{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:af71fad7-d0d0-531b-9474-968c4fc3e5bf",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "lodash",
      "purl": "pkg:npm/lodash@4.17.20",
      "type": "library",
      "bom-ref": "pkg:npm/lodash@4.17.20",
      "version": "4.17.20",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2020-28500",
      "affects": [
        {
          "ref": "pkg:npm/lodash@4.17.20"
        }
      ],
      "bom-ref": "urn:uuid:830370d8-c7f3-51fa-af00-0aed667d220c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-28500 affects version 4.17.20 of lodash."
      }
    },
    {
      "id": "CVE-2021-23337",
      "affects": [
        {
          "ref": "pkg:npm/lodash@4.17.20"
        }
      ],
      "bom-ref": "urn:uuid:9059f943-3d74-5ade-829b-e10c2d245870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-23337 affects version 4.17.20 of lodash."
      }
    },
    {
      "id": "CVE-2025-13465",
      "affects": [
        {
          "ref": "pkg:npm/lodash@4.17.20"
        }
      ],
      "bom-ref": "urn:uuid:482202f0-79ae-56d4-aabe-c2a0f1df9309",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-13465 affects version 4.17.20 of lodash."
      }
    },
    {
      "id": "CVE-2026-2950",
      "affects": [
        {
          "ref": "pkg:npm/lodash@4.17.20"
        }
      ],
      "bom-ref": "urn:uuid:23864987-52e3-59dd-868d-e479dfb627b9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-2950 affects version 4.17.20 of lodash."
      }
    },
    {
      "id": "CVE-2026-4800",
      "affects": [
        {
          "ref": "pkg:npm/lodash@4.17.20"
        }
      ],
      "bom-ref": "urn:uuid:a0daab64-de0b-5ac9-9a0d-05977f572750",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-4800 affects version 4.17.20 of lodash."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/lodash@4.17.20"
    }
  ]
}