{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:338241e9-8fd2-5c17-ae4f-1b9493bc4d0c", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16", "type": "library", "name": "@next/mdx", "version": "13.5.11-tuxcare.16", "purl": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:6e2cbfe0-e425-5b74-a49b-996b822b2e2f", "id": "AIKIDO-2024-10173", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.16 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:340f3874-5c31-5378-9d6b-77f030bf3d0c", "id": "AIKIDO-2025-10936", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.16 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:de187878-2faa-570d-bb33-e9dff4f9c2a3", "id": "CVE-2024-34351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.16 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:57b23b7f-506e-5070-9613-6cbd38ec1339", "id": "CVE-2024-47831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.16 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:5791d31e-06bf-5706-8b32-5752147c758f", "id": "CVE-2024-51479", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.16 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:e4fa4626-425f-5ace-9ef4-4f9b11fbd03c", "id": "CVE-2025-32421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.16 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:a6f03d26-a4a0-5ad7-b878-733b77bcdbfb", "id": "CVE-2025-48068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.16 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:77581976-a19e-5b99-b840-3a4a39cfce8e", "id": "CVE-2025-55173", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.16 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:3b919420-cbe1-5247-8dae-409dc9e8ade4", "id": "CVE-2025-55183", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55183 is fixed in version 13.5.11-tuxcare.16 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:da45bc6a-77dd-5ac7-9227-d4207dd47b68", "id": "CVE-2025-55184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.16 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:f8215b24-7735-539a-b632-08b7dd034bb9", "id": "CVE-2025-57752", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.16 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:fc4f477c-6b68-5572-a1c1-e1dad3dc8402", "id": "CVE-2025-57822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.16 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:be603e99-14dd-5d33-835a-c82f5e4b74c9", "id": "CVE-2025-59471", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.16 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:11c00e6c-9174-5f85-b36a-96a30a839ae7", "id": "CVE-2025-59472", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.16 of @next/mdx. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat..." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:d4994ba2-b68d-5881-8afa-0a5f90ede999", "id": "CVE-2025-67779", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.16 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:cd8c3adb-1fcf-544b-8ff9-0a7334e5673e", "id": "CVE-2026-27980", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.16 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:e3bec47c-7d1f-5ed3-b52f-d7424030755c", "id": "CVE-2026-29057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.16 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:a1ac5f81-d469-51cd-a3c5-51dcd91488c8", "id": "CVE-2026-44572", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.16 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:09269930-3fdd-59bc-8056-0b4b253302dd", "id": "CVE-2026-44573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.16 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:97cc705a-aaa2-5171-ac9e-6bde0bdc8eb1", "id": "CVE-2026-44577", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.16 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:875857d2-1044-57c2-9e0b-0e3721f383cc", "id": "CVE-2026-44578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.16 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:b3670dd8-b840-5916-9944-804657f0728e", "id": "CVE-2026-44580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.16 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:2aea62e6-e797-5ef9-8dd9-907deded272e", "id": "CVE-2026-44581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.16 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:8e6931fb-24fc-524a-8c74-f0527d1e371e", "id": "CVE-2026-44582", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.16 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:6c32d851-f653-5300-9c38-1764bf1963b5", "id": "CVE-2026-64641", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.16 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:571af511-2121-5ffc-a80b-4187bfbd8f4d", "id": "CVE-2026-64643", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.16 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:f87398c0-d37b-531e-97df-0e14238dfe2c", "id": "CVE-2026-64645", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.16 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:7970363c-57f5-5664-9c5d-b37b99161593", "id": "CVE-2026-64646", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.16 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:81d207a8-cfb0-5743-b1dc-a38b7a0abbc9", "id": "CVE-2026-64647", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.16 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:636d99da-5b17-5609-8fd1-e061e450b785", "id": "CVE-2026-64648", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64648 is fixed in version 13.5.11-tuxcare.16 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:683b48bc-20a8-5b09-afa7-9b98abd62e38", "id": "GHSA-5j59-xgg2-r9c4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.16 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:0aa364ac-ca04-5bca-af0c-c4a0d95e453f", "id": "GHSA-8h8q-6873-q5fj", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.16 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:7ad5d1e6-71c1-56ea-8127-72dc999d0274", "id": "GHSA-h25m-26qc-wcjf", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.16 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:1d6b71d8-f91c-5210-a439-ce9f82883927", "id": "GHSA-mwv6-3258-q52c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.16 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:daebd470-2579-5ff3-b881-89655141ab9f", "id": "GHSA-q4gf-8mx6-v5v3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.16 of @next/mdx." }, "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.16" } ] }