{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b57f5583-3775-5219-85ff-bb5873bad929",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@react-router/serve",
      "purl": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.4",
      "type": "library",
      "bom-ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.4",
      "version": "7.5.1-tuxcare.4",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-43864",
      "affects": [
        {
          "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:c80a71ce-31c4-5050-bdd6-b49203075e27",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-43864 is fixed in version 7.5.1-tuxcare.4 of @react-router/serve."
      }
    },
    {
      "id": "CVE-2025-43865",
      "affects": [
        {
          "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:738539c3-888b-5754-912e-0b78dc4961a8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-43865 is fixed in version 7.5.1-tuxcare.4 of @react-router/serve."
      }
    },
    {
      "id": "CVE-2025-59057",
      "affects": [
        {
          "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:baba5bc3-3f16-5cc7-80e2-9e92d5a09681",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59057 is fixed in version 7.5.1-tuxcare.4 of @react-router/serve."
      }
    },
    {
      "id": "CVE-2025-61686",
      "affects": [
        {
          "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:f02b6564-d748-5ad5-9715-3c83efdeb506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-61686 affects version 7.5.1-tuxcare.4 of @react-router/serve, and is fixed in 7.5.1-tuxcare.5."
      }
    },
    {
      "id": "CVE-2025-68470",
      "affects": [
        {
          "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:5e557916-a392-58d0-9b61-1d756f45a1fe",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-68470 is fixed in version 7.5.1-tuxcare.4 of @react-router/serve."
      }
    },
    {
      "id": "CVE-2026-21884",
      "affects": [
        {
          "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:913d2d72-e63d-5f86-a523-5285266e9772",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-21884 is fixed in version 7.5.1-tuxcare.4 of @react-router/serve."
      }
    },
    {
      "id": "CVE-2026-22029",
      "affects": [
        {
          "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:dad61664-95bb-5583-85ca-b1319db1fbb8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22029 is fixed in version 7.5.1-tuxcare.4 of @react-router/serve."
      }
    },
    {
      "id": "CVE-2026-22030",
      "affects": [
        {
          "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:dc885640-8005-563a-a4f8-6fefcd5b1c50",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22030 is fixed in version 7.5.1-tuxcare.4 of @react-router/serve."
      }
    },
    {
      "id": "CVE-2026-33244",
      "affects": [
        {
          "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:4a252472-034e-58b9-9eac-89a3600b3a82",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33244 affects version 7.5.1-tuxcare.4 of @react-router/serve."
      }
    },
    {
      "id": "CVE-2026-34077",
      "affects": [
        {
          "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:21b659dc-be56-5fe1-994c-d5652872f62d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34077 affects version 7.5.1-tuxcare.4 of @react-router/serve, and is fixed in 7.5.1-tuxcare.10."
      }
    },
    {
      "id": "CVE-2026-40181",
      "affects": [
        {
          "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:d9b37fd1-097a-5bc5-bdf9-ee1dfaaa2a14",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40181 affects version 7.5.1-tuxcare.4 of @react-router/serve, and is fixed in 7.5.1-tuxcare.9."
      }
    },
    {
      "id": "CVE-2026-42211",
      "affects": [
        {
          "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:d340787e-5663-5be1-9257-4558b04ec3a5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42211 affects version 7.5.1-tuxcare.4 of @react-router/serve, and is fixed in 7.5.1-tuxcare.6."
      }
    },
    {
      "id": "CVE-2026-42342",
      "affects": [
        {
          "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:5e0533a3-b86c-5606-9491-9c3c7d75bffb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42342 affects version 7.5.1-tuxcare.4 of @react-router/serve, and is fixed in 7.5.1-tuxcare.8."
      }
    },
    {
      "id": "CVE-2026-53666",
      "affects": [
        {
          "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:e55000b5-1bd4-57cd-bcb8-3dd549c935ff",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53666 affects version 7.5.1-tuxcare.4 of @react-router/serve, and is fixed in 7.5.1-tuxcare.5."
      }
    },
    {
      "id": "CVE-2026-53669",
      "affects": [
        {
          "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:bb9211a7-4c98-581c-abb8-4133df3f5a9d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53669 affects version 7.5.1-tuxcare.4 of @react-router/serve, and is fixed in 7.5.1-tuxcare.5."
      }
    },
    {
      "id": "CVE-2026-55685",
      "affects": [
        {
          "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:51f13514-ef8c-5540-9bd7-77e9c19a214b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55685 affects version 7.5.1-tuxcare.4 of @react-router/serve, and is fixed in 7.5.1-tuxcare.7."
      }
    },
    {
      "id": "GHSA-8v8x-cx79-35w7",
      "affects": [
        {
          "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:c8ebaad2-1ca4-57d7-915e-9d36afd00b69",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-8v8x-cx79-35w7 affects version 7.5.1-tuxcare.4 of @react-router/serve, and is fixed in 7.5.1-tuxcare.10."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.4"
    }
  ]
}