{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:9a714fe8-f4fe-5cd8-bab8-6b386baa44b4", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15", "type": "library", "name": "@next/polyfill-nomodule", "version": "13.5.11-tuxcare.15", "purl": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:f24faaf9-ec7a-5e4e-a750-38df70dc82a1", "id": "AIKIDO-2024-10173", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:2c13cd0d-b8e3-5c13-b8d0-45b570c5d6cf", "id": "AIKIDO-2025-10936", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:2d8251b9-5c5d-5373-8ee0-b786c4c3c351", "id": "CVE-2024-34351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:dcaebd5f-772f-53a0-9d1f-0e55524cfcbb", "id": "CVE-2024-47831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:131a0f4c-dad7-58f8-b92c-4471d6c17f91", "id": "CVE-2024-51479", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:72d24e5e-142e-5f0c-a249-002e1fea5a18", "id": "CVE-2025-32421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:5384d142-6197-524b-ad7a-c552b8864be9", "id": "CVE-2025-48068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:9b794a60-fb74-5687-ac49-039aba546bcd", "id": "CVE-2025-55173", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:eca06dd5-c511-5935-9f03-7fd784ee0dcb", "id": "CVE-2025-55183", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55183 affects version 13.5.11-tuxcare.15 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:a24226c1-e9b4-5dfa-ad57-04eb39b231b3", "id": "CVE-2025-55184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:0b4d97ca-3398-580f-9730-145f04c340a3", "id": "CVE-2025-57752", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:ebb28f42-88e6-5bde-b85c-8754847ac03d", "id": "CVE-2025-57822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:085b91fc-fb8f-55b3-8dec-c00f326a64c3", "id": "CVE-2025-59471", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:c62d69b1-929c-55a3-b9b9-c44777c84d2f", "id": "CVE-2025-59472", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.15 of @next/polyfill-nomodule. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat..." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:89861f88-e5b2-53bb-98b9-994be0542b2a", "id": "CVE-2025-67779", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:6ec3984a-5c65-5319-8783-97e584a72bf1", "id": "CVE-2026-27980", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:4fde82b3-df4d-5ad0-bbfb-2d28f2cab123", "id": "CVE-2026-29057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:5936aeab-96c6-5576-b6e9-37d94eb7eace", "id": "CVE-2026-44572", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:9547c93c-5326-5b66-bb5f-3c87af0291d1", "id": "CVE-2026-44573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:29647c83-f3b8-566d-801e-322aa07ca9e1", "id": "CVE-2026-44577", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:6726b6e0-a664-55b4-b743-d731813b453f", "id": "CVE-2026-44578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:7ddd4d2e-6d1a-5ef7-9567-b8d93ea45058", "id": "CVE-2026-44580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:43398c41-0d0c-5c86-aa9a-6df98652a903", "id": "CVE-2026-44581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:760aaf2d-6b58-59d1-a551-2da15e76dcdd", "id": "CVE-2026-44582", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:e79568a5-ed29-55ab-b002-944e7fa34fbf", "id": "CVE-2026-64641", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:47863385-b8c6-5c14-931a-3ca965cbb490", "id": "CVE-2026-64643", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:854f7fc0-069f-537f-9305-ff5bb28db898", "id": "CVE-2026-64645", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:3584b7e6-a26a-5056-8657-42ecb9c3feb8", "id": "CVE-2026-64646", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:a6d76d86-0ce5-51b3-9dc8-1161eb39df51", "id": "CVE-2026-64647", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:db17ba38-dc3f-51e3-aca8-7941b499acb9", "id": "CVE-2026-64648", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64648 affects version 13.5.11-tuxcare.15 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:d64ab0f3-30b0-5019-9236-47231b51e1aa", "id": "GHSA-5j59-xgg2-r9c4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:da6aaf84-4f68-5c65-8613-a72934833a1c", "id": "GHSA-8h8q-6873-q5fj", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:64f75cf5-67d3-57f4-940c-9d854c93743b", "id": "GHSA-h25m-26qc-wcjf", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:53fe2494-a9b0-5eac-b936-0e57324e7fef", "id": "GHSA-mwv6-3258-q52c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:b244bcc3-6e2d-51df-8453-f748540ce13b", "id": "GHSA-q4gf-8mx6-v5v3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.15 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.15" } ] }