{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:18fc73fc-12d7-52a3-9088-3687502d0845", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16", "type": "library", "name": "@next/bundle-analyzer", "version": "13.5.11-tuxcare.16", "purl": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:0e0ef9a2-f74c-5781-9860-d1f2b82d5a0f", "id": "AIKIDO-2024-10173", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.16 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:687e6429-76bb-5a06-9438-fb07ad5daeb2", "id": "AIKIDO-2025-10936", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.16 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:8577163e-3dd6-5d7c-af4d-579a06f8ad11", "id": "CVE-2024-34351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.16 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:c79e89b6-9403-5366-a91c-31180c5f3b02", "id": "CVE-2024-47831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.16 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:0f90a1a5-952a-5a44-9cd0-ff05f51dc202", "id": "CVE-2024-51479", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.16 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:c8caf858-cc2a-5772-8338-1ef7f0d7e862", "id": "CVE-2025-32421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.16 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:03fe6b4d-a27d-5740-a63b-083445128efa", "id": "CVE-2025-48068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.16 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:2020a42b-5f6d-5509-8f52-8cfda07039e0", "id": "CVE-2025-55173", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.16 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:2842970f-fcc7-5882-ada9-6c80cb8498e0", "id": "CVE-2025-55183", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55183 is fixed in version 13.5.11-tuxcare.16 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:bfe7d64c-0289-5977-907c-9e181d9ed4a9", "id": "CVE-2025-55184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.16 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:e503a0b8-3572-562a-9064-55ebe731887e", "id": "CVE-2025-57752", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.16 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:82520a87-6b02-5b44-a896-85b013a24c36", "id": "CVE-2025-57822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.16 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:f58d9c69-751e-5396-8030-bbbdd93c7421", "id": "CVE-2025-59471", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.16 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:5299862c-627e-5359-969a-cd8e38145977", "id": "CVE-2025-59472", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.16 of @next/bundle-analyzer. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat..." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:5f2745d3-0cfd-5097-8202-8c528e46023a", "id": "CVE-2025-67779", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.16 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:81c2bd66-1997-555f-b7aa-6319bb79e748", "id": "CVE-2026-27980", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.16 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:7bdf03d7-2eaa-5690-886e-fca4113938d1", "id": "CVE-2026-29057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.16 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:8e14109d-225e-59ce-84c3-09a2df756c97", "id": "CVE-2026-44572", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.16 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:47e759c5-4751-590d-bcfc-4bafffcd92a0", "id": "CVE-2026-44573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.16 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:534843a9-eec8-5d95-bb27-bb1dc8b4729c", "id": "CVE-2026-44577", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.16 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:bdbd6bee-78c3-5596-8f2f-7bf3b4940755", "id": "CVE-2026-44578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.16 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:a43580a6-fc48-5a0e-b463-a724665a8292", "id": "CVE-2026-44580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.16 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:aeb89faf-a8ce-5973-a8c2-1eb80ecab09b", "id": "CVE-2026-44581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.16 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:f753a10e-57f3-5466-8e79-852252bf4e06", "id": "CVE-2026-44582", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.16 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:70cf0f4b-73f1-5257-9569-a7235cd4f3c1", "id": "CVE-2026-64641", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.16 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:728e74a1-cda1-5306-af1d-e5ce56fa03f4", "id": "CVE-2026-64643", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.16 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:9c69e03d-ba47-5ab8-9010-8ccb6d8c3814", "id": "CVE-2026-64645", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.16 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:85d9cea5-8308-56f0-92e3-24a2eaeb5967", "id": "CVE-2026-64646", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.16 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:a76eb752-80ac-5be7-b89a-8c998c600909", "id": "CVE-2026-64647", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.16 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:111b1a8d-6a4b-57a1-a4a2-223cb762783f", "id": "CVE-2026-64648", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64648 is fixed in version 13.5.11-tuxcare.16 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:5a90bbfe-f81a-5441-bfdb-ef175881bb00", "id": "GHSA-5j59-xgg2-r9c4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.16 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:93840b06-07d7-53ba-9bfd-63650eaa88af", "id": "GHSA-8h8q-6873-q5fj", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.16 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:48880b25-f6bb-5a2d-b863-79709e2dcef1", "id": "GHSA-h25m-26qc-wcjf", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.16 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:7dacc27d-7be7-5fb8-977e-7ab4201ba170", "id": "GHSA-mwv6-3258-q52c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.16 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:53986193-956e-5974-a898-262ec8d72018", "id": "GHSA-q4gf-8mx6-v5v3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.16 of @next/bundle-analyzer." }, "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.16" } ] }