{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e417d269-3c39-520a-8b21-7c6ab1037885", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16", "type": "library", "name": "@next/polyfill-module", "version": "13.5.11-tuxcare.16", "purl": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:50bcc3a4-91c8-562a-ac2c-16c18dc07017", "id": "AIKIDO-2024-10173", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:1217f473-4944-5498-bd8a-988075352d9e", "id": "AIKIDO-2025-10936", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:2ffa4b49-643d-5b34-85ed-596de8aa728c", "id": "CVE-2024-34351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:c6a2e307-b8cd-5c13-813d-b5785901aa6e", "id": "CVE-2024-47831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:217a0099-9860-5df4-9d2e-07aa8016ab1d", "id": "CVE-2024-51479", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:d1536346-4067-5c25-ab2f-f0c6e373cc3c", "id": "CVE-2025-32421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:4808d73e-b3ec-5751-ba95-04ed015e7a82", "id": "CVE-2025-48068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:63f5f9cb-a39d-58aa-8df8-6580d293ab89", "id": "CVE-2025-55173", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:2b4135d8-36b5-56e2-8a05-5c176b6e1442", "id": "CVE-2025-55183", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55183 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:e30f9d29-5e0b-581d-8ec8-99f3ffe76cb2", "id": "CVE-2025-55184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:63e624b2-1053-5b7d-bda1-124f9e620e06", "id": "CVE-2025-57752", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:72abaef0-ce4d-507b-9b82-ad9e67769e4d", "id": "CVE-2025-57822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:17a7d033-17e0-552c-89d7-eea7510ccfb4", "id": "CVE-2025-59471", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:ae31988a-c323-5039-9056-ced186ef3109", "id": "CVE-2025-59472", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.16 of @next/polyfill-module. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat..." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:d55ade70-96c8-58dc-a581-378ed636761d", "id": "CVE-2025-67779", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:275207ad-fda4-535c-914f-a4ad0e93e24a", "id": "CVE-2026-27980", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:eb300fd3-4574-5f72-b447-af5d54483d3b", "id": "CVE-2026-29057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:713d4d54-19fa-5075-8c4f-effc637741eb", "id": "CVE-2026-44572", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:a068f8ad-c3dc-5ad2-b000-2c1281f627cb", "id": "CVE-2026-44573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:ee6aa98c-66dd-5047-b335-0f2f6500d592", "id": "CVE-2026-44577", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:a4b9d2c8-4feb-5615-9c17-84944ef2e1c5", "id": "CVE-2026-44578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:05033c89-bbaa-5aca-8793-4025a21c7bdc", "id": "CVE-2026-44580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:2548623b-3920-5ae4-b1e7-ab370c96c2a9", "id": "CVE-2026-44581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:30c85b73-2abb-5620-b709-9dfd4a6d99e8", "id": "CVE-2026-44582", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:9617b4c6-2382-5f8e-bf16-cec95cd46363", "id": "CVE-2026-64641", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:81c0da8a-b83f-5876-be92-f8d1b35c4e7a", "id": "CVE-2026-64643", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:afba4fb9-8f3a-5f94-9524-ae0caab900a5", "id": "CVE-2026-64645", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:256558b1-548b-5cac-a102-a9cc49840ab1", "id": "CVE-2026-64646", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:9ab10a61-e705-5e52-befc-6b2c205af632", "id": "CVE-2026-64647", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:12a08b88-b2ef-566c-9cba-94e58ffce969", "id": "CVE-2026-64648", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64648 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:5c138432-8e4b-5b28-a5cc-339cb77acb33", "id": "GHSA-5j59-xgg2-r9c4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:bf546d23-3dae-5bad-8429-1c393a902668", "id": "GHSA-8h8q-6873-q5fj", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:b6e9a090-53df-5c49-a466-96b5e59058f7", "id": "GHSA-h25m-26qc-wcjf", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:b0a97066-f44d-50cc-bcb9-a2f910707f23", "id": "GHSA-mwv6-3258-q52c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:998be3ff-a262-5711-825a-196242c64564", "id": "GHSA-q4gf-8mx6-v5v3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.16 of @next/polyfill-module." }, "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.16" } ] }