{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:32885e32-b838-5551-8a0f-27111ba72603", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15", "type": "library", "name": "@next/font", "version": "13.5.11-tuxcare.15", "purl": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:220f9924-4048-571c-9fe9-ffae33346531", "id": "AIKIDO-2024-10173", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.15 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:4ff1a001-b527-5a6d-b68d-bb0a9b5e0cad", "id": "AIKIDO-2025-10936", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.15 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:4ed9c089-3bf3-5fa2-831f-fe47a0e04fea", "id": "CVE-2024-34351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.15 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:e09b8209-db84-5ad3-b6e9-9d451fe7eb93", "id": "CVE-2024-47831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.15 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:b2f88add-935a-5a97-ba61-f3ec3043bcaa", "id": "CVE-2024-51479", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.15 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:cd5442d7-08b2-5022-9199-9ed224891307", "id": "CVE-2025-32421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.15 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:0607487d-8fa2-537b-b22b-1544cc6e6220", "id": "CVE-2025-48068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.15 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:d5928ce1-f5e3-5162-a52b-f7a050fd7500", "id": "CVE-2025-55173", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.15 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:adf3ac6f-07e9-5316-b0a7-cc5c9a258a6b", "id": "CVE-2025-55183", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55183 affects version 13.5.11-tuxcare.15 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:75f0a1d8-740b-5a0b-b6b6-f6c2af8a28ad", "id": "CVE-2025-55184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.15 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:7809f6d6-1e4a-5c8a-81dd-efc1423bf882", "id": "CVE-2025-57752", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.15 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:fea641c5-696c-5daa-8c7c-49b91ba46a48", "id": "CVE-2025-57822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.15 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:eca5b3dc-e7dc-548d-aa32-2e22a2308b6d", "id": "CVE-2025-59471", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.15 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:8c7c0e60-5ea1-5bb1-b393-da887d6a96dd", "id": "CVE-2025-59472", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.15 of @next/font. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat..." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:fbd1e76e-4db5-574b-816e-b70542de12ee", "id": "CVE-2025-67779", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.15 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:291f914f-79bc-53fd-babf-79f46e758251", "id": "CVE-2026-27980", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.15 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:d47eb5b9-cb3a-5d92-99fa-6678263c3981", "id": "CVE-2026-29057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.15 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:9891521c-70c7-5c7f-a2b3-8a510a6bc6b0", "id": "CVE-2026-44572", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.15 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:4190ac0c-3265-5819-a65e-c4777716dbf4", "id": "CVE-2026-44573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.15 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:e3a40e47-aba3-5a1a-b601-ec9b05ce1193", "id": "CVE-2026-44577", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.15 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:42bd2a69-39e2-5d2e-86d3-ec3c11378f87", "id": "CVE-2026-44578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.15 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:331ff19d-0571-5e6e-8425-3ee3e5b44fd5", "id": "CVE-2026-44580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.15 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:c3e795fb-2aed-552a-ad5d-10743b5ae23d", "id": "CVE-2026-44581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.15 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:fbbdcad7-de45-5050-8860-5a2b0b87e6de", "id": "CVE-2026-44582", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.15 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:b646d658-6ea4-5d46-8b62-b730e47a75e2", "id": "CVE-2026-64641", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.15 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:488494cc-e61a-59d0-a068-8d38798818b5", "id": "CVE-2026-64643", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.15 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:6fe5f113-3fb5-59d7-af30-fe95c2376724", "id": "CVE-2026-64645", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.15 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:1e8150cc-9f3b-5aec-b12c-e135be9d83c2", "id": "CVE-2026-64646", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.15 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:95398807-0422-53b3-bef4-8dcaa6156edd", "id": "CVE-2026-64647", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.15 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:aedf4560-201e-51f8-91e7-af1c667d452d", "id": "CVE-2026-64648", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64648 affects version 13.5.11-tuxcare.15 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:5e90938c-0230-5382-ab2a-d8889b14fd26", "id": "GHSA-5j59-xgg2-r9c4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.15 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:08cdf6a8-6788-5b68-b70e-5f1b09dc5f4f", "id": "GHSA-8h8q-6873-q5fj", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.15 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:1dc1c972-6f90-531b-a8da-f9fb7299a3ea", "id": "GHSA-h25m-26qc-wcjf", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.15 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:21f995ff-9d73-5dd7-b3fe-9134059057f6", "id": "GHSA-mwv6-3258-q52c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.15 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:ec6f3448-194e-5fe2-a3d0-bba030b61be9", "id": "GHSA-q4gf-8mx6-v5v3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.15 of @next/font." }, "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.15" } ] }