{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8e364dc4-86c0-5742-b719-3d56157e32f5", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14", "type": "library", "name": "@next/codemod", "version": "13.5.11-tuxcare.14", "purl": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:66ad0043-fe80-5444-8ac9-4908596fc95d", "id": "AIKIDO-2024-10173", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.14 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:4221a22a-ba22-524c-8449-0cd5a73dd229", "id": "AIKIDO-2025-10936", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.14 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:2bb438de-79bc-5874-8599-d24f73e4d45d", "id": "CVE-2024-34351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.14 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:e3d75c89-03d2-5f70-a832-5cc5e1604672", "id": "CVE-2024-47831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.14 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:158f37bd-26e3-54ff-a768-57318a876b3c", "id": "CVE-2024-51479", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.14 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:eb4e1482-55b3-54f2-889b-d7acbb37dc3a", "id": "CVE-2025-32421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.14 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:727b0560-6c67-5569-a817-720ac08d1d95", "id": "CVE-2025-48068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.14 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:0dad978b-b0cb-53a7-a85d-c94a9806039d", "id": "CVE-2025-55173", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.14 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:0bf51725-b266-5a11-9dbe-37617e304f18", "id": "CVE-2025-57752", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.14 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:a45c1151-b005-5b79-9d75-52fe03ef5e99", "id": "CVE-2025-57822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.14 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:7e95e0a1-6c3b-5ad8-ba51-a0a0b5fe0988", "id": "CVE-2025-59471", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.14 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:3eef7298-5695-575c-bf43-b95164d5b3cb", "id": "CVE-2025-59472", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.14 of @next/codemod. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat..." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:c0904056-ab50-53f8-a427-89258d2394c6", "id": "CVE-2025-67779", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.14 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:95229b28-ba40-5e8b-aa6f-c3c858494b8f", "id": "CVE-2026-27980", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.14 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:d047d1af-6255-52db-a3b9-0f740ff40284", "id": "CVE-2026-29057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.14 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:b0d2765e-aeab-5e6c-a041-2d90951a5600", "id": "CVE-2026-44572", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.14 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:26c32c00-1a77-509c-8109-d0c06a02bac7", "id": "CVE-2026-44573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.14 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:699bf192-ce21-5cce-b74e-6d193270abe6", "id": "CVE-2026-44577", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44577 affects version 13.5.11-tuxcare.14 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:6195e4b2-dafd-594f-b993-6467068b794e", "id": "CVE-2026-44578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.14 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:00d1daa5-4167-5f17-84c9-a1e9d0136560", "id": "CVE-2026-44580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44580 affects version 13.5.11-tuxcare.14 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:314abb8a-fed9-5b8b-a02d-5721793affab", "id": "CVE-2026-44581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44581 affects version 13.5.11-tuxcare.14 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:241b9c86-2fb9-5f4c-92dd-75e914d0a440", "id": "CVE-2026-44582", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44582 affects version 13.5.11-tuxcare.14 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:42288acb-eb3d-5158-8ab8-da91908700dd", "id": "CVE-2026-64641", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64641 affects version 13.5.11-tuxcare.14 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:c16a1f55-b9b4-5810-80c8-765524d43943", "id": "CVE-2026-64643", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64643 affects version 13.5.11-tuxcare.14 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:bda2350b-af1c-5a41-afe6-039970ee5379", "id": "CVE-2026-64645", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64645 affects version 13.5.11-tuxcare.14 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:d1daeb8d-4448-5472-b230-8dba31f00e94", "id": "CVE-2026-64646", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64646 affects version 13.5.11-tuxcare.14 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:7a13e6cd-4208-5ba1-a73a-947031d56c99", "id": "CVE-2026-64647", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64647 affects version 13.5.11-tuxcare.14 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:76089416-5ebe-5e46-855b-beb0375dbe75", "id": "CVE-2026-64648", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64648 affects version 13.5.11-tuxcare.14 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:5057a6e7-b393-55d6-b381-22e2cc05b6e6", "id": "GHSA-5j59-xgg2-r9c4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.14 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:55a387b7-c27f-5eb6-b88c-513d4c405f3c", "id": "GHSA-8h8q-6873-q5fj", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.14 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:65cba3bf-2ff7-56b0-94b6-b74b07fcef4d", "id": "GHSA-h25m-26qc-wcjf", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.14 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:a72b9777-8152-5622-a3db-2ca63779357f", "id": "GHSA-mwv6-3258-q52c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.14 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:f604d464-1374-5fd7-ac36-f722e88b565a", "id": "GHSA-q4gf-8mx6-v5v3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.14 of @next/codemod." }, "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.14" } ] }