{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:f9264898-1c58-54a5-b8d3-cc88fcdac8e4", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15", "type": "library", "name": "@next/codemod", "version": "13.5.11-tuxcare.15", "purl": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:f1cbd233-fa4d-5676-a176-07fd3a5a1114", "id": "AIKIDO-2024-10173", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.15 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:eac304ab-073d-51be-ad9e-5b9767282974", "id": "AIKIDO-2025-10936", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.15 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:8881e1dc-3054-58f5-89f4-688d39744c70", "id": "CVE-2024-34351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.15 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:ed029491-489e-563a-9096-f0b49b4a002e", "id": "CVE-2024-47831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.15 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:d354c6f0-499e-5389-a773-7645fd0eb6a5", "id": "CVE-2024-51479", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.15 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:27216343-d249-592f-9a3a-f77b737f8dd0", "id": "CVE-2025-32421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.15 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:9bbd06f0-b5dd-57c5-98eb-073e308d12de", "id": "CVE-2025-48068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.15 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:a9006947-3383-593e-be31-39a58b8ae4ff", "id": "CVE-2025-55173", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.15 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:51fa83df-39ed-5323-9156-03fc6823b1bc", "id": "CVE-2025-55183", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55183 affects version 13.5.11-tuxcare.15 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:6467c55d-edcf-5f95-8b35-0b48b08fe488", "id": "CVE-2025-55184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.15 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:1f61b7ce-abdd-5f01-ad3a-535c0b1d4a16", "id": "CVE-2025-57752", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.15 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:e3218673-dcfb-50b6-bf58-af49ff1fa186", "id": "CVE-2025-57822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.15 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:2ecd1807-540b-5ceb-9dcb-9b87fbedf7a3", "id": "CVE-2025-59471", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.15 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:df462fc2-9868-5fee-a3d4-0eeea52016f8", "id": "CVE-2025-59472", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.15 of @next/codemod. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat..." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:55f83535-b425-5b8c-bf16-adca673e272b", "id": "CVE-2025-67779", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.15 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:d0bc1552-f869-5b44-8824-625913d53dda", "id": "CVE-2026-27980", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.15 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:5de939d2-9d92-5ae3-a6e8-6770bbaff1b3", "id": "CVE-2026-29057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.15 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:95d4bee8-037d-57ce-b2ec-205d9eebc844", "id": "CVE-2026-44572", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.15 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:6d43612d-0464-5273-b44a-e115ba2b78f8", "id": "CVE-2026-44573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.15 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:1156411c-f319-5a37-ad88-a5c622a4b49d", "id": "CVE-2026-44577", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.15 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:0a4800b0-b9fc-5591-b138-21c4d05489c4", "id": "CVE-2026-44578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.15 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:5b9b8ba7-acda-5c8b-a809-5c2ce9f79eff", "id": "CVE-2026-44580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.15 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:8bca9ce4-4a50-55e1-909f-b5669d4a5ac0", "id": "CVE-2026-44581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.15 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:145fe247-d10b-5664-8735-359f892d027d", "id": "CVE-2026-44582", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.15 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:4a804d9e-e637-5d46-9741-87fb0b4f416d", "id": "CVE-2026-64641", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.15 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:9fa1c35e-3719-54aa-be7d-cc53fa7e63f0", "id": "CVE-2026-64643", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.15 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:65e048b4-8122-5c18-8cee-0f831e2d897e", "id": "CVE-2026-64645", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.15 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:5d46c5a5-3346-5225-a8d2-dfa7dd7d7413", "id": "CVE-2026-64646", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.15 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:55fbb3aa-fa66-5dad-9071-b44624cf6cf1", "id": "CVE-2026-64647", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.15 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:6e6fc630-93de-5151-b2ca-a0ecee784e03", "id": "CVE-2026-64648", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64648 affects version 13.5.11-tuxcare.15 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:616a53c9-66f8-5d98-9df7-f052af694897", "id": "GHSA-5j59-xgg2-r9c4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.15 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:6f362814-7144-5f6e-8803-ca86a4ad2e10", "id": "GHSA-8h8q-6873-q5fj", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.15 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:cbce9f2c-fab6-543f-aaa2-1d6f7fba9942", "id": "GHSA-h25m-26qc-wcjf", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.15 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:86d300d4-1a0b-5b97-af5d-d7c192edbcc7", "id": "GHSA-mwv6-3258-q52c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.15 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:9955d9be-4afe-55a7-a421-b3d7dd8cd141", "id": "GHSA-q4gf-8mx6-v5v3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.15 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.15" } ] }