{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:01cd9720-31ff-596e-9783-1b8677bc15b5",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@next/env",
      "purl": "pkg:npm/%40next/env@16.3.7",
      "type": "library",
      "bom-ref": "pkg:npm/%40next/env@16.3.7",
      "version": "16.3.7",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-103004",
      "affects": [
        {
          "ref": "pkg:npm/%40next/env@16.3.7"
        }
      ],
      "bom-ref": "urn:uuid:0fb50a5a-336f-5670-b2fa-fda91fb8d3e2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-103004 affects version 16.3.7 of @next/env."
      }
    },
    {
      "id": "CVE-2026-94482",
      "affects": [
        {
          "ref": "pkg:npm/%40next/env@16.3.7"
        }
      ],
      "bom-ref": "urn:uuid:765a172b-03e2-5f34-9680-fc755932cb97",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-94482 affects version 16.3.7 of @next/env."
      }
    },
    {
      "id": "CVE-2026-94483",
      "affects": [
        {
          "ref": "pkg:npm/%40next/env@16.3.7"
        }
      ],
      "bom-ref": "urn:uuid:34498d95-4131-52aa-9b19-01e3ce5d7af9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-94483 affects version 16.3.7 of @next/env."
      }
    },
    {
      "id": "CVE-2026-94484",
      "affects": [
        {
          "ref": "pkg:npm/%40next/env@16.3.7"
        }
      ],
      "bom-ref": "urn:uuid:0b410f8f-0121-51c0-94da-d8e9d119aafd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-94484 affects version 16.3.7 of @next/env."
      }
    },
    {
      "id": "CVE-2026-94485",
      "affects": [
        {
          "ref": "pkg:npm/%40next/env@16.3.7"
        }
      ],
      "bom-ref": "urn:uuid:3e696506-361a-5ffb-8602-2e20f6c65e20",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-94485 affects version 16.3.7 of @next/env."
      }
    },
    {
      "id": "CVE-2026-94486",
      "affects": [
        {
          "ref": "pkg:npm/%40next/env@16.3.7"
        }
      ],
      "bom-ref": "urn:uuid:f1b88461-4402-5205-b29f-b3bdf701eb7e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-94486 affects version 16.3.7 of @next/env."
      }
    },
    {
      "id": "CVE-2026-94543",
      "affects": [
        {
          "ref": "pkg:npm/%40next/env@16.3.7"
        }
      ],
      "bom-ref": "urn:uuid:a29e6e32-a7da-5f09-a13c-303be38e2987",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-94543 affects version 16.3.7 of @next/env."
      }
    },
    {
      "id": "CVE-2026-94544",
      "affects": [
        {
          "ref": "pkg:npm/%40next/env@16.3.7"
        }
      ],
      "bom-ref": "urn:uuid:f50dccd3-6a83-557b-99cc-cf31e8bcf1d0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-94544 affects version 16.3.7 of @next/env."
      }
    },
    {
      "id": "GHSA-2464-fhr4-w9xw",
      "affects": [
        {
          "ref": "pkg:npm/%40next/env@16.3.7"
        }
      ],
      "bom-ref": "urn:uuid:ed0d5ea0-26c8-5df8-b36b-b4d7460a9347",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-2464-fhr4-w9xw affects version 16.3.7 of @next/env."
      }
    },
    {
      "id": "GHSA-673q-mjm6-r5xr",
      "affects": [
        {
          "ref": "pkg:npm/%40next/env@16.3.7"
        }
      ],
      "bom-ref": "urn:uuid:996ebfed-4b01-5e49-8091-ea26a9b40c81",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-673q-mjm6-r5xr affects version 16.3.7 of @next/env."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40next/env@16.3.7"
    }
  ]
}