{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:809d7be9-3adf-5b66-a02b-562ddcbf62d5", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40next/env@13.5.11-tuxcare.14", "type": "library", "name": "@next/env", "version": "13.5.11-tuxcare.14", "purl": "pkg:npm/%40next/env@13.5.11-tuxcare.14" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:aa4ac86d-c111-5f76-9002-54c3cf7d9d3f", "id": "AIKIDO-2024-10173", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.14 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:981d983f-ff78-5506-b55a-4f55a4bf2275", "id": "AIKIDO-2025-10936", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.14 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:3a648e51-0336-5d15-9b28-22c6fdd06533", "id": "CVE-2024-34351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.14 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:90412bbc-52a3-571a-b65b-86b4b3c349f9", "id": "CVE-2024-47831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.14 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:16fb810f-5004-5b0e-96fd-202813c3db01", "id": "CVE-2024-51479", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.14 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:674e0723-b95c-5c4c-a3cd-0484585b212d", "id": "CVE-2025-32421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.14 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:c78f497b-ddd5-5ba3-bbd0-f1cca3af1688", "id": "CVE-2025-48068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.14 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:8af07f7f-9c11-50ce-99ea-597d7720250d", "id": "CVE-2025-55173", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.14 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:ae8bdfb2-214b-57f2-9342-f4e3cd7d5737", "id": "CVE-2025-57752", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.14 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:8a5d56be-eb01-59d7-a2b1-726351428529", "id": "CVE-2025-57822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.14 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:716576d5-af6a-5be8-af41-adb5f397269f", "id": "CVE-2025-59471", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.14 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:a79813bf-49a9-5ab2-817f-e9b61620788d", "id": "CVE-2025-59472", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.14 of @next/env. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat..." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:12a40513-0b23-5af9-a2fa-ccf276f1531a", "id": "CVE-2025-67779", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.14 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:f3252518-e58e-5f7b-9c1d-95ab62485a5f", "id": "CVE-2026-27980", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.14 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:e5b5e502-099c-5fa5-bb2b-a2a484aff5c9", "id": "CVE-2026-29057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.14 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:4efb546f-4748-507e-9e2a-a1773b279c9a", "id": "CVE-2026-44572", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.14 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:dd006771-eec9-5c31-860a-0dc7e02d5a63", "id": "CVE-2026-44573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.14 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:a431affe-e1ef-56b9-b438-356776aa5d55", "id": "CVE-2026-44577", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44577 affects version 13.5.11-tuxcare.14 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:948bf745-c999-58ab-bcb8-d53c3bcd7518", "id": "CVE-2026-44578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.14 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:b2927e39-7265-5447-ba0c-6025047ce666", "id": "CVE-2026-44580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44580 affects version 13.5.11-tuxcare.14 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:c0f6177a-bccd-596c-a3d9-a76a0dcd08f5", "id": "CVE-2026-44581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44581 affects version 13.5.11-tuxcare.14 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:3656ff10-3a20-5db1-be14-76d736401a6a", "id": "CVE-2026-44582", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44582 affects version 13.5.11-tuxcare.14 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:3308f64f-f2e1-5f49-a47c-bc86d6dd7e84", "id": "CVE-2026-64641", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64641 affects version 13.5.11-tuxcare.14 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:17388cab-e110-590c-a229-a13266aeaa94", "id": "CVE-2026-64643", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64643 affects version 13.5.11-tuxcare.14 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:e6cfb906-87df-5efd-aaa3-b4fc8ebed776", "id": "CVE-2026-64645", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64645 affects version 13.5.11-tuxcare.14 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:67d67ba3-d977-5d35-a710-0264ef11ae7a", "id": "CVE-2026-64646", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64646 affects version 13.5.11-tuxcare.14 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:44742379-0a0b-54f4-9a1d-b7f1fd1e1f32", "id": "CVE-2026-64647", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64647 affects version 13.5.11-tuxcare.14 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:0f42b7c0-7f5b-523c-ae16-c1439311bbf1", "id": "CVE-2026-64648", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64648 affects version 13.5.11-tuxcare.14 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:e0bd67d2-2c7f-57ab-9258-25000fd94d07", "id": "GHSA-5j59-xgg2-r9c4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.14 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:e44e841a-fa45-5849-b7fc-cf84677dbbdf", "id": "GHSA-8h8q-6873-q5fj", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.14 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:e037653f-8594-5b4d-99b4-1edc0fa76c76", "id": "GHSA-h25m-26qc-wcjf", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.14 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:e3f8575a-5ff1-57e5-b3af-59a775301a53", "id": "GHSA-mwv6-3258-q52c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.14 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:2aa73c0e-abc0-51cf-aa50-532e6357cb46", "id": "GHSA-q4gf-8mx6-v5v3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.14 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.14" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.14" } ] }