{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:ea679bbb-24b4-5832-80f3-46dc14cd049f",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/create-next-app@13.5.11-tuxcare.14",
      "type": "library",
      "name": "create-next-app",
      "version": "13.5.11-tuxcare.14",
      "purl": "pkg:npm/create-next-app@13.5.11-tuxcare.14"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:16389693-209c-5faf-bba8-76d03367b911",
      "id": "AIKIDO-2024-10173",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.14 of create-next-app."
      },
      "affects": [
        {
          "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2a3a03f-bd12-5bfe-89de-db9597c54c48",
      "id": "AIKIDO-2025-10936",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.14 of create-next-app."
      },
      "affects": [
        {
          "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00413a62-7774-5bc6-80fb-d18e86331bcf",
      "id": "CVE-2024-34351",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.14 of create-next-app."
      },
      "affects": [
        {
          "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:125432ce-ad74-5e99-a45e-7f0a426e6d6c",
      "id": "CVE-2024-47831",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.14 of create-next-app."
      },
      "affects": [
        {
          "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9284a19a-be26-5a2a-bd16-dd653ab876d8",
      "id": "CVE-2024-51479",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.14 of create-next-app."
      },
      "affects": [
        {
          "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a98e2c85-d692-5597-83e9-6a40e3fc053d",
      "id": "CVE-2025-32421",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.14 of create-next-app."
      },
      "affects": [
        {
          "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3208edd5-c20e-57a3-a569-c9dff9b41b45",
      "id": "CVE-2025-48068",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.14 of create-next-app."
      },
      "affects": [
        {
          "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7fe7232-cc00-5566-a8fe-075c86b22c55",
      "id": "CVE-2025-55173",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.14 of create-next-app."
      },
      "affects": [
        {
          "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8347a1b0-fe19-5d7b-a67b-7c9c5d220d98",
      "id": "CVE-2025-57752",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.14 of create-next-app."
      },
      "affects": [
        {
          "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b05d89d7-6124-579f-80cc-e90e50e6dabc",
      "id": "CVE-2025-57822",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.14 of create-next-app."
      },
      "affects": [
        {
          "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4836d872-37e1-5f20-8621-275395548a6c",
      "id": "CVE-2025-59471",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.14 of create-next-app."
      },
      "affects": [
        {
          "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af447ac7-3d01-5456-9c23-5d2a31f9acf5",
      "id": "CVE-2025-59472",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.14 of create-next-app. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat..."
      },
      "affects": [
        {
          "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c8cd2b4-f911-58de-8496-d4fc91ce05ff",
      "id": "CVE-2025-67779",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.14 of create-next-app."
      },
      "affects": [
        {
          "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96558302-7d80-5d94-982f-b5883cfe0fde",
      "id": "CVE-2026-27980",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.14 of create-next-app."
      },
      "affects": [
        {
          "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9cabfce4-01ad-574b-a4d6-ddc7b46b55ed",
      "id": "CVE-2026-29057",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.14 of create-next-app."
      },
      "affects": [
        {
          "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a9ce6f8-fbee-5990-be4e-6a504930a532",
      "id": "CVE-2026-44572",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.14 of create-next-app."
      },
      "affects": [
        {
          "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94fa5b76-62f6-5516-a523-33228f8bdb65",
      "id": "CVE-2026-44573",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.14 of create-next-app."
      },
      "affects": [
        {
          "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:178be67a-7b25-53b6-acaa-3ca0f444d034",
      "id": "CVE-2026-44577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44577 affects version 13.5.11-tuxcare.14 of create-next-app."
      },
      "affects": [
        {
          "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ce1febb-151d-5a1f-8849-695b4bbe21eb",
      "id": "CVE-2026-44578",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.14 of create-next-app."
      },
      "affects": [
        {
          "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c08004c4-6a3f-5806-9bec-07fab918ffd5",
      "id": "CVE-2026-44580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44580 affects version 13.5.11-tuxcare.14 of create-next-app."
      },
      "affects": [
        {
          "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c696424-2ed5-5428-bb77-7739df26692e",
      "id": "CVE-2026-44581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44581 affects version 13.5.11-tuxcare.14 of create-next-app."
      },
      "affects": [
        {
          "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2602d06-4166-58f1-8638-94f70722cd43",
      "id": "CVE-2026-44582",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44582 affects version 13.5.11-tuxcare.14 of create-next-app."
      },
      "affects": [
        {
          "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bcf77198-10de-52e8-a6b9-d9f834619a1b",
      "id": "CVE-2026-64641",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-64641 affects version 13.5.11-tuxcare.14 of create-next-app."
      },
      "affects": [
        {
          "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3acb53bd-7e60-50de-8d75-b083a59d7a0a",
      "id": "CVE-2026-64643",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-64643 affects version 13.5.11-tuxcare.14 of create-next-app."
      },
      "affects": [
        {
          "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:806e0770-514e-5bf6-a8aa-8518c3e06103",
      "id": "CVE-2026-64645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-64645 affects version 13.5.11-tuxcare.14 of create-next-app."
      },
      "affects": [
        {
          "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:526b8265-8d63-5e72-ab23-f75b46a52a0c",
      "id": "CVE-2026-64646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-64646 affects version 13.5.11-tuxcare.14 of create-next-app."
      },
      "affects": [
        {
          "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2579da1-a10e-5469-9ac1-bd413c9b1199",
      "id": "CVE-2026-64647",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-64647 affects version 13.5.11-tuxcare.14 of create-next-app."
      },
      "affects": [
        {
          "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c53c9c0-4865-57eb-a563-5bbf6f2a1b61",
      "id": "CVE-2026-64648",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-64648 affects version 13.5.11-tuxcare.14 of create-next-app."
      },
      "affects": [
        {
          "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:089138c0-85b4-5ed7-adaf-4556a5c01e52",
      "id": "GHSA-5j59-xgg2-r9c4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.14 of create-next-app."
      },
      "affects": [
        {
          "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5c703d2-5cdc-5af4-9572-07f8ad4428d9",
      "id": "GHSA-8h8q-6873-q5fj",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.14 of create-next-app."
      },
      "affects": [
        {
          "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9cb649bb-8e15-59c1-9938-298814c66a62",
      "id": "GHSA-h25m-26qc-wcjf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.14 of create-next-app."
      },
      "affects": [
        {
          "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e77fb94c-1982-5088-8466-f57032a48932",
      "id": "GHSA-mwv6-3258-q52c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.14 of create-next-app."
      },
      "affects": [
        {
          "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c59285e7-fd9c-5efa-929a-e447f90132a2",
      "id": "GHSA-q4gf-8mx6-v5v3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.14 of create-next-app."
      },
      "affects": [
        {
          "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.14"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.14"
    }
  ]
}