{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:90f2786a-ae9c-5ef0-b998-ae8540770cd9", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@next/swc-win32-ia32-msvc", "purl": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12", "type": "library", "bom-ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12", "version": "14.2.12", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-51479", "affects": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ], "bom-ref": "urn:uuid:6fb37acc-4b12-5898-8fae-f9b22e0e93db", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-51479 affects version 14.2.12 of @next/swc-win32-ia32-msvc." } }, { "id": "CVE-2024-56332", "affects": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ], "bom-ref": "urn:uuid:71f11f59-91f1-52ce-9c7c-18d40cc0b4df", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-56332 affects version 14.2.12 of @next/swc-win32-ia32-msvc." } }, { "id": "CVE-2025-29927", "affects": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ], "bom-ref": "urn:uuid:fddf7629-5e45-543c-b31c-f7bc26356e95", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-29927 affects version 14.2.12 of @next/swc-win32-ia32-msvc." } }, { "id": "CVE-2025-32421", "affects": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ], "bom-ref": "urn:uuid:04a285a2-d7d3-56d3-a35a-fd7a6a908467", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32421 affects version 14.2.12 of @next/swc-win32-ia32-msvc." } }, { "id": "CVE-2025-48068", "affects": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ], "bom-ref": "urn:uuid:75ca8f68-262b-5309-a5af-6d6b5ca81425", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-48068 affects version 14.2.12 of @next/swc-win32-ia32-msvc." } }, { "id": "CVE-2025-55173", "affects": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ], "bom-ref": "urn:uuid:ec8c0ed8-a2d0-547a-b1f1-3ea898d470bd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55173 affects version 14.2.12 of @next/swc-win32-ia32-msvc." } }, { "id": "CVE-2025-57752", "affects": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ], "bom-ref": "urn:uuid:b4736c4d-9fcc-5107-bf0d-6a3506db32f9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-57752 affects version 14.2.12 of @next/swc-win32-ia32-msvc." } }, { "id": "CVE-2025-57822", "affects": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ], "bom-ref": "urn:uuid:cdad0e42-b3bf-543a-8fcb-2144399da0b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-57822 affects version 14.2.12 of @next/swc-win32-ia32-msvc." } }, { "id": "CVE-2025-59471", "affects": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ], "bom-ref": "urn:uuid:8e849c0f-c122-5b28-80f2-29944ec3bc3a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59471 affects version 14.2.12 of @next/swc-win32-ia32-msvc." } }, { "id": "CVE-2026-27980", "affects": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ], "bom-ref": "urn:uuid:22d171da-8399-5972-87f1-8929d64db1f4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27980 affects version 14.2.12 of @next/swc-win32-ia32-msvc." } }, { "id": "CVE-2026-29057", "affects": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ], "bom-ref": "urn:uuid:4f5d46b6-6cce-5326-8671-52825f92fbeb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-29057 affects version 14.2.12 of @next/swc-win32-ia32-msvc." } }, { "id": "CVE-2026-44572", "affects": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ], "bom-ref": "urn:uuid:dfd8b5c5-cc82-5adb-8a8c-216f35548f0f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44572 affects version 14.2.12 of @next/swc-win32-ia32-msvc." } }, { "id": "CVE-2026-44573", "affects": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ], "bom-ref": "urn:uuid:1b4164be-0366-57e1-949a-8ef370242216", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44573 affects version 14.2.12 of @next/swc-win32-ia32-msvc." } }, { "id": "CVE-2026-44576", "affects": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ], "bom-ref": "urn:uuid:0d134c83-b254-5fef-a50c-0423a2fa5552", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44576 affects version 14.2.12 of @next/swc-win32-ia32-msvc." } }, { "id": "CVE-2026-44577", "affects": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ], "bom-ref": "urn:uuid:5d3600f6-0b34-5c60-9c9d-0f22e3ff7822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44577 affects version 14.2.12 of @next/swc-win32-ia32-msvc." } }, { "id": "CVE-2026-44578", "affects": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ], "bom-ref": "urn:uuid:87f9611f-9f2e-5338-94db-559b02645d88", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44578 affects version 14.2.12 of @next/swc-win32-ia32-msvc." } }, { "id": "CVE-2026-44580", "affects": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ], "bom-ref": "urn:uuid:e963ed95-d5d1-582f-9300-b22299fac1a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44580 affects version 14.2.12 of @next/swc-win32-ia32-msvc." } }, { "id": "CVE-2026-44581", "affects": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ], "bom-ref": "urn:uuid:7b543202-4e5e-5c2b-bc31-c5aa70c9451c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44581 affects version 14.2.12 of @next/swc-win32-ia32-msvc." } }, { "id": "CVE-2026-44582", "affects": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ], "bom-ref": "urn:uuid:da1dee6c-e622-5c92-8e23-00ac2bbe17ad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44582 affects version 14.2.12 of @next/swc-win32-ia32-msvc." } }, { "id": "CVE-2026-64641", "affects": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ], "bom-ref": "urn:uuid:9e6c259c-5e8d-5804-be4c-944a55d26a95", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64641 affects version 14.2.12 of @next/swc-win32-ia32-msvc." } }, { "id": "CVE-2026-64643", "affects": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ], "bom-ref": "urn:uuid:d4b0b693-3166-59d2-9f6c-df258b4cc998", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64643 affects version 14.2.12 of @next/swc-win32-ia32-msvc." } }, { "id": "CVE-2026-64645", "affects": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ], "bom-ref": "urn:uuid:369f5e20-3e42-5606-a3a4-325b8a4cbcee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64645 affects version 14.2.12 of @next/swc-win32-ia32-msvc." } }, { "id": "CVE-2026-64646", "affects": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ], "bom-ref": "urn:uuid:8b4e0d35-ac3e-530c-b031-c8ac87f091a6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64646 affects version 14.2.12 of @next/swc-win32-ia32-msvc." } }, { "id": "CVE-2026-64647", "affects": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ], "bom-ref": "urn:uuid:52715ff0-1e20-53b0-9732-6763fbb350fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64647 affects version 14.2.12 of @next/swc-win32-ia32-msvc." } }, { "id": "CVE-2026-64648", "affects": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ], "bom-ref": "urn:uuid:ac6c5a16-f3a8-535c-938e-b8653950e954", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64648 affects version 14.2.12 of @next/swc-win32-ia32-msvc." } }, { "id": "CVE-2026-64649", "affects": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ], "bom-ref": "urn:uuid:c5bfb9a8-9260-5beb-8a29-71f7b4e65090", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64649 affects version 14.2.12 of @next/swc-win32-ia32-msvc." } }, { "id": "CVE-2026-75604", "affects": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ], "bom-ref": "urn:uuid:cdb48525-a328-5bde-bf1d-3487710c4310", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-75604 affects version 14.2.12 of @next/swc-win32-ia32-msvc." } }, { "id": "CVE-2026-94482", "affects": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ], "bom-ref": "urn:uuid:70e6510d-e4d1-579e-9205-433d32df2b2e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-94482 affects version 14.2.12 of @next/swc-win32-ia32-msvc." } }, { "id": "GHSA-2464-fhr4-w9xw", "affects": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ], "bom-ref": "urn:uuid:df23ba42-c806-516a-aaff-02a244b6b768", "analysis": { "state": "not_affected", "detail": "Vulnerability GHSA-2464-fhr4-w9xw does not affect version 14.2.12 of @next/swc-win32-ia32-msvc. not_affected \u2014 Next.js 14.2.12 does not declare or bundle the sharp library. The vulnerability (GHSA-2464-fhr4-w9xw) exists in the sharp npm package (versions < 0.35.5), not in Next.js code. While Next.js's image optimizer can optionally use sharp if installed, sharp is not declared as a dependency in package.json, not vendored in the repository, and has a safe fallback (Squoosh). The upstream fix commits (95...", "justification": "requires_dependency" } }, { "id": "GHSA-2xp9-vwfh-vxw4", "affects": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ], "bom-ref": "urn:uuid:dce4dcb0-9550-5ed2-a220-6b635f338d10", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-2xp9-vwfh-vxw4 affects version 14.2.12 of @next/swc-win32-ia32-msvc." } }, { "id": "GHSA-5j59-xgg2-r9c4", "affects": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ], "bom-ref": "urn:uuid:39da01ed-f15e-544c-a7b7-3319125f5b99", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 affects version 14.2.12 of @next/swc-win32-ia32-msvc." } }, { "id": "GHSA-8h8q-6873-q5fj", "affects": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ], "bom-ref": "urn:uuid:4502697a-6826-59fc-935e-5fee78561eef", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-8h8q-6873-q5fj affects version 14.2.12 of @next/swc-win32-ia32-msvc." } }, { "id": "GHSA-h25m-26qc-wcjf", "affects": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ], "bom-ref": "urn:uuid:a64f6957-f874-5dd4-9c4e-a326bb13f588", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-h25m-26qc-wcjf affects version 14.2.12 of @next/swc-win32-ia32-msvc." } }, { "id": "GHSA-mwv6-3258-q52c", "affects": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ], "bom-ref": "urn:uuid:5c3529b1-d231-5ada-a62b-d76333f182c8", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mwv6-3258-q52c affects version 14.2.12 of @next/swc-win32-ia32-msvc." } }, { "id": "GHSA-q4gf-8mx6-v5v3", "affects": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ], "bom-ref": "urn:uuid:9274f08f-c17a-588c-9b69-699fa096202d", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 affects version 14.2.12 of @next/swc-win32-ia32-msvc." } } ], "dependencies": [ { "ref": "pkg:npm/%40next/swc-win32-ia32-msvc@14.2.12" } ] }