{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:838b1415-b952-5056-b01e-2af2a9fb9331", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@next/font", "purl": "pkg:npm/%40next/font@13.5.11-tuxcare.18", "type": "library", "bom-ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18", "version": "13.5.11-tuxcare.18", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "AIKIDO-2024-10173", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:3df919c1-0ea5-53cd-bca4-682ef7753c45", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.18 of @next/font." } }, { "id": "AIKIDO-2025-10936", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:9f6ab2ed-5a68-5014-b9a1-cba0205348f0", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.18 of @next/font." } }, { "id": "CVE-2024-34351", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:b443d4ae-b04a-5cea-b219-d97a5f88f15f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.18 of @next/font." } }, { "id": "CVE-2024-47831", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:fc09f213-4a4b-5fd4-959b-9155062e8e45", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.18 of @next/font." } }, { "id": "CVE-2024-51479", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:2ca79591-2d1a-5e81-b2e1-d3f058802e4c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.18 of @next/font." } }, { "id": "CVE-2025-32421", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:98510b6a-acf2-5ca0-8041-da65d8f1ba86", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.18 of @next/font." } }, { "id": "CVE-2025-48068", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:8a548ffd-47ac-5b10-999b-f9e6d53aa5e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.18 of @next/font." } }, { "id": "CVE-2025-55173", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:fc68abe3-0c67-5526-8cd2-ca137b8a61bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.18 of @next/font." } }, { "id": "CVE-2025-55183", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:2b7216ef-6325-5ce1-ac77-007710951aad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55183 is fixed in version 13.5.11-tuxcare.18 of @next/font." } }, { "id": "CVE-2025-55184", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:5bc57ac1-ecf0-5c75-8abd-49952b7272da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.18 of @next/font." } }, { "id": "CVE-2025-57752", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:94daa526-ac96-5a21-b4e2-2bb784f777d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.18 of @next/font." } }, { "id": "CVE-2025-57822", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:ecb0943a-b4f1-5526-8bab-60de71f86259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.18 of @next/font." } }, { "id": "CVE-2025-59471", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:06518416-1b66-58d8-a5f4-d83ae0a10371", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.18 of @next/font." } }, { "id": "CVE-2025-59472", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:7f9f461f-e8f6-5ead-8904-9094e8792b24", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.18 of @next/font. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat...", "justification": "code_not_present" } }, { "id": "CVE-2025-67779", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:0b087c0f-232d-5ab1-9e7e-4d953990fb17", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.18 of @next/font." } }, { "id": "CVE-2026-27980", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:cd2ca059-395b-5cd7-9b15-66a9362b901c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.18 of @next/font." } }, { "id": "CVE-2026-29057", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:1d783576-e935-5beb-8a59-516ebddc6130", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.18 of @next/font." } }, { "id": "CVE-2026-44572", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:7c4b1e46-eba7-5ca5-a782-619bf3e0221b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.18 of @next/font." } }, { "id": "CVE-2026-44573", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:432f3d4d-2688-5e02-a58c-27dbc61c08bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.18 of @next/font." } }, { "id": "CVE-2026-44577", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:3fa98fa4-75d4-5f8f-a249-0eb7ec8aa1f3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.18 of @next/font." } }, { "id": "CVE-2026-44578", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:d64bcb89-c554-57fc-9aeb-1a2779429f4a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.18 of @next/font." } }, { "id": "CVE-2026-44580", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:79fcd9bd-a53a-5aa0-93e8-782970d5863e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.18 of @next/font." } }, { "id": "CVE-2026-44581", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:092d0c16-4eba-5104-8c61-8b788fe1c135", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.18 of @next/font." } }, { "id": "CVE-2026-44582", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:c76cb666-70ac-57fe-8854-e62c50271db7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.18 of @next/font." } }, { "id": "CVE-2026-64641", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:16e4af84-6c32-5189-be83-90c3370badcf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.18 of @next/font." } }, { "id": "CVE-2026-64643", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:275e7343-439e-526b-88ac-b8afcb4819e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.18 of @next/font." } }, { "id": "CVE-2026-64645", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:20175c15-3603-591e-9d18-6fbb8e3340a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.18 of @next/font." } }, { "id": "CVE-2026-64646", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:83eb01f4-c66f-55bd-bcd6-a376ae00320b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.18 of @next/font." } }, { "id": "CVE-2026-64647", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:43c6a726-554f-5089-8cae-6e8f64012d1e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.18 of @next/font." } }, { "id": "CVE-2026-64648", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:2eafb04b-f44f-5630-b4c4-8b98165181ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64648 is fixed in version 13.5.11-tuxcare.18 of @next/font." } }, { "id": "CVE-2026-75604", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:42270ce8-852e-51b0-a6c3-96ddb230d3b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-75604 is fixed in version 13.5.11-tuxcare.18 of @next/font." } }, { "id": "GHSA-2xp9-vwfh-vxw4", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:a4705a43-655b-50a1-bbc1-152e50944151", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-2xp9-vwfh-vxw4 is fixed in version 13.5.11-tuxcare.18 of @next/font." } }, { "id": "GHSA-5j59-xgg2-r9c4", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:8d57bf78-9ba8-5cc6-acf0-1809da08b27e", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.18 of @next/font." } }, { "id": "GHSA-8h8q-6873-q5fj", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:e3c7e4f3-7e92-5589-9181-effd6a788003", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.18 of @next/font." } }, { "id": "GHSA-h25m-26qc-wcjf", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:a3ce3b09-3b3e-564f-b24c-46397042a3a7", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.18 of @next/font." } }, { "id": "GHSA-mwv6-3258-q52c", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:0c8914f6-56e7-5c5e-9fcf-24b8c50184b5", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.18 of @next/font." } }, { "id": "GHSA-q4gf-8mx6-v5v3", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:531cadb9-d523-5932-b2df-103455b6c142", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.18 of @next/font." } } ], "dependencies": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.18" } ] }