{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:27a6ba52-0d50-5bc9-8782-df22983951fe", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15", "type": "library", "name": "@next/third-parties", "version": "13.5.11-tuxcare.15", "purl": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:516f332f-3818-51ec-9faa-707dd62caf70", "id": "AIKIDO-2024-10173", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.15 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:418d9f89-8567-5953-af66-9cee680fbd55", "id": "AIKIDO-2025-10936", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.15 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:4ffaeed3-ae74-577c-a163-7c45b01d4a56", "id": "CVE-2024-34351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.15 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:55cf5f09-c7b2-5ec4-8542-e41e300df6a1", "id": "CVE-2024-47831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.15 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:8cca7e9d-7d1f-58fa-a342-7d2766248875", "id": "CVE-2024-51479", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.15 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:f2ec489c-0106-550b-a383-84653fa7a042", "id": "CVE-2025-32421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.15 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:04802f0e-93d6-59a4-bbf2-6e7d0ecfe3f7", "id": "CVE-2025-48068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.15 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:93f9e88d-6730-55c3-abef-1501758c8ae8", "id": "CVE-2025-55173", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.15 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:a197b635-f563-5598-bd50-fdc5156b1e85", "id": "CVE-2025-55183", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55183 affects version 13.5.11-tuxcare.15 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:19b2f324-679e-5e0e-b018-4bf17e3665dc", "id": "CVE-2025-55184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.15 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:eab45bb4-4fcb-5c6b-bed8-4d5ed041630f", "id": "CVE-2025-57752", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.15 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:fac9dacf-1a19-5270-b1c6-30c070806ca4", "id": "CVE-2025-57822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.15 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:8717b774-fca5-5695-8470-ec0b9898a947", "id": "CVE-2025-59471", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.15 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:24ee6758-3e28-5362-aa91-9d71d30d4d5e", "id": "CVE-2025-59472", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.15 of @next/third-parties. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat..." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:a3ee8d03-75ed-54c4-bafa-b01881b7b38a", "id": "CVE-2025-67779", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.15 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:18201c44-d9b2-5ecd-9a76-f473de19f3ee", "id": "CVE-2026-27980", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.15 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:084de58d-0c22-50fc-9b7c-4aff8d3cb414", "id": "CVE-2026-29057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.15 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:bc319fde-74a7-5d2f-8a5b-27efb3fda15c", "id": "CVE-2026-44572", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.15 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:11a686bd-345c-5d8b-a4ca-9377f05a5ced", "id": "CVE-2026-44573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.15 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:775f7516-cc26-5d9b-bbe2-2ba0ca8b01b5", "id": "CVE-2026-44577", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.15 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:1cf8d9b3-9288-566d-b64d-c49ebe24ea53", "id": "CVE-2026-44578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.15 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:7d98b66a-be65-5e2b-a701-655a6d5c5d7f", "id": "CVE-2026-44580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.15 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:2b5a3d39-3b38-5164-9430-15f36bfe7429", "id": "CVE-2026-44581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.15 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:3c0a4d58-55dd-5fe6-bf5b-a5095783e9f3", "id": "CVE-2026-44582", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.15 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:6487ce5d-ed36-5f83-86f0-beacdf207672", "id": "CVE-2026-64641", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.15 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:a1605954-71a9-56c5-b230-afe5a904d8c0", "id": "CVE-2026-64643", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.15 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:5b9fece7-9ea3-5908-85b7-b3ef58752c5a", "id": "CVE-2026-64645", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.15 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:1593668c-46c7-5382-af31-ccdc7f4ca5f2", "id": "CVE-2026-64646", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.15 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:e3b1f779-f381-5798-992c-3e186d859dbc", "id": "CVE-2026-64647", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.15 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:fc1b8eae-b4af-5eb7-b16a-afe873098ee7", "id": "CVE-2026-64648", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64648 affects version 13.5.11-tuxcare.15 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:6b569b3d-3bc8-5b4b-b26d-adb8fa2a846e", "id": "GHSA-5j59-xgg2-r9c4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.15 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:0e495f73-0967-5dc3-a88e-8be0bf1da534", "id": "GHSA-8h8q-6873-q5fj", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.15 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:945cd45a-c376-56f2-b327-90db11c5a34d", "id": "GHSA-h25m-26qc-wcjf", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.15 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:f3908055-9a0a-5ec1-9a0c-c8b4751d239d", "id": "GHSA-mwv6-3258-q52c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.15 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:78be30b4-653f-57a1-bba3-7ccbbd389d91", "id": "GHSA-q4gf-8mx6-v5v3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.15 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.15" } ] }