{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:35af1621-45fb-50e0-9f2f-b68904b3ae85", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "eslint-config-next", "purl": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19", "type": "library", "bom-ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19", "version": "13.5.11-tuxcare.19", "pedigree": { "ancestors": [ { "name": "eslint-config-next", "purl": "pkg:npm/eslint-config-next@13.5.11", "type": "library", "version": "13.5.11" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "AIKIDO-2024-10173", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:3151207a-0f20-5bef-8b37-db9bd201a1ee", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "AIKIDO-2025-10936", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:a7c2abdb-7080-5c94-ba5b-15ae493553b3", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "CVE-2024-34351", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:de4becdc-f69c-556c-9251-362f7d5d43c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "CVE-2024-47831", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:cc61d102-7bb4-571f-8b36-63867ab6ccc2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "CVE-2024-51479", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:a6a03b8a-d1b8-5155-a418-ff9485e7ba1e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "CVE-2025-32421", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:006e4a8a-a927-5329-bce0-21dfde343c49", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "CVE-2025-48068", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:2f60cddd-4afb-5aca-9eef-c5440837bcaf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "CVE-2025-55173", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:703f1df3-a1f3-510c-aa07-2207b5c9a625", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "CVE-2025-55183", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:13ab09fe-be17-59e9-aa12-a2ad493625a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55183 is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "CVE-2025-55184", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:a7936e8b-5ebd-5f09-946a-bf2baa926fcd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "CVE-2025-57752", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:aa2c5d97-f7ab-514c-b694-a2b231c7e2db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "CVE-2025-57822", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:ac9934c1-c622-5324-aea6-1ef842923f50", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "CVE-2025-59471", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:90a6189c-5f15-560d-a07f-41824aef729b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "CVE-2025-59472", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:1dfcb22a-8aea-5654-9454-f80ebff76ab0", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.19 of eslint-config-next. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat...", "justification": "code_not_present" } }, { "id": "CVE-2025-67779", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:32d8d81a-70a7-5cf3-b259-9a5dfaeedc8f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "CVE-2026-27980", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:a141369b-26d3-5f96-b05e-3c8873af6f39", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "CVE-2026-29057", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:a6a61006-3bb2-5a86-8bae-8802fb637850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "CVE-2026-44572", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:8672fa3d-c2aa-59c5-a0a2-4dd0ab32d386", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "CVE-2026-44573", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:64bcc8a6-5265-57b0-bd73-58528404e347", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "CVE-2026-44577", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:89abf99d-ef85-5b9a-ac92-a17501e1c913", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "CVE-2026-44578", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:78b2117c-83eb-5808-857b-03a5b5c10377", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "CVE-2026-44580", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:3741e055-e62a-5336-85ce-d5358d15fcf7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "CVE-2026-44581", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:e2fe355d-200e-57a6-a0b8-4a4cb2afd379", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "CVE-2026-44582", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:f5849b4c-dabd-5481-9442-c6ca5fc5ddc5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "CVE-2026-64641", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:df22eb1b-1f80-55e5-868d-0b0354383acf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "CVE-2026-64643", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:aab06e28-de6c-51ea-b01b-5cfac98d3c1e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "CVE-2026-64645", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:0c4ea5ff-8da8-5c6b-a54f-918a2b45bae3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "CVE-2026-64646", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:096cfb25-53a9-5f0f-bbd5-39d086a94ef5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "CVE-2026-64647", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:b31b326c-7965-5b8e-8f1a-70d40e964e76", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "CVE-2026-64648", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:5c6fd8ed-59e2-5c18-b647-1ebfe904206e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64648 is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "CVE-2026-75604", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:8de584b5-4db0-5b9d-97c8-208b26c9ea40", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-75604 is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "CVE-2026-94482", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:d7d84f55-73da-5a6f-93ff-1b0dbad115f4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-94482 affects version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "GHSA-2464-fhr4-w9xw", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:82fbbba2-a2c7-5d5e-9606-037581e4c35a", "analysis": { "state": "not_affected", "detail": "Vulnerability GHSA-2464-fhr4-w9xw does not affect version 13.5.11-tuxcare.19 of eslint-config-next. not_affected \u2014 Next.js 13.5.11-tuxcare.18 is not affected by GHSA-2464-fhr4-w9xw because the vulnerable code (memory-related RCE in sharp library) is not present in the Next.js repository. Sharp is not bundled, vendored, or declared as a dependency in this version. The vulnerability only manifests when users separately install a vulnerable version of sharp (< 0.35.5). Later Next.js versions (lts-active, 16.3....", "justification": "requires_dependency" } }, { "id": "GHSA-2xp9-vwfh-vxw4", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:d0bcd42b-549b-5682-865e-634c55db3995", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-2xp9-vwfh-vxw4 is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "GHSA-5j59-xgg2-r9c4", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:c824692d-5df4-52da-bd0e-11c752c2ecbc", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "GHSA-8h8q-6873-q5fj", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:21e8e9ef-a85e-5d17-9ccc-f7b347970aa4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "GHSA-h25m-26qc-wcjf", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:d2f8b88f-eafa-5610-b6f5-937513553652", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "GHSA-mwv6-3258-q52c", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:bc880b96-b1cf-59fc-a33e-f3a939c68510", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } }, { "id": "GHSA-q4gf-8mx6-v5v3", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ], "bom-ref": "urn:uuid:b4c64489-f70b-50fd-b096-1f9fb6c9766e", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.19 of eslint-config-next." } } ], "dependencies": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.19" } ] }