{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:6d7c942b-3c84-5409-bac4-48ac92d4d978", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16", "type": "library", "name": "@next/third-parties", "version": "13.5.11-tuxcare.16", "purl": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:0e9746df-90e9-5124-b1a9-ebf8a1f48a9a", "id": "AIKIDO-2024-10173", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.16 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:072351b4-f223-59de-a703-b309099d5d82", "id": "AIKIDO-2025-10936", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.16 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:77708af4-1dec-50a0-bc17-ec739b377551", "id": "CVE-2024-34351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.16 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:c5ff5f3d-29fc-59bb-a17a-291643d85271", "id": "CVE-2024-47831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.16 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:af318826-eaff-5916-8a78-5d84bfc4e405", "id": "CVE-2024-51479", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.16 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:83f99bab-ff03-5924-8fb8-aeb6494bea26", "id": "CVE-2025-32421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.16 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:eb1c7def-25e5-5c1e-a07f-0cdec22ba37b", "id": "CVE-2025-48068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.16 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:e7b9aed1-43e9-5e1f-9385-777a1f6f9605", "id": "CVE-2025-55173", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.16 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:7021f6fd-6bfb-5420-8def-8b8402bf92e2", "id": "CVE-2025-55183", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55183 is fixed in version 13.5.11-tuxcare.16 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:b623f884-e4e2-5256-9e18-2cc59dea2e08", "id": "CVE-2025-55184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.16 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:04cd092b-96ff-5be8-a22b-7c8b7401ca90", "id": "CVE-2025-57752", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.16 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:2461120a-1fa0-5515-9639-d251e9747558", "id": "CVE-2025-57822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.16 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:b7113cae-0baa-5d68-841c-eaa8268b6b40", "id": "CVE-2025-59471", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.16 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:c112d1b7-4b81-543d-98e0-4dbd93b42025", "id": "CVE-2025-59472", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.16 of @next/third-parties. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat..." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:92fbd7b6-8591-5a34-b8d8-c4162173f157", "id": "CVE-2025-67779", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.16 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:4a1d0bbe-bc07-5226-a4b2-36f6e9f7b35f", "id": "CVE-2026-27980", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.16 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:623dda8e-1aea-5561-97f4-42a627f0ebe0", "id": "CVE-2026-29057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.16 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:90243d3c-8878-5f69-9590-6ae36ee00a71", "id": "CVE-2026-44572", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.16 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:1485e548-f3ec-50e6-beda-c0c59b60ab5b", "id": "CVE-2026-44573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.16 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:f74f0dca-09c6-5d66-8e0d-4057e4617081", "id": "CVE-2026-44577", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.16 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:168c028e-ae6a-5642-af7a-61d73461dbc0", "id": "CVE-2026-44578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.16 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:34cc4190-8267-57fd-8f24-3daaaebd5575", "id": "CVE-2026-44580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.16 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:a09c1a48-a679-55a3-ad29-bcd2597b706d", "id": "CVE-2026-44581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.16 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:efab819c-584b-5e7c-8102-403a6322d3f9", "id": "CVE-2026-44582", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.16 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:e01f7970-63b5-5945-a070-a4d302408049", "id": "CVE-2026-64641", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.16 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:02a52b0c-ffd2-521a-8289-08ff62b52a71", "id": "CVE-2026-64643", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.16 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:de0adaa8-0881-5a40-ba3d-3976090f6484", "id": "CVE-2026-64645", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.16 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:8a14d61f-7959-56de-97e1-fa6978032943", "id": "CVE-2026-64646", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.16 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:139b86c7-8291-563d-b949-60bf121b6682", "id": "CVE-2026-64647", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.16 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:7e51447f-75f1-5c1b-8562-aa18bba4daf6", "id": "CVE-2026-64648", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64648 is fixed in version 13.5.11-tuxcare.16 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:5a19c601-cfb6-5168-96d6-f20682a9ce2b", "id": "GHSA-5j59-xgg2-r9c4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.16 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:baadb04f-c4e5-5992-a908-982da022c127", "id": "GHSA-8h8q-6873-q5fj", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.16 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:e3d5f309-5b48-5727-a407-4c58943335ad", "id": "GHSA-h25m-26qc-wcjf", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.16 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:9ab88e7a-c7d0-5bd2-9c31-c92ba8015c49", "id": "GHSA-mwv6-3258-q52c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.16 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:cc8513ff-2cd3-5584-94c6-84c30b3fed26", "id": "GHSA-q4gf-8mx6-v5v3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.16 of @next/third-parties." }, "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.16" } ] }