{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:5137a427-950c-5666-b82e-459ccfc7f9cd", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15", "type": "library", "name": "@next/plugin-storybook", "version": "13.5.11-tuxcare.15", "purl": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:7da1aac1-5cd5-5ddb-b72b-9ef32d2d6998", "id": "AIKIDO-2024-10173", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.15 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:e41eb9d9-c0e4-5b85-9e8f-be1f9bc0c3f9", "id": "AIKIDO-2025-10936", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.15 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:f6ac51f6-4c74-5882-9011-12758d5b8703", "id": "CVE-2024-34351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.15 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:50d59131-3019-54eb-ab6e-b9d58b69981c", "id": "CVE-2024-47831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.15 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:064b9c30-aa76-5a9c-b554-31d9efca2894", "id": "CVE-2024-51479", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.15 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:b4e3c149-1a71-567f-94be-9d8b89b9867c", "id": "CVE-2025-32421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.15 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:67357f90-ea78-5eae-9563-b11169f2822f", "id": "CVE-2025-48068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.15 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:40a59292-1232-500a-b656-9f98ad4f2535", "id": "CVE-2025-55173", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.15 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:da6a0417-ae43-59ee-903e-631d12d19137", "id": "CVE-2025-55183", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55183 affects version 13.5.11-tuxcare.15 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:8788a36b-9db6-5a50-b43a-05f2f16993af", "id": "CVE-2025-55184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.15 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:8e9b7ea1-d0d3-5170-ac62-7d0dceb82740", "id": "CVE-2025-57752", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.15 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:562ae4a4-0762-5713-aa39-e9621f54460d", "id": "CVE-2025-57822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.15 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:42487019-ba1d-53ec-9512-95de0a9a1577", "id": "CVE-2025-59471", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.15 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:6d617e07-d604-5a6b-a865-704f1e2b9b28", "id": "CVE-2025-59472", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.15 of @next/plugin-storybook. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat..." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:10ba600e-c18e-5a50-979a-c7fecf3dd008", "id": "CVE-2025-67779", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.15 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:44ff1aac-4581-5403-b1b7-2c0a900d7e5a", "id": "CVE-2026-27980", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.15 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:2dade13c-2289-5617-a048-9aa11337edf2", "id": "CVE-2026-29057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.15 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:5cb6f8f0-025c-53a0-83b5-db0866929e9f", "id": "CVE-2026-44572", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.15 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:51fab03d-9949-5d7b-8453-7d073ac1c375", "id": "CVE-2026-44573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.15 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:cf7433d0-b0d9-5e24-bc1f-ebbe81d904e0", "id": "CVE-2026-44577", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.15 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:bb8efc48-5955-50a5-a787-b05e3aade4e0", "id": "CVE-2026-44578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.15 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:11f00ef0-dedb-5821-a529-f635705be1c7", "id": "CVE-2026-44580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.15 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:ad0b0aa6-908c-514f-9f2b-0bbe583ae589", "id": "CVE-2026-44581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.15 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:172b0849-4ecd-50da-83a0-b20519f46fc3", "id": "CVE-2026-44582", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.15 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:f5f2b33b-2129-5d3a-be14-54cf66d7d8e7", "id": "CVE-2026-64641", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.15 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:2b8f5581-2f9c-57a0-b55a-975f822d339c", "id": "CVE-2026-64643", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.15 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:04e2bc15-221b-5637-91e8-0e6a0040f54f", "id": "CVE-2026-64645", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.15 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:b35c8fe2-a55f-5605-9750-74d9256e981b", "id": "CVE-2026-64646", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.15 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:ed5d7426-f460-5290-afb9-680978b4a14b", "id": "CVE-2026-64647", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.15 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:df0ea2b7-a094-59c8-a120-a013950a60e6", "id": "CVE-2026-64648", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64648 affects version 13.5.11-tuxcare.15 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:87ba2d71-b0b8-5af2-b127-bb4399e33dd3", "id": "GHSA-5j59-xgg2-r9c4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.15 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:c2a78461-b5b6-5cce-be8e-52ffc7cdcb0b", "id": "GHSA-8h8q-6873-q5fj", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.15 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:114990ec-700e-5f8c-981e-befa1f3790b7", "id": "GHSA-h25m-26qc-wcjf", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.15 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:96bb03a7-582e-50db-a635-0881d71e76c9", "id": "GHSA-mwv6-3258-q52c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.15 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:34f131cc-1d76-530b-b3bc-328900221a73", "id": "GHSA-q4gf-8mx6-v5v3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.15 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.15" } ] }