{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a21fae0b-32de-581b-97ec-da2a70498ddc", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14", "type": "library", "name": "@next/polyfill-nomodule", "version": "13.5.11-tuxcare.14", "purl": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:f419b200-876c-5b77-88f3-52c5302462a1", "id": "AIKIDO-2024-10173", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:c5426ae4-dd02-53b2-86f5-df0c4648028a", "id": "AIKIDO-2025-10936", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:c3ac889e-c57f-5606-9572-a657f12fab86", "id": "CVE-2024-34351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:4775c2ac-7678-5b80-b14c-38634d16f9eb", "id": "CVE-2024-47831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:ac6061ec-86ec-5c63-b2c0-132bf70b3e8b", "id": "CVE-2024-51479", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:34b3b136-d49e-5540-9da9-76aa2e31e010", "id": "CVE-2025-32421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:9025039a-0d91-541d-aa13-0e42fcce6551", "id": "CVE-2025-48068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:d858a3d1-d222-5a2f-9fad-b388c8dfca22", "id": "CVE-2025-55173", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:19fd377a-e43f-5221-9a43-91aa00f7f28b", "id": "CVE-2025-57752", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:9445486a-a88d-547c-867c-5b8ed2cb22bb", "id": "CVE-2025-57822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:34a2d627-8a4e-56b5-8b50-71f0ba28ce83", "id": "CVE-2025-59471", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:9dbf5ae2-63f9-5723-85da-a86121128dfd", "id": "CVE-2025-59472", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.14 of @next/polyfill-nomodule. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat..." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:044da3a0-dee5-587b-87aa-51e646adc301", "id": "CVE-2025-67779", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:2f69e750-03ba-53d2-8c9f-e28c79130382", "id": "CVE-2026-27980", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:f6a3d992-d16a-5dc2-aecc-299f226e32b2", "id": "CVE-2026-29057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:35cd5d7a-bfff-5352-bd93-e17f1412fd04", "id": "CVE-2026-44572", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:78482310-9ab6-5164-a4c2-c8806500b8f0", "id": "CVE-2026-44573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:1e98438d-746b-5edc-a5de-1d570c21cbc5", "id": "CVE-2026-44577", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44577 affects version 13.5.11-tuxcare.14 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:46cec3f2-f1ee-5851-b798-89fa916e6aef", "id": "CVE-2026-44578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:aa9d21cf-e857-5f1a-8120-5c6299f79f9d", "id": "CVE-2026-44580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44580 affects version 13.5.11-tuxcare.14 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:9e992e1e-8a4d-5a47-9ce7-2c68c3429655", "id": "CVE-2026-44581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44581 affects version 13.5.11-tuxcare.14 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:5cedac1b-176c-5950-8e38-c61d5de8a804", "id": "CVE-2026-44582", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44582 affects version 13.5.11-tuxcare.14 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:57124529-e664-5a1d-8b6f-102525555259", "id": "CVE-2026-64641", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64641 affects version 13.5.11-tuxcare.14 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:b5b2b7d2-3787-5864-9aac-97fe4aecfb88", "id": "CVE-2026-64643", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64643 affects version 13.5.11-tuxcare.14 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:733c0287-b41a-5001-93f2-88cfbb28d8a7", "id": "CVE-2026-64645", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64645 affects version 13.5.11-tuxcare.14 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:b0e217a5-9b04-5bfe-aec5-d0e9ba1f52dd", "id": "CVE-2026-64646", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64646 affects version 13.5.11-tuxcare.14 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:e4a00703-feb8-5ff2-b73a-05131099fe50", "id": "CVE-2026-64647", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64647 affects version 13.5.11-tuxcare.14 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:1545eba5-d31c-57f2-885b-49128bcc6d3d", "id": "CVE-2026-64648", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64648 affects version 13.5.11-tuxcare.14 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:79f01c65-b1fb-5d07-9ccd-ced1fbe73efc", "id": "GHSA-5j59-xgg2-r9c4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:d18b7716-5db7-53be-ad15-e51b16158664", "id": "GHSA-8h8q-6873-q5fj", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:aece7698-21ae-512a-82c1-d551c93eaac0", "id": "GHSA-h25m-26qc-wcjf", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:07b94e44-4e33-5401-9998-d8c42ca2d806", "id": "GHSA-mwv6-3258-q52c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:505de6c0-dfcc-5c3d-ba91-4f3ef941a156", "id": "GHSA-q4gf-8mx6-v5v3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.14 of @next/polyfill-nomodule." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.14" } ] }