{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:6f83a55a-f155-5d57-9c87-003c95e0e800", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14", "type": "library", "name": "@next/plugin-storybook", "version": "13.5.11-tuxcare.14", "purl": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:d676ad21-2850-55d4-864e-ae4142b72fe6", "id": "AIKIDO-2024-10173", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.14 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:7fdd7b1a-8dee-57e2-8f7d-a064c8fd379b", "id": "AIKIDO-2025-10936", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.14 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:8b24ceee-7868-55a5-8fec-bf4246633849", "id": "CVE-2024-34351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.14 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:6c1043d3-3cc0-5a28-89db-03f0ca68b629", "id": "CVE-2024-47831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.14 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:2d39db11-d4dc-51ca-b0f6-ae3b9bfc699e", "id": "CVE-2024-51479", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.14 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:16040687-eab8-5312-894b-42ba8db1e89e", "id": "CVE-2025-32421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.14 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:fee5af6a-aac4-5ac3-b83b-1ce8bbbcbbcb", "id": "CVE-2025-48068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.14 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:224683e7-bd87-539d-8f8f-7324f8e2e875", "id": "CVE-2025-55173", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.14 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:08206149-d6e9-50d4-9b51-57c57cab07a3", "id": "CVE-2025-57752", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.14 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:4b866e5b-dd49-57ad-8cc1-2d2f9383cddc", "id": "CVE-2025-57822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.14 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:6fae1512-1bb2-5a57-a4a0-74f1d7c23cc3", "id": "CVE-2025-59471", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.14 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:f3caae80-79a5-59b5-8690-0000babe646e", "id": "CVE-2025-59472", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.14 of @next/plugin-storybook. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat..." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:57579cd9-a50a-5d58-852b-2201983c2790", "id": "CVE-2025-67779", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.14 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:4fdac5a7-59c5-5aa4-b4cd-f615571465fc", "id": "CVE-2026-27980", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.14 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:9203595f-ff59-5a75-aefd-be591d1e829a", "id": "CVE-2026-29057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.14 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:2b076ee4-41b6-526d-b3ee-46d3ca658f84", "id": "CVE-2026-44572", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.14 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:6a989c54-f63d-5ab8-b46d-7b829ab5085c", "id": "CVE-2026-44573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.14 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:3db50cd9-d2ff-520f-a5a6-8dc671f328ee", "id": "CVE-2026-44577", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44577 affects version 13.5.11-tuxcare.14 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:58889d95-25e7-50e4-bec8-031ad9dd4ab4", "id": "CVE-2026-44578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.14 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:eaf0ca41-03c7-533e-b800-b8f3d48ce68a", "id": "CVE-2026-44580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44580 affects version 13.5.11-tuxcare.14 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:067bb805-52fd-5fad-aa46-bd2762d147d2", "id": "CVE-2026-44581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44581 affects version 13.5.11-tuxcare.14 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:0354881f-58fc-5808-a022-294f079e3bd5", "id": "CVE-2026-44582", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44582 affects version 13.5.11-tuxcare.14 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:9050a751-8ad8-542d-aebd-a35cadfb1ff8", "id": "CVE-2026-64641", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64641 affects version 13.5.11-tuxcare.14 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:8b8d35fb-040e-5509-8ea6-0da19214f0b9", "id": "CVE-2026-64643", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64643 affects version 13.5.11-tuxcare.14 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:bf3aec97-6d25-541a-91c2-d57f73fe0aeb", "id": "CVE-2026-64645", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64645 affects version 13.5.11-tuxcare.14 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:ed0f02c6-9b2e-5db7-92d1-9964ebae997d", "id": "CVE-2026-64646", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64646 affects version 13.5.11-tuxcare.14 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:b9d918e3-e10c-53dc-8cc6-2f30fd428d09", "id": "CVE-2026-64647", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64647 affects version 13.5.11-tuxcare.14 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:7e4901f6-6065-52ef-aae3-1a17978f8c0a", "id": "CVE-2026-64648", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64648 affects version 13.5.11-tuxcare.14 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:72fc63fc-a207-5c3b-9259-bc43b3285067", "id": "GHSA-5j59-xgg2-r9c4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.14 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:f7083173-47b0-57aa-8cbf-957c58973aab", "id": "GHSA-8h8q-6873-q5fj", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.14 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:92b2ac6b-7165-51c2-9f25-c28155905c77", "id": "GHSA-h25m-26qc-wcjf", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.14 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:da05448d-f085-5754-b215-2d7244577f5a", "id": "GHSA-mwv6-3258-q52c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.14 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:449e72f0-36d7-5a60-a1e7-4d0f412d8818", "id": "GHSA-q4gf-8mx6-v5v3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.14 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.14" } ] }