{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:0666617b-119b-5752-a598-02f1fd74808f", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14", "type": "library", "name": "@next/third-parties", "version": "13.5.11-tuxcare.14", "purl": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:e3d91cd8-cb32-5574-ba75-579a2d1dd6c8", "id": "AIKIDO-2024-10173", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.14 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:ccfd71da-bf13-5b5c-bcd1-172fd86d7256", "id": "AIKIDO-2025-10936", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.14 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:7462c0d1-0105-5e3f-a729-7ad3c3f88828", "id": "CVE-2024-34351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.14 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:3fcbdea8-8745-5c66-b0bb-f18efcaeea6d", "id": "CVE-2024-47831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.14 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:2df21635-7a1c-598f-85ad-2439d8e7952d", "id": "CVE-2024-51479", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.14 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:28437fbc-1ac6-58f6-bb34-4d4b38aeb379", "id": "CVE-2025-32421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.14 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:15a10376-9953-5c1b-8773-5ca8c50373f8", "id": "CVE-2025-48068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.14 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:90ebafea-1f90-5d1e-9a3e-4769a943ac20", "id": "CVE-2025-55173", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.14 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:b1106e1a-3d4d-5ec4-986b-c4f0b2203a55", "id": "CVE-2025-57752", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.14 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:1ce9a6bc-27b6-519e-adde-4f12cdedc80d", "id": "CVE-2025-57822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.14 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:8f65fe58-c9fd-5589-b59f-e1c639776c9a", "id": "CVE-2025-59471", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.14 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:40987b50-02df-5d33-a32f-2f8c0180c23e", "id": "CVE-2025-59472", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.14 of @next/third-parties. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat..." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:be2bdd87-6bae-5d93-a737-f1363c0b741c", "id": "CVE-2025-67779", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.14 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:f100f2d2-d2e3-550d-985d-93f382273cbe", "id": "CVE-2026-27980", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.14 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:cc2e28a8-938e-5554-873b-469eec20a6ba", "id": "CVE-2026-29057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.14 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:4e698ecb-04d3-5ce0-82cd-521fa38c5067", "id": "CVE-2026-44572", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.14 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:896d361a-0ad6-527b-b993-43f66f43e502", "id": "CVE-2026-44573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.14 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:56da6a63-acce-527f-8a7a-547e17a51a07", "id": "CVE-2026-44577", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44577 affects version 13.5.11-tuxcare.14 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:876f2c36-24a5-5c4f-8e0e-4652939846e3", "id": "CVE-2026-44578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.14 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:2a6e3b4b-8872-5f70-882f-3e7181ad9f35", "id": "CVE-2026-44580", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44580 affects version 13.5.11-tuxcare.14 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:12a68c30-235a-5701-bc78-efcea953ac27", "id": "CVE-2026-44581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44581 affects version 13.5.11-tuxcare.14 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:253a919c-feca-5119-9578-9b144b95b45b", "id": "CVE-2026-44582", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44582 affects version 13.5.11-tuxcare.14 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:ff5d686a-1662-5b05-8163-4b62ae683a34", "id": "CVE-2026-64641", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64641 affects version 13.5.11-tuxcare.14 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:63997a0b-6e83-567f-b384-32bc278b4af2", "id": "CVE-2026-64643", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64643 affects version 13.5.11-tuxcare.14 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:06ca92aa-9aee-5896-a471-72e3f8c5a2c2", "id": "CVE-2026-64645", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64645 affects version 13.5.11-tuxcare.14 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:a58e31e5-6b84-5ff3-b7c6-dfc15a0b0ca6", "id": "CVE-2026-64646", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64646 affects version 13.5.11-tuxcare.14 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:7bc8b583-0da3-5a7c-81d5-3f633be5e360", "id": "CVE-2026-64647", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64647 affects version 13.5.11-tuxcare.14 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:9f7f4b77-8b6a-50d3-a932-ef176a97fa5e", "id": "CVE-2026-64648", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64648 affects version 13.5.11-tuxcare.14 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:3709a3a5-40df-51ea-9ee6-59c211e1ba2d", "id": "GHSA-5j59-xgg2-r9c4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.14 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:51e91d20-c7f1-5abc-a7c5-df8b47519d30", "id": "GHSA-8h8q-6873-q5fj", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.14 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:df5fc782-d7d4-5436-a86a-0bd21d7498cf", "id": "GHSA-h25m-26qc-wcjf", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.14 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:2a3b7e0d-df89-5ede-ab15-f315989ae128", "id": "GHSA-mwv6-3258-q52c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.14 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:c0a4dc53-949e-567f-aecc-37c373ce75be", "id": "GHSA-q4gf-8mx6-v5v3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.14 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.14" } ] }