{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:6d42504a-bfaa-54c8-b0af-a9d1e9cb5937", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14", "type": "library", "name": "@next/bundle-analyzer", "version": "13.5.11-tuxcare.14", "purl": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:7aaccffb-1549-5e6f-ac8e-90e2fa4ba0c4", "id": "AIKIDO-2024-10173", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.14 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:f28a378f-515d-5ba2-82e5-2a0f45dec746", "id": "AIKIDO-2025-10936", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.14 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:80588f3f-e32b-5468-8840-ceeedc061e93", "id": "CVE-2024-34351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.14 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:06ec3c02-6151-5aa3-97ee-ceb0b1c2bf1c", "id": "CVE-2024-47831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.14 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:622b71b5-7559-5c92-859c-f7b860682a17", "id": "CVE-2024-51479", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.14 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:af583c14-d577-5ef4-809a-7c9bf49394fd", "id": "CVE-2025-32421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.14 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:7f1eea16-2687-5655-96ff-9ab6435f6e63", "id": "CVE-2025-48068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.14 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:cfcf968f-a53c-5fe4-94f1-fa51d29b97d3", "id": "CVE-2025-55173", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.14 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:4b6c0309-17c0-580b-b6b6-4850e85798ff", "id": "CVE-2025-57752", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.14 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:360e2acb-854f-5426-a9aa-fea246ca843a", "id": "CVE-2025-57822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.14 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:7b34f961-252a-5a4a-b49f-efb089085b6f", "id": "CVE-2025-59471", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.14 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:c4eeeec1-d4bd-5cc1-b4fc-da952483a1ed", "id": "CVE-2025-59472", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.14 of @next/bundle-analyzer. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat..." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:9f6a3069-7b18-5692-a04d-cf9ffe57c72b", "id": "CVE-2025-67779", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.14 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:6a19d0cd-0c9d-56fe-af1f-aec0d90eed13", "id": "CVE-2026-27980", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.14 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:4cd3533a-3cab-5ba7-875b-cc1977bd0c42", "id": "CVE-2026-29057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.14 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:ba7e008d-0f60-57cd-b173-eb0923d77bec", "id": "CVE-2026-44572", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.14 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:c1727be7-7947-5ef4-b4c0-e94f3a02e195", "id": "CVE-2026-44573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.14 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:87595cf6-85c0-5810-ade4-906e0d9228e1", "id": "CVE-2026-44577", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44577 affects version 13.5.11-tuxcare.14 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:629886c7-e223-547b-b3f2-0399b227bd52", "id": "CVE-2026-44578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.14 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:56434ad0-8327-57d8-8a64-de0dd3041ce1", "id": "CVE-2026-44580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44580 affects version 13.5.11-tuxcare.14 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:bcb1d809-4b59-539c-bd04-2a765e83d08a", "id": "CVE-2026-44581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44581 affects version 13.5.11-tuxcare.14 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:a175ee52-6bfe-5270-a844-787ba99ce1df", "id": "CVE-2026-44582", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44582 affects version 13.5.11-tuxcare.14 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:9b78e25e-41e3-5332-8e24-e8181904b9fa", "id": "CVE-2026-64641", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64641 affects version 13.5.11-tuxcare.14 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:88e1ece0-d1c9-50f7-8d7f-c73db58d09e6", "id": "CVE-2026-64643", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64643 affects version 13.5.11-tuxcare.14 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:536ec2f6-03e3-5cc1-8ce5-c89b565f0177", "id": "CVE-2026-64645", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64645 affects version 13.5.11-tuxcare.14 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:dd45ba3b-b7d0-5b4a-9c9e-dcc6abc91eab", "id": "CVE-2026-64646", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64646 affects version 13.5.11-tuxcare.14 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:573b2d14-f533-517a-a840-77575db6443f", "id": "CVE-2026-64647", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64647 affects version 13.5.11-tuxcare.14 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:a8b64c7e-9ad5-55fc-8896-2b3cd08171b9", "id": "CVE-2026-64648", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64648 affects version 13.5.11-tuxcare.14 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:62ba2728-6ba3-5a91-b930-0b7fa2b8258e", "id": "GHSA-5j59-xgg2-r9c4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.14 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:d3cdb743-4572-517e-ae0f-ff301468be34", "id": "GHSA-8h8q-6873-q5fj", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.14 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:02aa2e2b-c690-5329-964f-4f73243bf4e9", "id": "GHSA-h25m-26qc-wcjf", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.14 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:4e524708-7079-5df8-8666-9b27d21815b3", "id": "GHSA-mwv6-3258-q52c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.14 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:8fa652b9-8f26-50f0-a65b-0ef2f3cc513a", "id": "GHSA-q4gf-8mx6-v5v3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.14 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.14" } ] }