{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:5290e763-428a-58b1-8446-2191ee7c0eeb", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14", "type": "library", "name": "@next/mdx", "version": "13.5.11-tuxcare.14", "purl": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:5e178750-4b9a-58a4-b5f0-cd5475bb1dc8", "id": "AIKIDO-2024-10173", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.14 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:a071030a-e1ea-5531-8a06-76ae5d67e75b", "id": "AIKIDO-2025-10936", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.14 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:da93a912-e499-57d2-b1f9-f0466133352d", "id": "CVE-2024-34351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.14 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:875bba59-31b8-51fe-8e6f-fd3fcd38092a", "id": "CVE-2024-47831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.14 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:db1c2d50-67ee-5592-9c26-1d86a33834ec", "id": "CVE-2024-51479", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.14 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:5aa0fe96-8cff-553d-aba3-d0bf7c0de9a5", "id": "CVE-2025-32421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.14 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:1f47b8b1-92d9-5067-9bc3-6f53f69cc51e", "id": "CVE-2025-48068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.14 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:218a3eb3-f3a5-50d5-a707-bcf622cfb87c", "id": "CVE-2025-55173", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.14 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:7c907fc8-2ca1-5570-96bd-876a40ae40b3", "id": "CVE-2025-57752", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.14 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:05bcd99b-fb63-5951-a60a-14dbcfa5dac1", "id": "CVE-2025-57822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.14 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:b12163c8-fb08-50b4-a9a0-4356b2010865", "id": "CVE-2025-59471", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.14 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:c8b79cc2-8874-5eb0-8c54-a6e6034e4375", "id": "CVE-2025-59472", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.14 of @next/mdx. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat..." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:7a53ce7b-704e-5a04-a92e-688546dc7d1c", "id": "CVE-2025-67779", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.14 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:6c251797-f018-5bd7-8575-c94129b5b5f5", "id": "CVE-2026-27980", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.14 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:46a2681a-0815-50e6-bf5c-7136578a83ac", "id": "CVE-2026-29057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.14 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:8bc4f012-2cd7-5247-b8a6-a271346fbf59", "id": "CVE-2026-44572", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.14 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:11d9a53e-f6ae-56f6-b324-2b5f70c1a832", "id": "CVE-2026-44573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.14 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:1a26c56e-8736-516f-a473-b63e4ce0d8e2", "id": "CVE-2026-44577", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44577 affects version 13.5.11-tuxcare.14 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:ff11e9f6-85d8-5f90-bf7e-b87a3345b4b3", "id": "CVE-2026-44578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.14 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:f54374d4-09bc-513b-9982-38a104f15e71", "id": "CVE-2026-44580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44580 affects version 13.5.11-tuxcare.14 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:ddcdf59d-c4f1-5ea4-b98f-45e0ffe736dc", "id": "CVE-2026-44581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44581 affects version 13.5.11-tuxcare.14 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:aa4b0789-d7cf-5012-ab4d-d501befb922d", "id": "CVE-2026-44582", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44582 affects version 13.5.11-tuxcare.14 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:698ebb6e-b609-545d-980c-6d8df3fb7dca", "id": "CVE-2026-64641", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64641 affects version 13.5.11-tuxcare.14 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:b2e492b0-051e-5f79-81d4-6bd57c4f3172", "id": "CVE-2026-64643", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64643 affects version 13.5.11-tuxcare.14 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:71619c0d-fd1c-5a0c-a238-86cbd536ed4d", "id": "CVE-2026-64645", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64645 affects version 13.5.11-tuxcare.14 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:7010100f-55b0-5a50-86aa-9d7d99c5c4a5", "id": "CVE-2026-64646", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64646 affects version 13.5.11-tuxcare.14 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:962efb6b-d55f-558b-a021-77fce74f3aa8", "id": "CVE-2026-64647", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64647 affects version 13.5.11-tuxcare.14 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:defb7585-535c-5bf0-9cd3-e6b8c237deda", "id": "CVE-2026-64648", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64648 affects version 13.5.11-tuxcare.14 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:b026bb95-de33-5e3c-99e1-49133c9b7a6d", "id": "GHSA-5j59-xgg2-r9c4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.14 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:be383b62-f814-5781-8f69-268ab4bf17b3", "id": "GHSA-8h8q-6873-q5fj", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.14 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:f26f006a-4b95-5b79-bf01-eb7494a2c844", "id": "GHSA-h25m-26qc-wcjf", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.14 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:b5f49dfa-3f63-5d8c-9568-ab8865994d02", "id": "GHSA-mwv6-3258-q52c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.14 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:d1f4dc57-5d06-5718-97c4-c3d2ad1cabd4", "id": "GHSA-q4gf-8mx6-v5v3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.14 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.14" } ] }