{
  "@id": "urn:uuid:012dc5a2-3c84-4f72-84b9-24f109e33c22",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 4,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-14T14:23:00.054932+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-11-14T14:22:00.127183+00:00",
      "status_notes": "Vulnerability CVE-2019-16728 affects version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "CVE-2019-16728"
      },
      "action_statement": "Vulnerability CVE-2019-16728 affects version 3.4.11-tuxcare.6 of dompurify."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-11-14T14:22:00.127183+00:00",
      "status_notes": "Vulnerability CVE-2019-25155 affects version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "CVE-2019-25155"
      },
      "action_statement": "Vulnerability CVE-2019-25155 affects version 3.4.11-tuxcare.6 of dompurify."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-11-14T14:22:00.127183+00:00",
      "status_notes": "Vulnerability CVE-2020-26870 affects version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "CVE-2020-26870"
      },
      "action_statement": "Vulnerability CVE-2020-26870 affects version 3.4.11-tuxcare.6 of dompurify."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-11-14T14:22:00.127183+00:00",
      "status_notes": "Vulnerability CVE-2024-45801 affects version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "CVE-2024-45801"
      },
      "action_statement": "Vulnerability CVE-2024-45801 affects version 3.4.11-tuxcare.6 of dompurify."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-11-14T14:22:00.127183+00:00",
      "status_notes": "Vulnerability CVE-2024-47875 affects version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "CVE-2024-47875"
      },
      "action_statement": "Vulnerability CVE-2024-47875 affects version 3.4.11-tuxcare.6 of dompurify."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-11-14T14:23:00.054932+00:00",
      "status_notes": "Vulnerability CVE-2024-48910 affects version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "CVE-2024-48910"
      },
      "action_statement": "Vulnerability CVE-2024-48910 affects version 3.4.11-tuxcare.6 of dompurify."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-11-14T14:23:00.054932+00:00",
      "status_notes": "Vulnerability CVE-2025-15599 affects version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "CVE-2025-15599"
      },
      "action_statement": "Vulnerability CVE-2025-15599 affects version 3.4.11-tuxcare.6 of dompurify."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-11-14T14:22:00.127183+00:00",
      "status_notes": "Vulnerability CVE-2025-26791 affects version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "CVE-2025-26791"
      },
      "action_statement": "Vulnerability CVE-2025-26791 affects version 3.4.11-tuxcare.6 of dompurify."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-11-14T14:23:00.054932+00:00",
      "status_notes": "Vulnerability CVE-2026-0540 affects version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "CVE-2026-0540"
      },
      "action_statement": "Vulnerability CVE-2026-0540 affects version 3.4.11-tuxcare.6 of dompurify."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-10-30T10:20:00.109102+00:00",
      "status_notes": "Vulnerability CVE-2026-109345 is fixed in version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "CVE-2026-109345"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-10-30T10:20:00.109102+00:00",
      "status_notes": "Vulnerability CVE-2026-116802 affects version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "CVE-2026-116802"
      },
      "action_statement": "Vulnerability CVE-2026-116802 affects version 3.4.11-tuxcare.6 of dompurify."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-10-30T10:20:00.109102+00:00",
      "status_notes": "Vulnerability CVE-2026-116803 is fixed in version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "CVE-2026-116803"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-10-30T10:20:00.109102+00:00",
      "status_notes": "Vulnerability CVE-2026-116804 is fixed in version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "CVE-2026-116804"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-11-14T14:23:00.054932+00:00",
      "status_notes": "Vulnerability CVE-2026-41238 affects version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "CVE-2026-41238"
      },
      "action_statement": "Vulnerability CVE-2026-41238 affects version 3.4.11-tuxcare.6 of dompurify."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-11-14T14:23:00.054932+00:00",
      "status_notes": "Vulnerability CVE-2026-41239 affects version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "CVE-2026-41239"
      },
      "action_statement": "Vulnerability CVE-2026-41239 affects version 3.4.11-tuxcare.6 of dompurify."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-11-14T14:23:00.054932+00:00",
      "status_notes": "Vulnerability CVE-2026-41240 affects version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "CVE-2026-41240"
      },
      "action_statement": "Vulnerability CVE-2026-41240 affects version 3.4.11-tuxcare.6 of dompurify."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-11-14T14:23:00.054932+00:00",
      "status_notes": "Vulnerability CVE-2026-47423 affects version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "CVE-2026-47423"
      },
      "action_statement": "Vulnerability CVE-2026-47423 affects version 3.4.11-tuxcare.6 of dompurify."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-11-14T14:23:00.054932+00:00",
      "status_notes": "Vulnerability CVE-2026-49458 affects version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "CVE-2026-49458"
      },
      "action_statement": "Vulnerability CVE-2026-49458 affects version 3.4.11-tuxcare.6 of dompurify."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-11-14T14:23:00.054932+00:00",
      "status_notes": "Vulnerability CVE-2026-49459 affects version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "CVE-2026-49459"
      },
      "action_statement": "Vulnerability CVE-2026-49459 affects version 3.4.11-tuxcare.6 of dompurify."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-11-14T14:23:00.054932+00:00",
      "status_notes": "Vulnerability CVE-2026-49978 affects version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "CVE-2026-49978"
      },
      "action_statement": "Vulnerability CVE-2026-49978 affects version 3.4.11-tuxcare.6 of dompurify."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-11-14T14:23:00.054932+00:00",
      "status_notes": "Vulnerability CVE-2026-65898 affects version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "CVE-2026-65898"
      },
      "action_statement": "Vulnerability CVE-2026-65898 affects version 3.4.11-tuxcare.6 of dompurify."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-11-14T14:23:00.054932+00:00",
      "status_notes": "Vulnerability CVE-2026-65899 affects version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "CVE-2026-65899"
      },
      "action_statement": "Vulnerability CVE-2026-65899 affects version 3.4.11-tuxcare.6 of dompurify."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-11-14T14:23:00.054932+00:00",
      "status_notes": "Vulnerability CVE-2026-65900 affects version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "CVE-2026-65900"
      },
      "action_statement": "Vulnerability CVE-2026-65900 affects version 3.4.11-tuxcare.6 of dompurify."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-11-14T14:23:00.054932+00:00",
      "status_notes": "Vulnerability CVE-2026-65901 affects version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "CVE-2026-65901"
      },
      "action_statement": "Vulnerability CVE-2026-65901 affects version 3.4.11-tuxcare.6 of dompurify."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-11-03T22:30:00.065512+00:00",
      "status_notes": "Vulnerability CVE-2026-65902 does not affect version 3.4.11-tuxcare.6 of dompurify. not_affected \u2014 The target repository (DOMPurify 3.4.11-tuxcare.6) is NOT AFFECTED by CVE-2026-65902. The vulnerability was fixed in upstream DOMPurify 3.4.7 (commit ca30f070) by Cure53, and this fix was already present in the upstream 3.4.11 release that TuxCare onboarded. The fix adds defensive cloning of ALLOWED_TAGS and ALLOWED_ATTR before hooks execute, preventing hook mutations from permanently widening ...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-65902"
      },
      "impact_statement": "not_affected \u2014 The target repository (DOMPurify 3.4.11-tuxcare.6) is NOT AFFECTED by CVE-2026-65902. The vulnerability was fixed in upstream DOMPurify 3.4.7 (commit ca30f070) by Cure53, and this fix was already present in the upstream 3.4.11 release that TuxCare onboarded. The fix adds defensive cloning of ALLOWED_TAGS and ALLOWED_ATTR before hooks execute, preventing hook mutations from permanently widening ..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-11-14T14:23:00.054932+00:00",
      "status_notes": "Vulnerability CVE-2026-65903 affects version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "CVE-2026-65903"
      },
      "action_statement": "Vulnerability CVE-2026-65903 affects version 3.4.11-tuxcare.6 of dompurify."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-11-14T14:23:00.054932+00:00",
      "status_notes": "Vulnerability CVE-2026-65912 affects version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "CVE-2026-65912"
      },
      "action_statement": "Vulnerability CVE-2026-65912 affects version 3.4.11-tuxcare.6 of dompurify."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-11-14T14:23:00.054932+00:00",
      "status_notes": "Vulnerability CVE-2026-65913 affects version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "CVE-2026-65913"
      },
      "action_statement": "Vulnerability CVE-2026-65913 affects version 3.4.11-tuxcare.6 of dompurify."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-11-14T14:23:00.054932+00:00",
      "status_notes": "Vulnerability CVE-2026-65914 affects version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "CVE-2026-65914"
      },
      "action_statement": "Vulnerability CVE-2026-65914 affects version 3.4.11-tuxcare.6 of dompurify."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-10-30T10:20:00.109102+00:00",
      "status_notes": "Vulnerability CVE-2026-66010 is fixed in version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "CVE-2026-66010"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-10-30T10:20:00.109102+00:00",
      "status_notes": "Vulnerability CVE-2026-75838 is fixed in version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "CVE-2026-75838"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-10-30T10:20:00.109102+00:00",
      "status_notes": "Vulnerability GHSA-55q2-fjhq-7xh7 affects version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "GHSA-55q2-fjhq-7xh7"
      },
      "action_statement": "Vulnerability GHSA-55q2-fjhq-7xh7 affects version 3.4.11-tuxcare.6 of dompurify."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-10-30T10:20:00.109102+00:00",
      "status_notes": "Vulnerability GHSA-6688-9rhm-gjv2 affects version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "GHSA-6688-9rhm-gjv2"
      },
      "action_statement": "Vulnerability GHSA-6688-9rhm-gjv2 affects version 3.4.11-tuxcare.6 of dompurify."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-10-30T10:20:00.109102+00:00",
      "status_notes": "Vulnerability GHSA-c6gr-qvv4-5v3f is fixed in version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "GHSA-c6gr-qvv4-5v3f"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-10-30T10:20:00.109102+00:00",
      "status_notes": "Vulnerability GHSA-cg2g-xh64-v4q7 is fixed in version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "GHSA-cg2g-xh64-v4q7"
      }
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-10-30T10:20:00.109102+00:00",
      "status_notes": "Vulnerability GHSA-jxrp-r7gx-q4j8 is a false positive for dompurify 3.4.11-tuxcare.6.",
      "vulnerability": {
        "name": "GHSA-jxrp-r7gx-q4j8"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-11-14T14:22:00.127183+00:00",
      "status_notes": "Vulnerability GHSA-mjjq-c88q-qhr6 affects version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "GHSA-mjjq-c88q-qhr6"
      },
      "action_statement": "Vulnerability GHSA-mjjq-c88q-qhr6 affects version 3.4.11-tuxcare.6 of dompurify."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-10-30T10:20:00.109102+00:00",
      "status_notes": "Vulnerability GHSA-mrv2-3pqr-j5jr is fixed in version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "GHSA-mrv2-3pqr-j5jr"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/dompurify@3.4.11-tuxcare.6",
          "identifiers": {
            "purl": "pkg:npm/dompurify@3.4.11-tuxcare.6"
          }
        }
      ],
      "timestamp": "2026-11-14T14:23:00.054932+00:00",
      "status_notes": "Vulnerability GHSA-p98j-92pf-mc4p affects version 3.4.11-tuxcare.6 of dompurify.",
      "vulnerability": {
        "name": "GHSA-p98j-92pf-mc4p"
      },
      "action_statement": "Vulnerability GHSA-p98j-92pf-mc4p affects version 3.4.11-tuxcare.6 of dompurify."
    }
  ]
}