{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:6f925a16-8e55-5678-8a58-38c4b4a307be", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15", "type": "library", "name": "@next/mdx", "version": "13.5.11-tuxcare.15", "purl": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:f31c646f-299f-512c-b240-04bc7157f199", "id": "AIKIDO-2024-10173", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.15 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:e9e335cd-0dca-5dc3-8444-b1f8c5605d9f", "id": "AIKIDO-2025-10936", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.15 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:fcb07ef9-07ac-50ae-9972-c58b6b46b8da", "id": "CVE-2024-34351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.15 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:df47c7c5-10b6-5bf4-b09f-6afc5484ca96", "id": "CVE-2024-47831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.15 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:abbed16e-6656-504b-a6de-ef02184b6634", "id": "CVE-2024-51479", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.15 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:0767e662-cf9a-5d7d-9a95-3d7fde2bfa03", "id": "CVE-2025-32421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.15 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:c73ac8bd-0c98-54c8-97d9-a15c30350ef3", "id": "CVE-2025-48068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.15 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:f775ea94-1dca-5d31-95f6-0d474d643b83", "id": "CVE-2025-55173", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.15 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:f7d1eb1c-e57c-55d5-9eb4-98b56c6d3a7a", "id": "CVE-2025-55183", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55183 affects version 13.5.11-tuxcare.15 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:1cdf58b3-5ef8-56d5-9822-b4b157ce11eb", "id": "CVE-2025-55184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.15 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:648856dd-afc7-519e-8999-ae3d6600ce52", "id": "CVE-2025-57752", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.15 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:0719d6e1-4af6-5fa8-9295-521cebe9fc6a", "id": "CVE-2025-57822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.15 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:03dfe3c7-4ced-547c-8804-b40edecd0da7", "id": "CVE-2025-59471", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.15 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:fffb0668-071b-5ab5-9144-fe7eeec9b65f", "id": "CVE-2025-59472", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.15 of @next/mdx. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat..." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:702a0c71-c27f-533e-abde-26d01c676178", "id": "CVE-2025-67779", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.15 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:a716fcdb-737a-5988-a1e9-1440dbd55ab2", "id": "CVE-2026-27980", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.15 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:ac459b5f-2d2e-59a7-b094-a27af834c0e8", "id": "CVE-2026-29057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.15 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:8f0fe922-94eb-56ed-86f2-303c1c24b4a4", "id": "CVE-2026-44572", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.15 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:02dff5b7-ba6a-5dce-978a-6dccd3f07b81", "id": "CVE-2026-44573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.15 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:15fda4b4-6d19-5ed2-b541-bb6a809d7c6c", "id": "CVE-2026-44577", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.15 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:eef72043-111d-5c8e-a911-02c125f8eaa6", "id": "CVE-2026-44578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.15 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:0a2f9d9d-0a0e-580f-aed4-a9e7653e7557", "id": "CVE-2026-44580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.15 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:35d5af58-2f76-5deb-83fe-d64a163043e1", "id": "CVE-2026-44581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.15 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:cae3e868-65b6-51b2-84de-95df317ca106", "id": "CVE-2026-44582", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.15 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:b7ca63ce-12d4-52d8-b09a-ccbd03faa138", "id": "CVE-2026-64641", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.15 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:af53689e-c81c-54d6-bdff-9a83037c11da", "id": "CVE-2026-64643", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.15 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:8ae35c01-c897-5bdb-84c1-1d77b686b8d3", "id": "CVE-2026-64645", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.15 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:c8aeefe3-1498-58b9-8641-3e0f93c51369", "id": "CVE-2026-64646", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.15 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:1a1ca4da-6350-5a6e-832c-d5cb32ca7071", "id": "CVE-2026-64647", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.15 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:6575258b-ed57-5e2d-a795-292d4f3ae854", "id": "CVE-2026-64648", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64648 affects version 13.5.11-tuxcare.15 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:0e2a6ed9-44ce-5930-997c-f515dd72de7a", "id": "GHSA-5j59-xgg2-r9c4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.15 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:6c83206b-f543-5355-8d67-d6a5bf86d79e", "id": "GHSA-8h8q-6873-q5fj", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.15 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:b39c507c-f432-502f-b85c-9363d00b4a1a", "id": "GHSA-h25m-26qc-wcjf", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.15 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:73f9708d-ae1b-58df-b905-b4c109836349", "id": "GHSA-mwv6-3258-q52c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.15 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:28b14ca4-ca59-51f5-9062-10be4b51a77b", "id": "GHSA-q4gf-8mx6-v5v3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.15 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.15" } ] }