{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:3dd30aeb-cadb-575d-8bbc-7e986d078bb9", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "axios", "purl": "pkg:npm/axios@1.6.8-tuxcare.5", "type": "library", "bom-ref": "pkg:npm/axios@1.6.8-tuxcare.5", "version": "1.6.8-tuxcare.5", "pedigree": { "ancestors": [ { "name": "axios", "purl": "pkg:npm/axios@1.6.8", "type": "library", "version": "1.6.8" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-39338", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:c7de3f66-45ee-55b9-8ad5-612259d8bd2a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-39338 is fixed in version 1.6.8-tuxcare.5 of axios." } }, { "id": "CVE-2025-27152", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:87347678-e40c-568f-add0-f0f2cc5eff6b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-27152 does not affect version 1.6.8-tuxcare.5 of axios. CVE-2025-27152 fix already exists in commit 22c2e77ccde46e0a3c0d1513b682eba8dfb41d75", "justification": "code_not_present" } }, { "id": "CVE-2025-58754", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:4e8f0fe8-147a-5dd5-9011-aa3d508f8e34", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-58754 does not affect version 1.6.8-tuxcare.5 of axios. CVE-2025-58754 fix already exists in commit fe89d8c609e567fa731f7677ab065742330f25ea", "justification": "code_not_present" } }, { "id": "CVE-2025-62718", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:7d18f916-b8a0-5d87-ad1a-bf2a28619bd5", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-62718 does not affect version 1.6.8-tuxcare.5 of axios. CVE-2025-62718 fix already exists in commit dd333bdabf51d856d0d14fe7bd9d50ac817e4aa2", "justification": "code_not_present" } }, { "id": "CVE-2026-101902", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:08584a95-fdad-5d73-87bd-6b59c7f90223", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101902 is fixed in version 1.6.8-tuxcare.5 of axios." } }, { "id": "CVE-2026-101904", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:5dc568da-e395-5685-83e6-22732d3a85c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101904 is fixed in version 1.6.8-tuxcare.5 of axios." } }, { "id": "CVE-2026-25639", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:ea2b2584-7d34-569c-864c-c26144b2fbd2", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-25639 does not affect version 1.6.8-tuxcare.5 of axios. CVE-2026-25639 fix already exists in commit f4e3c49872deb794ae9a7bb71a8345ea2ec4b6eb", "justification": "code_not_present" } }, { "id": "CVE-2026-40175", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:e26073d7-c3b5-5c99-ab3b-21815c284ff9", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-40175 does not affect version 1.6.8-tuxcare.5 of axios. CVE-2026-40175 fix already exists in commit e3c915c5421c511d667ffeace65d8d65829e19e8", "justification": "code_not_present" } }, { "id": "CVE-2026-42033", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:0f972f9b-ecab-56e6-9e48-0401da9a3c0a", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42033 does not affect version 1.6.8-tuxcare.5 of axios. CVE-2026-42033 fix already exists in commit 9c513d377d64d936e51eb33b901bb6a26258abd8", "justification": "code_not_present" } }, { "id": "CVE-2026-42034", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:26a8a7ba-de9f-51cb-8f6d-cb893c519a2e", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42034 does not affect version 1.6.8-tuxcare.5 of axios. CVE-2026-42034 fix already exists in commit cd256b069536974eeec07e8047ceeb87986d19bc", "justification": "code_not_present" } }, { "id": "CVE-2026-42035", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:dfb640d2-feed-555b-9a01-1adc673b3a50", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42035 does not affect version 1.6.8-tuxcare.5 of axios. CVE-2026-42035 fix already exists in commit b9e4e1b49f5f62215e46c059f343b2e9ccb81c39", "justification": "code_not_present" } }, { "id": "CVE-2026-42036", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:7999308d-58bb-53a8-8ae8-360094e4f6b1", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42036 does not affect version 1.6.8-tuxcare.5 of axios. CVE-2026-42036 fix already exists in commit db7082ebbf0cf245e8d001407b789a154606afac", "justification": "code_not_present" } }, { "id": "CVE-2026-42037", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:ea604a77-35a3-578d-8981-e2775356db9b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42037 is fixed in version 1.6.8-tuxcare.5 of axios." } }, { "id": "CVE-2026-42038", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:0309bdf4-304a-569e-8fd0-e86f41cf348c", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42038 does not affect version 1.6.8-tuxcare.5 of axios. CVE-2026-42038 fix already exists in commit 38fbaef2676858fc97ea981cf9e2fabf343e60a4", "justification": "code_not_present" } }, { "id": "CVE-2026-42039", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:298a6f12-b896-5d61-9f71-5aa019047153", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42039 does not affect version 1.6.8-tuxcare.5 of axios. CVE-2026-42039 fix already exists in commit da36cba07a133fa5f833556303db0e3e5ce3dc87", "justification": "code_not_present" } }, { "id": "CVE-2026-42040", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:c579a5b7-a8df-526e-b34c-8e02c5ee4f5c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42040 is fixed in version 1.6.8-tuxcare.5 of axios." } }, { "id": "CVE-2026-42041", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:f1aa5c25-8db3-5c6d-b634-c69f5e07dfdb", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42041 does not affect version 1.6.8-tuxcare.5 of axios. CVE-2026-42041 fix already exists in commit 935b8c002f9b50ff36d4f0ed3b6be5fc855a0b6e", "justification": "code_not_present" } }, { "id": "CVE-2026-42042", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:ed963208-583d-510c-82f9-6a70cbe6c138", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42042 does not affect version 1.6.8-tuxcare.5 of axios. CVE-2026-42042 fix already exists in commit be54ef4e740e14b267e765f8e42ff9104d78bc8b", "justification": "code_not_present" } }, { "id": "CVE-2026-42043", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:793bdbe3-ed10-5c72-939b-4c4d727fc543", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42043 does not affect version 1.6.8-tuxcare.5 of axios. CVE-2026-42043 fix already exists in commit 2a6288f317a7bfc46a41088a3809a22e8193340a", "justification": "code_not_present" } }, { "id": "CVE-2026-42044", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:97ff9314-1c06-59df-810d-fb7e20036192", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42044 is fixed in version 1.6.8-tuxcare.5 of axios." } }, { "id": "CVE-2026-42264", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:79dd1f77-ed3e-5af1-9011-41925136b162", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42264 is fixed in version 1.6.8-tuxcare.5 of axios." } }, { "id": "CVE-2026-44486", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:bc605ff4-164b-53e1-ad10-546a502a8b13", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44486 is fixed in version 1.6.8-tuxcare.5 of axios." } }, { "id": "CVE-2026-44487", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:c623cbad-14c4-5608-bb9c-a275bc9b8219", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44487 is fixed in version 1.6.8-tuxcare.5 of axios." } }, { "id": "CVE-2026-44490", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:10308f42-f382-55ae-ad5a-7460286f43b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44490 is fixed in version 1.6.8-tuxcare.5 of axios." } }, { "id": "CVE-2026-44492", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:12592ef2-d314-5ede-8fc7-9763494288e1", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-44492 does not affect version 1.6.8-tuxcare.5 of axios. not_affected \u2014 axios v1.6.8 is not affected by CVE-2026-44492. The vulnerable code (lib/helpers/shouldBypassProxy.js) was introduced in v1.15.0, and v1.6.8 predates this entirely. The target uses a different architecture (proxy-from-env only) that is outside the scope of this CVE.", "justification": "code_not_present" } }, { "id": "CVE-2026-44494", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:cf7af330-103c-5b7f-8000-d09d6cdc624f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44494 is fixed in version 1.6.8-tuxcare.5 of axios." } }, { "id": "CVE-2026-44495", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:e6c55526-8bd9-526a-8ea0-4659365afad3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44495 is fixed in version 1.6.8-tuxcare.5 of axios." } }, { "id": "CVE-2026-44496", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:88977f69-72a1-55ed-a14a-002c6eb4af9f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44496 is fixed in version 1.6.8-tuxcare.5 of axios." } }, { "id": "CVE-2026-67312", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:02b6bca9-2db9-5305-82a6-4e0ef2cf24c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67312 is fixed in version 1.6.8-tuxcare.5 of axios." } }, { "id": "CVE-2026-67313", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:531e3201-e367-5eee-accb-82f3a6f02c98", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67313 is fixed in version 1.6.8-tuxcare.5 of axios." } }, { "id": "CVE-2026-67316", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:f74e2dc5-51a5-526c-9acf-12d2c9169322", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67316 is fixed in version 1.6.8-tuxcare.5 of axios." } }, { "id": "CVE-2026-67319", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:8e583014-1fcf-55f2-a0f2-077f7308c332", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67319 is fixed in version 1.6.8-tuxcare.5 of axios." } }, { "id": "GHSA-42h9-826w-cgv3", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:df6df53b-1543-512b-bbd6-f473f189c95f", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-42h9-826w-cgv3 affects version 1.6.8-tuxcare.5 of axios." } }, { "id": "GHSA-4ww2-rjh2-xpv9", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:c5cd8898-6f17-5a81-a653-ba741a92441f", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-4ww2-rjh2-xpv9 is a false positive for axios 1.6.8-tuxcare.5." } }, { "id": "GHSA-6hqm-hm2v-3p2p", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:903d544c-db02-5799-bca3-b953cbb7b67a", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-6hqm-hm2v-3p2p is a false positive for axios 1.6.8-tuxcare.5." } }, { "id": "GHSA-7q8q-rj6j-mhjq", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:ec8ee656-c443-5be7-87a9-fe1bfb4bef24", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-7q8q-rj6j-mhjq affects version 1.6.8-tuxcare.5 of axios." } }, { "id": "GHSA-9wx3-p993-35vp", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:76886ff6-667d-59cc-8f11-8da11ae1bc65", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-9wx3-p993-35vp is a false positive for axios 1.6.8-tuxcare.5." } }, { "id": "GHSA-fq2j-3j99-rx65", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:3a26f525-ed03-5cc6-99fd-3aa1f39344ad", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-fq2j-3j99-rx65 is a false positive for axios 1.6.8-tuxcare.5." } }, { "id": "GHSA-mmx7-hfxf-jppx", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:d24ada33-1a2c-5807-b1af-b421ea61e6e1", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mmx7-hfxf-jppx is fixed in version 1.6.8-tuxcare.5 of axios." } }, { "id": "GHSA-pmv8-rq9r-6j72", "affects": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ], "bom-ref": "urn:uuid:ea296ab8-1869-504e-8ed4-a1ca2ca2d294", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-pmv8-rq9r-6j72 affects version 1.6.8-tuxcare.5 of axios." } } ], "dependencies": [ { "ref": "pkg:npm/axios@1.6.8-tuxcare.5" } ] }