{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:42fa5ff6-178e-5ef3-b8f5-162ac397b41b", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16", "type": "library", "name": "@next/polyfill-nomodule", "version": "13.5.11-tuxcare.16", "purl": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:06e28caa-6426-52a3-9f73-bf2fd0e53f14", "id": "AIKIDO-2024-10173", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:bb88bf0b-db67-51c7-9f25-701a9adf4610", "id": "AIKIDO-2025-10936", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:ee0372e2-bd10-5c8f-a066-89543ba9ed10", "id": "CVE-2024-34351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:c816b269-6b32-546f-ae9e-f31db980fde6", "id": "CVE-2024-47831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:f47d49ae-5065-50f6-b2a6-7d36c78fd40f", "id": "CVE-2024-51479", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:990ff073-e2e0-579a-9c13-5a4c8e8e793a", "id": "CVE-2025-32421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:a5b6b52c-a219-5126-bb30-743ce2535fde", "id": "CVE-2025-48068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:b2b67b44-a513-532e-9b7d-368cfacabb51", "id": "CVE-2025-55173", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:4f534f3e-2796-5eb7-bc42-70e5bdb508cb", "id": "CVE-2025-55183", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55183 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:dcd76a89-dcc0-55bf-ab6c-8bc88e4a1f7a", "id": "CVE-2025-55184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:301e8065-230d-56e5-a106-f5f720692e3f", "id": "CVE-2025-57752", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:d56510a6-e628-5c4d-823f-3ad4a5b1de30", "id": "CVE-2025-57822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:7ec88182-7ebc-5f4b-8465-e38dffd6d59d", "id": "CVE-2025-59471", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:d1bf7845-4aca-5374-8013-80b6045d78f1", "id": "CVE-2025-59472", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.16 of @next/polyfill-nomodule. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat..." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:9c659d7c-b294-5d02-a436-8e2893329953", "id": "CVE-2025-67779", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:fe96d818-c97e-54c5-8de3-57e5f733cce4", "id": "CVE-2026-27980", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:0b520ff1-88fb-539e-bfdb-86f21ccabe13", "id": "CVE-2026-29057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:0a233e7d-f855-5ebf-ab34-c66fb2ccfcb9", "id": "CVE-2026-44572", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:526dd6b3-c47a-5b65-82e0-3f332279843b", "id": "CVE-2026-44573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:bbef0e3d-c409-5463-9f0c-80326fd89b09", "id": "CVE-2026-44577", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:3349cb3b-ac74-5bdf-89ff-f6d880635658", "id": "CVE-2026-44578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:c5bc7659-9e0a-5b8a-ba72-7a0bd0dde9a9", "id": "CVE-2026-44580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:2afebfb1-dfe4-5113-b730-c850845926f2", "id": "CVE-2026-44581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:f8c41e06-7c5c-55a6-b82b-2cb6dc06914f", "id": "CVE-2026-44582", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:d9a6b9cb-fdec-52ae-bf46-68232bdf7983", "id": "CVE-2026-64641", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:5d993cbb-6bc0-5dd4-9b66-38c605586e90", "id": "CVE-2026-64643", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:75b6fcce-e5f8-5b5e-868a-5853992a8736", "id": "CVE-2026-64645", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:54fa8213-a9bb-5fe7-a04b-0cc16a8ccd1e", "id": "CVE-2026-64646", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:80afbc8d-b38c-5bf6-bbb9-6a1fe48bb42e", "id": "CVE-2026-64647", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:e585f1ec-85cd-5287-a4da-a5a8487436d4", "id": "CVE-2026-64648", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64648 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:60d725a0-bdb5-5fa4-8702-56b96758e4eb", "id": "GHSA-5j59-xgg2-r9c4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:ae457608-d375-5304-8f01-3f8a164c0e05", "id": "GHSA-8h8q-6873-q5fj", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:8b4a1370-aba6-5edb-a518-1cb1191deffc", "id": "GHSA-h25m-26qc-wcjf", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:5c8aa2b8-9e97-526c-85d6-9ce5b24bb828", "id": "GHSA-mwv6-3258-q52c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:0179863f-8566-5b9a-b278-cae7de0d0532", "id": "GHSA-q4gf-8mx6-v5v3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.16" } ] }