{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b5d06042-e356-5985-8abd-09419f93102c", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15", "type": "library", "name": "@next/bundle-analyzer", "version": "13.5.11-tuxcare.15", "purl": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:da7b5770-5678-52b1-ad5c-fed7af6c2a6e", "id": "AIKIDO-2024-10173", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.15 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:5f52b522-8366-52ab-9280-570d70a58368", "id": "AIKIDO-2025-10936", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.15 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:2e2ce942-e839-5777-b9a3-16c56dbadf11", "id": "CVE-2024-34351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.15 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:1b2656ff-7814-5a44-a513-c241b7ea96b5", "id": "CVE-2024-47831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.15 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:bc1e9959-afd9-51c3-9d06-2ffcc013e23a", "id": "CVE-2024-51479", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.15 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:ce025d75-2d72-5c9b-ae07-df30a85def03", "id": "CVE-2025-32421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.15 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:c58d50f7-15ad-5c22-b8d5-a35755004a11", "id": "CVE-2025-48068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.15 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:55968ca0-1e8c-5521-b9eb-68d3857a656f", "id": "CVE-2025-55173", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.15 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:0f54d5f7-831c-53e9-abb9-d8ffa6b4fd9c", "id": "CVE-2025-55183", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55183 affects version 13.5.11-tuxcare.15 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:1ee88823-de06-56fd-bb53-9b1bfffc5cae", "id": "CVE-2025-55184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.15 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:e95d6986-0b53-50e2-89e3-f4f3b10b4ccc", "id": "CVE-2025-57752", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.15 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:ba14e768-0f02-596c-a437-7452e71e6044", "id": "CVE-2025-57822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.15 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:fbf6af30-e9df-5aaf-bea2-5c206fec08f8", "id": "CVE-2025-59471", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.15 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:f1e5722c-5cae-5e37-b05b-b3092c05c26a", "id": "CVE-2025-59472", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.15 of @next/bundle-analyzer. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat..." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:33bc51c6-bd97-5632-8662-1b4380a1411e", "id": "CVE-2025-67779", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.15 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:010054ab-33a6-5a97-9a66-1ca6389ae411", "id": "CVE-2026-27980", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.15 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:e7648eff-ecb7-575d-bc5d-fd39f885bd5d", "id": "CVE-2026-29057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.15 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:b3d394a3-8597-5c9b-8d77-ca0e8721ef7a", "id": "CVE-2026-44572", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.15 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:7b21eda4-8502-5147-9792-0034f41147ad", "id": "CVE-2026-44573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.15 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:a0efc5b2-8c1f-5cb6-b187-432895e0b4ca", "id": "CVE-2026-44577", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.15 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:bc7c1da4-4588-5684-a0d2-d7627a016f91", "id": "CVE-2026-44578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.15 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:a6f82da0-3e65-5303-994b-dedef78071fb", "id": "CVE-2026-44580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.15 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:3353b134-fbde-53e9-bc22-9317c5405818", "id": "CVE-2026-44581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.15 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:b54f34ef-46f7-5f94-b391-00d100965955", "id": "CVE-2026-44582", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.15 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:68af0138-69d6-5a65-a34e-2d099ea91a27", "id": "CVE-2026-64641", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.15 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:f8b7cd11-c9e4-5870-9c75-a2e04456df11", "id": "CVE-2026-64643", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.15 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:616f7c05-69f8-5e3c-a847-d7fdbcebf40d", "id": "CVE-2026-64645", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.15 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:66ec93c5-28b8-5593-9304-ec2fcce72962", "id": "CVE-2026-64646", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.15 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:9253df27-6615-5790-ba06-fce0a8bec79b", "id": "CVE-2026-64647", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.15 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:3572f507-cfc3-55f7-9286-b349b109ab92", "id": "CVE-2026-64648", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64648 affects version 13.5.11-tuxcare.15 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:83e454fa-5654-5413-bd04-8188cf1cb108", "id": "GHSA-5j59-xgg2-r9c4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.15 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:e4a77a9f-15a6-5b03-bc5d-db6c45f788f9", "id": "GHSA-8h8q-6873-q5fj", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.15 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:9ce7ad6a-6b01-52ad-a358-5965c9e26164", "id": "GHSA-h25m-26qc-wcjf", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.15 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:8cd088af-881e-5ec7-8941-c8df95631e99", "id": "GHSA-mwv6-3258-q52c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.15 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:d457756f-c005-585d-a6c7-ecffdadd494b", "id": "GHSA-q4gf-8mx6-v5v3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.15 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.15" } ] }