{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:2e1152fa-7a17-5cda-b4fa-e4e2f9bc3ff7", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16", "type": "library", "name": "@next/font", "version": "13.5.11-tuxcare.16", "purl": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:9d33034d-ac2a-58df-92cb-8a20bf468b52", "id": "AIKIDO-2024-10173", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.16 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:f13dce5c-e0d9-51f5-aa79-e357382c1554", "id": "AIKIDO-2025-10936", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.16 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:50942e16-f30f-5449-b3f8-804bb5bd81e0", "id": "CVE-2024-34351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.16 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:fc738e53-2a30-5143-b10e-f58ffb04fffc", "id": "CVE-2024-47831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.16 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:555c4120-ddab-50e0-b443-574d4f15e6d8", "id": "CVE-2024-51479", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.16 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:294616ff-e4d2-5258-97a1-1d49d9870a3b", "id": "CVE-2025-32421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.16 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:f155ec6f-2b12-5895-ab40-f6ebcc65dc66", "id": "CVE-2025-48068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.16 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:5d6ec65f-49b0-5fac-be5f-c9eeadc7ed21", "id": "CVE-2025-55173", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.16 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:6f9ef131-f836-5526-a858-0ad7a2e3ab99", "id": "CVE-2025-55183", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55183 is fixed in version 13.5.11-tuxcare.16 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:f0c4386c-c8f6-5d47-a7bc-b8192412f139", "id": "CVE-2025-55184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.16 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:ee8ec2d8-f5bf-52b1-991b-3e5ddcc50a56", "id": "CVE-2025-57752", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.16 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:c9cb0a60-a20e-5c3b-b3b6-d6a70c42c1aa", "id": "CVE-2025-57822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.16 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:fc838366-7722-53e3-ad26-2aef12eb3d73", "id": "CVE-2025-59471", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.16 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:93d94229-ef92-5743-b00a-f658f69081d6", "id": "CVE-2025-59472", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.16 of @next/font. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat..." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:1d9f764f-c84b-5d4d-b357-15641d5dd45c", "id": "CVE-2025-67779", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.16 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:d9240bd9-d493-5a9d-b580-2685187578af", "id": "CVE-2026-27980", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.16 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:f39f5acb-8024-555d-a728-168bbe8305e5", "id": "CVE-2026-29057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.16 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:1fd9bd8d-0c55-5fe3-b599-d6f484047ccf", "id": "CVE-2026-44572", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.16 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:7fc3d985-7dfa-59bd-854a-344843bd0cb7", "id": "CVE-2026-44573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.16 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:767f5665-048a-5080-8c61-4cb53ef3e7d1", "id": "CVE-2026-44577", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.16 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:95fced03-89b7-548b-ab29-4c754a667724", "id": "CVE-2026-44578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.16 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:eedd81c3-e56f-5e41-b334-1472ec53be01", "id": "CVE-2026-44580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.16 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:bbe1349d-5d9c-5bb7-acc6-18a8a688898a", "id": "CVE-2026-44581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.16 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:08414c0b-3669-58cc-856b-ccb938210bc9", "id": "CVE-2026-44582", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.16 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:29351175-fc87-53fa-bec7-6f6c487f04e7", "id": "CVE-2026-64641", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.16 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:720f2fe5-37d9-5cf7-a97d-0914cbac7e3d", "id": "CVE-2026-64643", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.16 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:74db1796-5ced-562b-acc7-41e8bbbe233a", "id": "CVE-2026-64645", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.16 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:3350ebbb-8f43-5bf0-993f-87556c3517de", "id": "CVE-2026-64646", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.16 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:b4e3f7f8-310b-579f-8d68-a78ead5be486", "id": "CVE-2026-64647", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.16 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:17731f44-b7b9-543b-b969-becefcf60a59", "id": "CVE-2026-64648", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64648 is fixed in version 13.5.11-tuxcare.16 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:b3259860-dacb-5d1c-8613-14baca4bdd2f", "id": "GHSA-5j59-xgg2-r9c4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.16 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:b6cec039-5c65-5abd-8f59-f999e1d12c13", "id": "GHSA-8h8q-6873-q5fj", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.16 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:d6f28ea3-c3ae-53ad-908e-43382cd7212a", "id": "GHSA-h25m-26qc-wcjf", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.16 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:67fa37f6-dd3f-5e8e-a3e1-65f4b5dba329", "id": "GHSA-mwv6-3258-q52c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.16 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:63d01b89-1f00-51de-91a2-098cc96931b3", "id": "GHSA-q4gf-8mx6-v5v3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.16 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.16" } ] }