{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a5baa440-6e95-5e8f-9b1f-98b55ba51b34", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15", "type": "library", "name": "@next/env", "version": "13.5.11-tuxcare.15", "purl": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:9ae0ba48-d4b7-5f5b-a8c7-e88a7d7e3cce", "id": "AIKIDO-2024-10173", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.15 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:4b36fc8a-7e67-57db-9ee3-63741bd42aa6", "id": "AIKIDO-2025-10936", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.15 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:3f9ca0b9-5d26-53c8-8e68-70bcbb008a21", "id": "CVE-2024-34351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.15 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:20827ee3-8e7c-5db8-8917-8b03e966d2f0", "id": "CVE-2024-47831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.15 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:374819dd-98c5-5299-9c8d-9c5961c26c5a", "id": "CVE-2024-51479", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.15 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:c6f787f0-c7bd-5243-8781-92ad7d083d98", "id": "CVE-2025-32421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.15 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:dd33d7ca-4d95-5c33-93e3-22333b273022", "id": "CVE-2025-48068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.15 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:8cdb9e4f-3a2f-5240-8568-88a5477a4c76", "id": "CVE-2025-55173", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.15 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:4282176c-3ab1-50ac-b295-538c7401b5e3", "id": "CVE-2025-55183", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55183 affects version 13.5.11-tuxcare.15 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:a2965992-2bbb-5ce5-bb16-ad6f214666ef", "id": "CVE-2025-55184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.15 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:05f2fe41-0f30-598a-ac17-13bf6f92bb03", "id": "CVE-2025-57752", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.15 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:7f9335f9-2e73-5d57-ad2e-ab68ea3db056", "id": "CVE-2025-57822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.15 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:a2f699c2-1f6f-5ac7-a7bd-ed95b675eb45", "id": "CVE-2025-59471", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.15 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:bdcc3328-c97c-54e6-999a-3142cc84663a", "id": "CVE-2025-59472", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.15 of @next/env. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat..." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:be539e7a-3d2f-57da-a41d-c244e2378d1c", "id": "CVE-2025-67779", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.15 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:ab9f877e-e7a2-58df-97b2-8d1ceb783196", "id": "CVE-2026-27980", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.15 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:bbd91df4-2d12-514b-aee2-bb2bded5e626", "id": "CVE-2026-29057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.15 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:31cfe339-ab32-5e8b-80e4-9b8bf9b0b3f9", "id": "CVE-2026-44572", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.15 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:389c4299-57d0-5f89-9ba5-c6b976860b59", "id": "CVE-2026-44573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.15 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:aa832058-2584-5dfd-a7a2-fcc4b7015bc8", "id": "CVE-2026-44577", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.15 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:f42ed40a-83c2-5312-b7ea-8e16802d7e29", "id": "CVE-2026-44578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.15 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:f0ebf5e7-b4fd-5465-8703-d74f24f2b041", "id": "CVE-2026-44580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.15 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:87c80f99-0eaa-5469-b01b-3ff7232ca0c0", "id": "CVE-2026-44581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.15 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:eafad70a-a91b-5e57-a171-fa2c344d3343", "id": "CVE-2026-44582", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.15 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:08bc933d-557a-5e13-bbe4-51dabeafe0af", "id": "CVE-2026-64641", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.15 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:4dab0846-727d-5884-ada3-b023de5f0bd6", "id": "CVE-2026-64643", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.15 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:cb439aed-efca-5913-a869-b723c9671150", "id": "CVE-2026-64645", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.15 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:0a864f00-9d3f-57f9-8806-0c434d7233ea", "id": "CVE-2026-64646", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.15 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:0669e0f9-3442-5c50-a575-b0395450dd23", "id": "CVE-2026-64647", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.15 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:76b8a7b9-84b3-505a-b6dd-031d88c599e3", "id": "CVE-2026-64648", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64648 affects version 13.5.11-tuxcare.15 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:4371bf99-71ea-5968-872f-027c5dc6071f", "id": "GHSA-5j59-xgg2-r9c4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.15 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:75264dfb-0736-5959-8012-c885f073aa86", "id": "GHSA-8h8q-6873-q5fj", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.15 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:107003ed-319f-583b-bbdf-ca7d16f8bd1a", "id": "GHSA-h25m-26qc-wcjf", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.15 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:717cd64c-6976-510e-9b71-d2c4b817e9e0", "id": "GHSA-mwv6-3258-q52c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.15 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:210c73ad-cdd4-5754-b04e-2332b6b35b15", "id": "GHSA-q4gf-8mx6-v5v3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.15 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.15" } ] }