28a-5c94-b430-65c2c7a25e5e",
      "id": "CVE-2026-39365",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-39365 does not affect version 4.5.5-tuxcare.7 of vite. Version 4.5.5 is not vulnerable. Summary: CVE-2026-39365 path traversal vulnerability was present in the original Vite v4.5.5 but has been patched in version 4.5.5-tuxcare.7. The fix (commit 91f0a4f50, backported on 2026-04-20) adds validation to ensure .map file requests for optimized dependencies cannot traverse outside the optimized deps directory via '../' segments in the URL. The target repository currently includes this security patch. [terminalized not_affected from patch_application_manual/not_vulnerable]"
      },
      "affects": [
        {
          "ref": "pkg:npm/vite@4.5.5-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c6d04c2-72d1-502d-9502-6e03dc9d3cb7",
      "id": "CVE-2026-53571",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53571 affects version 4.5.5-tuxcare.7 of vite."
      },
      "affects": [
        {
          "ref": "pkg:npm/vite@4.5.5-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cebd9f4e-9d4a-5f73-a1a9-db3d2fc9f24c",
      "id": "CVE-2026-53632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53632 affects version 4.5.5-tuxcare.7 of vite."
      },
      "affects": [
        {
          "ref": "pkg:npm/vite@4.5.5-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b26192d3-3a18-5537-b22e-60bf8a5a66ec",
      "id": "GHSA-4w7w-66w2-5vf9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-4w7w-66w2-5vf9 is fixed in version 4.5.5-tuxcare.7 of vite."
      },
      "affects": [
        {
          "ref": "pkg:npm/vite@4.5.5-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:243c09a9-14ee-5bb6-9cca-1871796964d1",
      "id": "GHSA-v2wj-q39q-566r",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-v2wj-q39q-566r is fixed in version 4.5.5-tuxcare.7 of vite."
      },
      "affects": [
        {
          "ref": "pkg:npm/vite@4.5.5-tuxcare.7"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/vite@4.5.5-tuxcare.7"
    }
  ]
}