{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8647241d-09ea-56e4-96a7-fba32c9453d1", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14", "type": "library", "name": "@next/polyfill-module", "version": "13.5.11-tuxcare.14", "purl": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:0683f318-2230-581d-b7e3-c027b8c8713f", "id": "AIKIDO-2024-10173", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:cb977415-8736-5f04-a96c-70b7a017f564", "id": "AIKIDO-2025-10936", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:6a4f6792-aa04-5b40-97b9-37b1900fa79c", "id": "CVE-2024-34351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:ba05ceeb-9868-5171-9cb5-3a07a1414b0e", "id": "CVE-2024-47831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:4c4c601c-c367-5ce1-9c01-eb37d277b083", "id": "CVE-2024-51479", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:414371a0-7382-5d3f-9cc5-a1dea5edf3dc", "id": "CVE-2025-32421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:594df28d-8187-517c-8b19-e66f276ecada", "id": "CVE-2025-48068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:289ff1ee-fe4b-5b11-96de-887dea9cfe26", "id": "CVE-2025-55173", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:4823f4df-272c-508d-be33-64ea1237767e", "id": "CVE-2025-57752", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:0562f262-cff4-5f15-b422-60cd1fcd6bde", "id": "CVE-2025-57822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:c861427a-ee71-5de1-af35-3edabada46c9", "id": "CVE-2025-59471", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:a66c5f79-31ae-5b9a-88c8-df1087ac56ed", "id": "CVE-2025-59472", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.14 of @next/polyfill-module. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat..." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:32569af1-ee5b-5764-9d94-ec759eeba248", "id": "CVE-2025-67779", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:58ade8ff-32e9-59d9-9249-a91ee0d2cec4", "id": "CVE-2026-27980", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:9b274860-d70e-5ab2-a7f9-027393e95462", "id": "CVE-2026-29057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:d68314d0-f22a-5a81-830f-af15f1cff3af", "id": "CVE-2026-44572", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:1dc82ae0-0409-53f1-9f7b-1b0834879c93", "id": "CVE-2026-44573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:e758067d-b4f5-5d36-8764-55b21b627c9a", "id": "CVE-2026-44577", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44577 affects version 13.5.11-tuxcare.14 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:68f08d99-27a8-5ab7-b5cb-690d32022d46", "id": "CVE-2026-44578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:0166ab6a-419e-5b1e-b35e-7f9ba6a3f87e", "id": "CVE-2026-44580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44580 affects version 13.5.11-tuxcare.14 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:a6e6a6c3-68a8-5fad-a059-74438a8d2243", "id": "CVE-2026-44581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44581 affects version 13.5.11-tuxcare.14 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:bb3164d6-01ce-5f2c-a81d-09aa7afc69a9", "id": "CVE-2026-44582", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44582 affects version 13.5.11-tuxcare.14 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:e2bfeb02-23ca-5562-a7d6-1d50f5e0e917", "id": "CVE-2026-64641", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64641 affects version 13.5.11-tuxcare.14 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:a1044311-50f7-5bdb-9868-aab1f7242b28", "id": "CVE-2026-64643", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64643 affects version 13.5.11-tuxcare.14 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:11e81f07-e0a4-55a9-9e40-996154f28737", "id": "CVE-2026-64645", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64645 affects version 13.5.11-tuxcare.14 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:6a7eef55-7b69-5ae9-8a52-0b8210656a8f", "id": "CVE-2026-64646", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64646 affects version 13.5.11-tuxcare.14 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:717281dc-42be-58ee-8f5c-c29f1e4acc74", "id": "CVE-2026-64647", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64647 affects version 13.5.11-tuxcare.14 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:d1b2feef-ab52-5fff-b76d-0e155d5532b4", "id": "CVE-2026-64648", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64648 affects version 13.5.11-tuxcare.14 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:99646343-a70a-5f7f-a513-4c5700842b9e", "id": "GHSA-5j59-xgg2-r9c4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:b2fc99ed-fe67-5853-a2e9-6f2bf287008e", "id": "GHSA-8h8q-6873-q5fj", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:7b04a4b1-e6ad-5a15-b776-895af2f638ec", "id": "GHSA-h25m-26qc-wcjf", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:6cfd43c8-a60e-5372-aeaa-643866afa158", "id": "GHSA-mwv6-3258-q52c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:aa85b035-9ab6-5875-b741-5cfe7dd4af18", "id": "GHSA-q4gf-8mx6-v5v3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.14" } ] }