{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:0aeb70b8-9c87-5c05-a154-d83da60a0723", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@next/mdx", "purl": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18", "type": "library", "bom-ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18", "version": "13.5.11-tuxcare.18", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "AIKIDO-2024-10173", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:18677cff-efb9-587b-8b1c-a4a0cd07768a", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } }, { "id": "AIKIDO-2025-10936", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:a67a9935-e8de-58bb-ac33-a8841ad0de12", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } }, { "id": "CVE-2024-34351", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:30abc115-faad-5dcd-b9b1-8db1b06a0783", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } }, { "id": "CVE-2024-47831", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:a44e269e-ff02-58fb-bd58-4d9134a9d448", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } }, { "id": "CVE-2024-51479", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:40131698-503e-5603-87c0-c8b4882e6541", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } }, { "id": "CVE-2025-32421", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:f32a8d2b-064d-5984-8a23-4eaefc6c1524", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } }, { "id": "CVE-2025-48068", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:3d182534-89fe-5478-89a2-62b9ef9d6bb1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } }, { "id": "CVE-2025-55173", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:3f37d2ea-0add-56e1-957f-449b49444021", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } }, { "id": "CVE-2025-55183", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:635bed5a-cd80-5201-9a62-fb6c81faf348", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55183 is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } }, { "id": "CVE-2025-55184", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:aa544e6d-251c-5d0e-82d5-802f460f5650", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } }, { "id": "CVE-2025-57752", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:8ec1e719-d899-522f-b8ad-6cbb2558cdc1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } }, { "id": "CVE-2025-57822", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:f12e5190-041a-53f6-bcda-a7cbaf05fcbd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } }, { "id": "CVE-2025-59471", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:2ff06e19-ce8c-54bf-8b18-6652c52b57d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } }, { "id": "CVE-2025-59472", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:bce13eab-ecd8-517f-813e-1b3fcf473eb4", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.18 of @next/mdx. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat...", "justification": "code_not_present" } }, { "id": "CVE-2025-67779", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:9f0feade-d2da-5a3b-a3ab-2adf8aa66acb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } }, { "id": "CVE-2026-27980", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:d8612052-96b2-5a05-bd0a-7717452f6aa7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } }, { "id": "CVE-2026-29057", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:a67dc27b-500c-5191-b11a-50ac7de10048", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } }, { "id": "CVE-2026-44572", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:5fd97880-9b89-5dbe-ad4e-294a153589c6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } }, { "id": "CVE-2026-44573", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:c5257dea-6144-55c7-b00e-d536f9a38669", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } }, { "id": "CVE-2026-44577", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:acf6b023-9e43-597b-8040-048f1cbbc209", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } }, { "id": "CVE-2026-44578", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:80b909e6-b960-57b1-ab33-69caf6e58c0c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } }, { "id": "CVE-2026-44580", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:777e30a2-6c0c-5d1e-a2ec-b7373350b2a7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } }, { "id": "CVE-2026-44581", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:a8af4818-85a5-5a0e-b32a-8fed7288d0e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } }, { "id": "CVE-2026-44582", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:4a3c3dae-3271-5244-9733-419995935048", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } }, { "id": "CVE-2026-64641", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:bcfe87d5-a1f0-5d02-a117-689f2a0dd2c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } }, { "id": "CVE-2026-64643", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:6c1702fd-b9b1-56cc-80e7-0e27b17f02ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } }, { "id": "CVE-2026-64645", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:d9cf1552-73a3-5090-8b19-0e66e947c24c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } }, { "id": "CVE-2026-64646", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:ca1b796e-a24b-5d1b-b03a-89e9b438e965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } }, { "id": "CVE-2026-64647", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:39f3b733-beef-5438-adda-0f423c299f79", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } }, { "id": "CVE-2026-64648", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:332604d5-ec62-55b6-a122-4811555a4d50", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64648 is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } }, { "id": "CVE-2026-75604", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:c1f798be-9dc2-58c2-9d9d-177565bb0ee2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-75604 is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } }, { "id": "GHSA-2xp9-vwfh-vxw4", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:50f9b0ca-40af-53e0-ac50-2187192435f7", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-2xp9-vwfh-vxw4 is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } }, { "id": "GHSA-5j59-xgg2-r9c4", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:7c9850fa-942a-5f19-bba4-386ff9aea911", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } }, { "id": "GHSA-8h8q-6873-q5fj", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:4222aaa1-4f85-50a4-8b20-f01fa1ec06c5", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } }, { "id": "GHSA-h25m-26qc-wcjf", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:c84d790d-9d50-5258-bccd-d0b97eba4eee", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } }, { "id": "GHSA-mwv6-3258-q52c", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:d85b4dfa-db3c-5d82-8f37-ed2ef3306c6f", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } }, { "id": "GHSA-q4gf-8mx6-v5v3", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:e6107440-6d23-5c26-aeb7-335e649f2157", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.18 of @next/mdx." } } ], "dependencies": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.18" } ] }