{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:f1a10d61-ef33-51c9-9f93-a3ab6c80e95d", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15", "type": "library", "name": "@next/polyfill-module", "version": "13.5.11-tuxcare.15", "purl": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:57c8afc8-6c26-53d0-8997-e02a8dbcc730", "id": "AIKIDO-2024-10173", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:23fafdc3-19b8-5ca1-af84-1a939f8dba41", "id": "AIKIDO-2025-10936", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:75058029-066e-59aa-8733-65798e286dc0", "id": "CVE-2024-34351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:e105ca57-f738-5e12-92dd-7840547d0a82", "id": "CVE-2024-47831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:e303395e-107a-5332-9a6d-05639cc8dc95", "id": "CVE-2024-51479", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:1de9f1cd-a32a-5902-b48a-804f5ab7a5e7", "id": "CVE-2025-32421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:7e481bed-19a9-51bc-ae6e-d24fa3bb4b76", "id": "CVE-2025-48068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:ba654d28-e3ea-5cb0-a24d-bf9836b6dbbb", "id": "CVE-2025-55173", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:66ae5e22-e819-5882-854a-d5bd28eafee8", "id": "CVE-2025-55183", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55183 affects version 13.5.11-tuxcare.15 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:db6fc800-daba-5e4b-b024-a8efaef96787", "id": "CVE-2025-55184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:c62481ac-f33f-5a51-aba2-69a746dabb81", "id": "CVE-2025-57752", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:35999e1e-8b3b-5461-9686-07f784be811c", "id": "CVE-2025-57822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:22b37070-1c47-567a-9a01-ffa394e0dbb7", "id": "CVE-2025-59471", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:67b94c22-672c-56e9-a023-4814b399455a", "id": "CVE-2025-59472", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.15 of @next/polyfill-module. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat..." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:fdee143f-5018-5feb-ad04-3fa84060f6ff", "id": "CVE-2025-67779", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:8b2054ba-f071-532d-93c1-77ff4a4c761d", "id": "CVE-2026-27980", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:4d4a9e08-f824-52cb-ae8c-b31ab4d04a76", "id": "CVE-2026-29057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:1d3749a6-ca8b-55d6-aa30-99fdf91f7293", "id": "CVE-2026-44572", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:6e78d473-3613-5e94-9724-cc84d4088b80", "id": "CVE-2026-44573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:5045fe7f-cbd3-5523-9bb2-d7b79ac8f268", "id": "CVE-2026-44577", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:ff6e1a82-724e-5b4a-a3f1-4a19dc190cb1", "id": "CVE-2026-44578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:6e6d649a-717d-5737-995f-b5d990da8a53", "id": "CVE-2026-44580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:bb8e7516-a697-5ff3-9b81-4d1f969490bf", "id": "CVE-2026-44581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:ad9b72cf-f5d9-55ed-a7f3-927b304b8b9d", "id": "CVE-2026-44582", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:89a428cf-f13c-5e24-85de-86c5115e5f79", "id": "CVE-2026-64641", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:4362d1d5-0279-5d2f-abe6-7f31502ebd17", "id": "CVE-2026-64643", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:4c836db8-1cba-5f7b-aeee-ff4bc3e38bf2", "id": "CVE-2026-64645", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:518ceb88-c7b4-5eed-813b-9fe387177dcb", "id": "CVE-2026-64646", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:2065352e-70a8-5ce6-b683-b9fd2920a855", "id": "CVE-2026-64647", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:ada8c77b-8925-5740-8f08-90e30a9b5f01", "id": "CVE-2026-64648", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64648 affects version 13.5.11-tuxcare.15 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:be5e97e3-e813-5609-8102-d2c4dee54f89", "id": "GHSA-5j59-xgg2-r9c4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:784072ce-6391-57eb-b5fd-76cf601372bc", "id": "GHSA-8h8q-6873-q5fj", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:4d7bf432-f529-51b7-872b-add2294e5767", "id": "GHSA-h25m-26qc-wcjf", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:49398032-e916-5ac8-986a-4884fc8fe1f0", "id": "GHSA-mwv6-3258-q52c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:8608cef9-a854-5aa5-9c58-ab56710e70cb", "id": "GHSA-q4gf-8mx6-v5v3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.15" } ] }