{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:4751a7a1-4575-5bfb-931e-02401d3432f5", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "eslint-config-next", "purl": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20", "type": "library", "bom-ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20", "version": "13.5.11-tuxcare.20", "pedigree": { "ancestors": [ { "name": "eslint-config-next", "purl": "pkg:npm/eslint-config-next@13.5.11", "type": "library", "version": "13.5.11" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "AIKIDO-2024-10173", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:db7deb76-1d4a-5bdf-b63b-19c8ca110aff", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "AIKIDO-2025-10936", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:3fee3a3a-f33f-565a-b04d-6ae09ea3e28f", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "CVE-2024-34351", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:111fe43a-9a0e-538d-a923-9d637650708b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "CVE-2024-47831", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:2e76adbe-53b4-5b7d-bec9-7c863380fd2f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "CVE-2024-51479", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:554aca96-cb05-5411-a178-0ac12d10f770", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "CVE-2025-32421", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:04215057-c416-5b89-be5d-b5bea7daf75c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "CVE-2025-48068", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:e32bdf9a-a1e0-5fdc-b27a-84db4700f977", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "CVE-2025-55173", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:9beb55b5-1f42-5ad2-b192-7125f491d918", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "CVE-2025-55183", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:1aad43ee-057e-5172-9762-8aff1d140862", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55183 is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "CVE-2025-55184", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:ba0ead9f-3b9e-5807-92ce-7d1e64ee4f30", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "CVE-2025-57752", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:1e8a40bf-3d19-5447-85b7-bc5a82c1f3eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "CVE-2025-57822", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:7b9eb61f-08b1-5d96-87f6-a85d9d297518", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "CVE-2025-59471", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:7c741502-8abb-50f1-90e6-99e04eb82856", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "CVE-2025-59472", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:ca2e92f3-5deb-50d2-a69a-3fbf57967500", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.20 of eslint-config-next. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat...", "justification": "code_not_present" } }, { "id": "CVE-2025-67779", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:d071675a-7a90-57cf-a6af-6c6d0c197b35", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "CVE-2026-27980", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:9d9cdb7a-516c-51a0-8ed7-6dd96eb3fd73", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "CVE-2026-29057", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:f51fc3c4-2a7b-567b-aa8e-414be96e13d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "CVE-2026-44572", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:e2346c5b-f308-541c-9222-47cdc5ce0611", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "CVE-2026-44573", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:43e4a69b-a1c9-5f03-9d39-bd179b481dca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "CVE-2026-44577", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:8047d105-60c4-572f-9a47-5facdf5f8674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "CVE-2026-44578", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:692a660a-a408-51a1-8c69-047714d04462", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "CVE-2026-44580", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:961d1b84-79cf-562b-88d6-e1aab6e086b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "CVE-2026-44581", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:6b69e6c0-ece1-523e-bb89-17a4cb791834", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "CVE-2026-44582", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:59fc44c5-24f1-5329-ad44-0220b0f12afc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "CVE-2026-64641", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:7280e421-616e-5609-ac18-6b75ba4f97b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "CVE-2026-64643", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:cbb12975-40df-5b09-a061-9fe1d85da59c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "CVE-2026-64645", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:5d32c068-45e1-5da6-adbf-42247e114d58", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "CVE-2026-64646", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:ff32908d-7523-52e8-a875-e5e715fc4920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "CVE-2026-64647", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:b34c345a-1783-5ffa-a123-29db0985b2b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "CVE-2026-64648", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:82ac0fbd-3999-59d1-9a93-f9b40ac0bb89", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64648 is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "CVE-2026-75604", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:2bbd413b-e996-59b4-9044-722a4a4ece20", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-75604 is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "CVE-2026-94482", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:79fa4df4-3fd0-57c8-888c-a434323e12f0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-94482 affects version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "GHSA-2464-fhr4-w9xw", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:531b7e58-1b2e-54a7-89e1-c50f5315a77b", "analysis": { "state": "not_affected", "detail": "Vulnerability GHSA-2464-fhr4-w9xw does not affect version 13.5.11-tuxcare.20 of eslint-config-next. not_affected \u2014 Next.js 13.5.11-tuxcare.18 is not affected by GHSA-2464-fhr4-w9xw because the vulnerable code (memory-related RCE in sharp library) is not present in the Next.js repository. Sharp is not bundled, vendored, or declared as a dependency in this version. The vulnerability only manifests when users separately install a vulnerable version of sharp (< 0.35.5). Later Next.js versions (lts-active, 16.3....", "justification": "requires_dependency" } }, { "id": "GHSA-2xp9-vwfh-vxw4", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:0e2cad87-292f-5f9a-be70-146105e8a0ab", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-2xp9-vwfh-vxw4 is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "GHSA-5j59-xgg2-r9c4", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:663d6961-f121-55c0-a19a-b797d3ecbc50", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "GHSA-8h8q-6873-q5fj", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:8bc2acf0-c821-54a2-92d4-181332f9840b", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "GHSA-h25m-26qc-wcjf", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:c7d46dac-ab5e-5c9e-94e0-01d39b62e224", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "GHSA-mwv6-3258-q52c", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:96ff4a6c-8b54-5d6b-b2cf-7d69b5127de0", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } }, { "id": "GHSA-q4gf-8mx6-v5v3", "affects": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ], "bom-ref": "urn:uuid:665a2111-4392-5d19-a34a-a58f86b7c822", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.20 of eslint-config-next." } } ], "dependencies": [ { "ref": "pkg:npm/eslint-config-next@13.5.11-tuxcare.20" } ] }