{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:4d4fbcaa-70db-5f8a-b5e7-0b250ba50c3a", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16", "type": "library", "name": "@next/env", "version": "13.5.11-tuxcare.16", "purl": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:7f0c43fa-4f5a-5cc5-a8c6-382f8f22680e", "id": "AIKIDO-2024-10173", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.16 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:ce790e8e-b0f9-566d-9917-0445a5032ad1", "id": "AIKIDO-2025-10936", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.16 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:93f7b597-64b2-5bb0-9743-4a37a2fd5cfa", "id": "CVE-2024-34351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.16 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:9ec04a5e-01ca-5a87-bea7-ee2a942c49d5", "id": "CVE-2024-47831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.16 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:33489ad2-b40c-549f-940d-fc3a7279a37c", "id": "CVE-2024-51479", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.16 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:924801fe-fe7d-5ec4-989c-36ed42263ff6", "id": "CVE-2025-32421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.16 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:49bf7935-d7b5-50eb-98cb-4d61a1d0526a", "id": "CVE-2025-48068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.16 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:61e0700a-6931-58f7-96bd-c356da48f798", "id": "CVE-2025-55173", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.16 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:93be7ff3-a7f9-541d-8a52-32d5a0cf6625", "id": "CVE-2025-55183", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55183 is fixed in version 13.5.11-tuxcare.16 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:2f3d1813-0a68-5e8c-8233-340b6cadb5ff", "id": "CVE-2025-55184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.16 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:3e529b5b-27d9-5d92-beda-371044d20653", "id": "CVE-2025-57752", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.16 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:58e62ddf-59a8-5636-abe3-fc144e33c7d4", "id": "CVE-2025-57822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.16 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:9c312a38-e382-5000-ba6e-eb4e6288292d", "id": "CVE-2025-59471", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.16 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:70a10321-2ec2-5c7e-bb94-11e824f6dc40", "id": "CVE-2025-59472", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.16 of @next/env. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat..." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:d0abc0f1-74e4-50d5-905e-1ff0678b90ad", "id": "CVE-2025-67779", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.16 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:45be07de-1ad4-5c9c-a2ae-bd72a14d8276", "id": "CVE-2026-27980", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.16 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:9dc0e35e-f79e-52e2-8792-a320ac83fcbf", "id": "CVE-2026-29057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.16 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:23d14e01-a61f-5f2b-b9b8-3090797d3224", "id": "CVE-2026-44572", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.16 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:41b5c4da-ab8c-5fde-b12b-30ca3d3916a8", "id": "CVE-2026-44573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.16 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:bd7d8bac-cce1-50ad-8b3e-5b628c7a4216", "id": "CVE-2026-44577", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.16 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:bb604af3-25b6-5738-b348-b331f828ac4c", "id": "CVE-2026-44578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.16 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:a352ed28-fdd2-5f69-a706-3e78410f60b0", "id": "CVE-2026-44580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.16 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:3b69fdc4-774a-526c-b10d-afb8649d2aaa", "id": "CVE-2026-44581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.16 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:b6ba4b9c-83be-5f5d-bfbe-7c17411fdd15", "id": "CVE-2026-44582", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.16 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:9ae1fcf1-3a7b-5589-aaa6-34be4d6294cd", "id": "CVE-2026-64641", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.16 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:317d6099-ac8c-5fa7-a04d-119669fb817a", "id": "CVE-2026-64643", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.16 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:dbdf94fe-5591-501a-a5f2-95b66b048ae4", "id": "CVE-2026-64645", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.16 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:ad4ffb77-5d39-5876-93ce-61cc152f9ba3", "id": "CVE-2026-64646", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.16 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:23773d95-54c6-5bb6-abe1-d1be5060d7e2", "id": "CVE-2026-64647", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.16 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:a69d7b4c-3a61-547a-b626-cfd94f08a2e0", "id": "CVE-2026-64648", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64648 is fixed in version 13.5.11-tuxcare.16 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:8ef01a5a-1e1c-5359-a602-5b2c4f4e7ea9", "id": "GHSA-5j59-xgg2-r9c4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.16 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:2b7c0d5d-3257-5611-ae47-0a0feadc5656", "id": "GHSA-8h8q-6873-q5fj", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.16 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:d3364079-1f91-52a9-aeb1-b5c8e38bc163", "id": "GHSA-h25m-26qc-wcjf", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.16 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:f57e0779-94fa-5723-8dd7-e0878005e58e", "id": "GHSA-mwv6-3258-q52c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.16 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:4b22052e-7407-5aee-b86a-2d995307289b", "id": "GHSA-q4gf-8mx6-v5v3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.16 of @next/env." }, "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.16" } ] }