{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:5f248708-bac6-54f6-bdde-ed4801afc67e", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16", "type": "library", "name": "@next/plugin-storybook", "version": "13.5.11-tuxcare.16", "purl": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:185e3f3b-e249-519b-b867-25f169493ae3", "id": "AIKIDO-2024-10173", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.16 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:34d4f6c9-0e31-5e7b-872d-037bb7469294", "id": "AIKIDO-2025-10936", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.16 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:1811ff1a-f3db-5cc8-8440-23384c3a4204", "id": "CVE-2024-34351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.16 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:27487baa-be79-5abf-9ec0-5dfc72f276e5", "id": "CVE-2024-47831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.16 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:ec5ebb7c-c1b1-519c-9874-d852cf23bf3f", "id": "CVE-2024-51479", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.16 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:af4d8d31-bf07-5fad-a50e-c94b923f08ee", "id": "CVE-2025-32421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.16 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:33d5c7e2-c942-5e77-af9b-f3bdb4dc7953", "id": "CVE-2025-48068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.16 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:dff02555-50df-57e6-a321-41612f1f2a10", "id": "CVE-2025-55173", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.16 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:8d9a3c3e-d9b6-5683-9741-a02de2e0fc6a", "id": "CVE-2025-55183", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55183 is fixed in version 13.5.11-tuxcare.16 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:fd59d3bd-e095-5e06-af3d-0b31b5157b24", "id": "CVE-2025-55184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.16 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:584905eb-132e-58a8-9077-bbc2dcc32e89", "id": "CVE-2025-57752", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.16 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:e1c633a9-2647-51a9-b887-e85157d51353", "id": "CVE-2025-57822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.16 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:e6bf7da9-671f-5138-b1c7-2e1946ff8baa", "id": "CVE-2025-59471", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.16 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:80c76291-d501-5793-9fff-1b09f6d09b6b", "id": "CVE-2025-59472", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.16 of @next/plugin-storybook. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat..." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:22d98e92-2b71-5656-aea2-94917168c427", "id": "CVE-2025-67779", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.16 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:76c36747-df21-5b0c-9054-ab49fd51fc25", "id": "CVE-2026-27980", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.16 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:ea0d6731-e464-5459-a3fd-2a25ddaf0ee1", "id": "CVE-2026-29057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.16 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:1757ca4b-6c01-5e3a-9221-f67cce884c28", "id": "CVE-2026-44572", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.16 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:773f90b8-97b2-5e27-80d7-5f6593b9b929", "id": "CVE-2026-44573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.16 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:a5b93bea-7337-512e-91f9-06e3bb8f497f", "id": "CVE-2026-44577", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.16 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:1e9547e2-44db-57c0-a776-c8a98e1b2415", "id": "CVE-2026-44578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.16 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:75340a51-a5de-5512-843f-ad04c7600d37", "id": "CVE-2026-44580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.16 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:6bfa7c4a-167b-5462-8339-b2ec78bcabac", "id": "CVE-2026-44581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.16 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:1bb44736-e36f-5847-ae90-a05924a69b1e", "id": "CVE-2026-44582", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.16 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:4c7f2053-112a-545b-a0f7-e7d6d830869c", "id": "CVE-2026-64641", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.16 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:7d4df6d1-aa49-5991-b49e-7c10037a275f", "id": "CVE-2026-64643", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.16 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:cd7e054f-171a-5d87-8bd2-3357287968db", "id": "CVE-2026-64645", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.16 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:e2dbb778-3c15-50e8-b686-aac0b9f88f4a", "id": "CVE-2026-64646", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.16 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:546366ee-1816-5e63-b361-1d6a4e42cf4b", "id": "CVE-2026-64647", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.16 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:6d9dc687-773c-5d84-836c-c5ac924a5d84", "id": "CVE-2026-64648", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64648 is fixed in version 13.5.11-tuxcare.16 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:4ebc3394-e300-532e-a976-51c99287524a", "id": "GHSA-5j59-xgg2-r9c4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.16 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:87537d06-1ac4-5069-919d-accc148eacb8", "id": "GHSA-8h8q-6873-q5fj", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.16 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:1488dda5-4306-5172-8137-24220d91934f", "id": "GHSA-h25m-26qc-wcjf", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.16 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:a476c478-a068-5570-9068-92e1675d30cb", "id": "GHSA-mwv6-3258-q52c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.16 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:31f04f23-25c7-5d8a-ad01-9715246df18e", "id": "GHSA-q4gf-8mx6-v5v3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.16 of @next/plugin-storybook." }, "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.16" } ] }