{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:ba896182-10e7-5b6b-a49c-0ea8df04939f",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "bootstrap",
      "purl": "pkg:npm/bootstrap@3.0.0-tuxcare.1",
      "type": "library",
      "bom-ref": "pkg:npm/bootstrap@3.0.0-tuxcare.1",
      "version": "3.0.0-tuxcare.1",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2016-10735",
      "affects": [
        {
          "ref": "pkg:npm/bootstrap@3.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:178ea3ee-6b54-597d-b0ca-08bd63c51c33",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2016-10735 is fixed in version 3.0.0-tuxcare.1 of bootstrap."
      }
    },
    {
      "id": "CVE-2018-14040",
      "affects": [
        {
          "ref": "pkg:npm/bootstrap@3.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:cb0be78c-2cf5-58b8-9760-2e47d2dc964c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2018-14040 is fixed in version 3.0.0-tuxcare.1 of bootstrap."
      }
    },
    {
      "id": "CVE-2018-14042",
      "affects": [
        {
          "ref": "pkg:npm/bootstrap@3.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e8ac75fa-9668-5663-aaa6-999c2a3ead94",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2018-14042 is fixed in version 3.0.0-tuxcare.1 of bootstrap."
      }
    },
    {
      "id": "CVE-2018-20676",
      "affects": [
        {
          "ref": "pkg:npm/bootstrap@3.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8e5a6fd8-9d06-53d8-93e0-22e6ed7cb9dc",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-20676 does not affect version 3.0.0-tuxcare.1 of bootstrap. The tooltip data-viewport option this advisory abuses was introduced in Bootstrap v3.1.0, which postdates 3.0.0 \u2014 the vulnerable pattern never existed in this version. Confirmed by the Momus vulnerability check on pp 217592. VPV created in error from an OSV match whose 'introduced: 0' is an auto-generated bound, not a statement about 3.0.0.",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2018-20677",
      "affects": [
        {
          "ref": "pkg:npm/bootstrap@3.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9666314f-23a4-5143-b776-914f80e20614",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-20677 does not affect version 3.0.0-tuxcare.1 of bootstrap. The affix target and tooltip viewport XSS vectors were added in v3.2.0, after this version. The data-attribute issues that did exist in 3.0.0 were already fixed (patches/CVE-2018-14040.patch, patches/CVE-2018-14042.patch). Confirmed by the Momus vulnerability check on pp 217626. VPV created in error from an OSV match whose 'introduced: 0' is an auto-generated bound.",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2019-8331",
      "affects": [
        {
          "ref": "pkg:npm/bootstrap@3.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d8263f18-2d65-5e65-8cad-36df58108bb9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2019-8331 is fixed in version 3.0.0-tuxcare.1 of bootstrap."
      }
    },
    {
      "id": "CVE-2024-6485",
      "affects": [
        {
          "ref": "pkg:npm/bootstrap@3.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d856fce3-44a5-5b6a-bf94-ad8fc7ac58a2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-6485 is fixed in version 3.0.0-tuxcare.1 of bootstrap."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/bootstrap@3.0.0-tuxcare.1"
    }
  ]
}