{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:27f29842-c781-5a9c-ba45-b08c6b2a1633", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40next/font@13.5.11-tuxcare.14", "type": "library", "name": "@next/font", "version": "13.5.11-tuxcare.14", "purl": "pkg:npm/%40next/font@13.5.11-tuxcare.14" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:e2deda6f-f928-51cd-89ce-8b458a10fe35", "id": "AIKIDO-2024-10173", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.14 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:67feea4f-0046-5d4c-874e-bed9656293fb", "id": "AIKIDO-2025-10936", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.14 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:4ffd3d67-130b-5968-a79c-cc300cc1859e", "id": "CVE-2024-34351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.14 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:e54154f5-00c3-5222-9c53-f041f9f7ad45", "id": "CVE-2024-47831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.14 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:cea777a7-254c-590d-a766-e5c882cc6414", "id": "CVE-2024-51479", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.14 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:822344e1-537b-5cf7-b0b3-4b165df3b0c0", "id": "CVE-2025-32421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.14 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:1a26908a-8fed-5820-b55a-6c0a12dbf067", "id": "CVE-2025-48068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.14 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:95c33f4b-badd-5921-bc4f-821ed1cee84d", "id": "CVE-2025-55173", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.14 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:26cce375-2548-593b-8989-7bb541d45282", "id": "CVE-2025-57752", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.14 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:841b9af2-69b5-5f15-87da-53bd2fc5c421", "id": "CVE-2025-57822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.14 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:2b3a9732-f24b-5b90-ba34-830ff6bf6e82", "id": "CVE-2025-59471", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.14 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:98324067-5e18-5ddb-8c1d-b4ad437a075f", "id": "CVE-2025-59472", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.14 of @next/font. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat..." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:98a56ec5-7b13-517c-8b25-7800fde296a0", "id": "CVE-2025-67779", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.14 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:6c11dcd4-7d79-5fc2-bb2c-207913895405", "id": "CVE-2026-27980", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.14 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:ae70e13e-ed94-5df7-a41e-0794249e9de6", "id": "CVE-2026-29057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.14 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:baf033ff-2a15-51ee-8bbc-91f3c1219a11", "id": "CVE-2026-44572", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.14 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:4658613a-f4c6-5919-96f7-242ab76ee2e5", "id": "CVE-2026-44573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.14 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:79130b7d-ab6c-5c80-a6f1-81ef191e5021", "id": "CVE-2026-44577", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44577 affects version 13.5.11-tuxcare.14 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:36d8d98a-c294-5868-9424-eac5b2c28895", "id": "CVE-2026-44578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.14 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:27f0db07-d8fa-5ed1-932d-174f13cbe134", "id": "CVE-2026-44580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44580 affects version 13.5.11-tuxcare.14 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:18029be5-233c-595a-9b13-e8a741b345fa", "id": "CVE-2026-44581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44581 affects version 13.5.11-tuxcare.14 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:997d9ef1-fc0f-568a-8f31-d00dee3672a9", "id": "CVE-2026-44582", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44582 affects version 13.5.11-tuxcare.14 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:103791da-7ecb-544e-b88c-1592a8183005", "id": "CVE-2026-64641", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64641 affects version 13.5.11-tuxcare.14 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:91833bae-ba5c-5f4d-929d-0e4b5e446ab3", "id": "CVE-2026-64643", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64643 affects version 13.5.11-tuxcare.14 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:15602728-605b-5025-a1de-d48f070ffb4a", "id": "CVE-2026-64645", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64645 affects version 13.5.11-tuxcare.14 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:b6f7f77e-d696-532a-9899-e8f9e7fd760d", "id": "CVE-2026-64646", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64646 affects version 13.5.11-tuxcare.14 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:9fbaa18f-72b4-561b-a5da-047b7aae8ca8", "id": "CVE-2026-64647", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64647 affects version 13.5.11-tuxcare.14 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:265ad3c3-8065-500a-bb41-cf80b2155129", "id": "CVE-2026-64648", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64648 affects version 13.5.11-tuxcare.14 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:05c4d1cc-a42a-51a3-9001-0c1ffa3d8159", "id": "GHSA-5j59-xgg2-r9c4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.14 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:ed35b151-21b5-58bf-bb31-b122b54ed99c", "id": "GHSA-8h8q-6873-q5fj", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.14 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:96a7c4cc-a342-51dc-b1df-c292c9b5bbd3", "id": "GHSA-h25m-26qc-wcjf", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.14 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:529be838-e44a-532a-a1d0-422c28221c63", "id": "GHSA-mwv6-3258-q52c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.14 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:431813ac-95ac-5ab6-b9a6-9c1f74c545ee", "id": "GHSA-q4gf-8mx6-v5v3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.14 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.14" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.14" } ] }