{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:2e7af70c-8fdd-5e8b-8099-5f7b52f462c5", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "axios", "purl": "pkg:npm/axios@1.7.7-tuxcare.7", "type": "library", "bom-ref": "pkg:npm/axios@1.7.7-tuxcare.7", "version": "1.7.7-tuxcare.7", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-27152", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:6b1a6c0e-0d77-5782-9467-21385d771ccf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-27152 is fixed in version 1.7.7-tuxcare.7 of axios." } }, { "id": "CVE-2025-58754", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:e1054b56-969d-5fd9-831a-67c5de7a9ed8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58754 is fixed in version 1.7.7-tuxcare.7 of axios." } }, { "id": "CVE-2025-62718", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:df693f9b-2a28-5b67-86f8-57f1d389e3e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-62718 is fixed in version 1.7.7-tuxcare.7 of axios." } }, { "id": "CVE-2026-101902", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:b53ed8ee-5675-53ae-b573-544712c7c742", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101902 is fixed in version 1.7.7-tuxcare.7 of axios." } }, { "id": "CVE-2026-101904", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:854a1463-e2a7-54cf-8739-71d82eea96cc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101904 is fixed in version 1.7.7-tuxcare.7 of axios." } }, { "id": "CVE-2026-101908", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:85fd5850-0f2c-5d52-a757-0f1fff4f93c7", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-101908 does not affect version 1.7.7-tuxcare.7 of axios. not_affected \u2014 Target version 1.7.7-tuxcare.1 is NOT AFFECTED by CVE-2026-101908. The vulnerable code pattern (passing fetchOptions as the second argument to fetch()) does not exist in this version. The target code at lib/adapters/fetch.js:272 calls `fetch(request)` with no second argument, preventing inherited prototype-polluted properties from overriding the Request's safe headers. The vulnerability was int...", "justification": "code_not_reachable" } }, { "id": "CVE-2026-25639", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:8ff2a108-eecd-5a14-81de-20aad1daaa68", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25639 is fixed in version 1.7.7-tuxcare.7 of axios." } }, { "id": "CVE-2026-40175", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:5857551e-1909-52d6-84c9-46ab11ed50ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40175 is fixed in version 1.7.7-tuxcare.7 of axios." } }, { "id": "CVE-2026-42033", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:05a081ab-9f87-5715-bc48-0e55e9da613d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42033 is fixed in version 1.7.7-tuxcare.7 of axios." } }, { "id": "CVE-2026-42034", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:08bef710-e117-5e22-8153-1ba5998b241e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42034 is fixed in version 1.7.7-tuxcare.7 of axios." } }, { "id": "CVE-2026-42035", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:d896e6d4-47d0-52b2-9e24-6e4f2e1ad160", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42035 is fixed in version 1.7.7-tuxcare.7 of axios." } }, { "id": "CVE-2026-42036", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:36a786e5-7205-5992-b2ca-222da3f4e98b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42036 is fixed in version 1.7.7-tuxcare.7 of axios." } }, { "id": "CVE-2026-42037", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:1945bd3e-d519-50d5-9eb2-f8b90a1d2bb3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42037 is fixed in version 1.7.7-tuxcare.7 of axios." } }, { "id": "CVE-2026-42038", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:35a44f02-11e5-5fc7-85b2-feb79f86ffea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42038 is fixed in version 1.7.7-tuxcare.7 of axios." } }, { "id": "CVE-2026-42039", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:ddccf913-d60e-5c32-8a82-de50ad07e2ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42039 is fixed in version 1.7.7-tuxcare.7 of axios." } }, { "id": "CVE-2026-42040", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:2e44c211-d3a2-53ed-a1fd-b9846fd85973", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42040 is fixed in version 1.7.7-tuxcare.7 of axios." } }, { "id": "CVE-2026-42041", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:57832abe-10f9-56db-90dd-8e2e977a67c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42041 is fixed in version 1.7.7-tuxcare.7 of axios." } }, { "id": "CVE-2026-42042", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:39b6a9d2-b063-584a-a209-35f17eeeb888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42042 is fixed in version 1.7.7-tuxcare.7 of axios." } }, { "id": "CVE-2026-42043", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:7f09d040-a1dc-5f8a-b403-ba8410ef5e2f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42043 is fixed in version 1.7.7-tuxcare.7 of axios." } }, { "id": "CVE-2026-42044", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:fc8e7596-4178-55db-81f3-62f34d7a4ec2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42044 is fixed in version 1.7.7-tuxcare.7 of axios." } }, { "id": "CVE-2026-42264", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:ae9d41db-f87b-55ff-9d2d-2f236c31b69b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42264 is fixed in version 1.7.7-tuxcare.7 of axios." } }, { "id": "CVE-2026-44486", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:7b53304b-29ee-5573-b256-be90ebd34471", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44486 is fixed in version 1.7.7-tuxcare.7 of axios." } }, { "id": "CVE-2026-44487", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:c000de55-20b3-57b0-a558-ad5a470c7d4e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44487 is fixed in version 1.7.7-tuxcare.7 of axios." } }, { "id": "CVE-2026-44488", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:080dd8f8-6550-568f-9da7-e94da7f14204", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44488 is fixed in version 1.7.7-tuxcare.7 of axios." } }, { "id": "CVE-2026-44490", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:4de8c060-02cf-5ac6-978d-ef8bf9fe410c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44490 is fixed in version 1.7.7-tuxcare.7 of axios." } }, { "id": "CVE-2026-44492", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:71474502-6d6b-5782-8f77-d919a17f7ec2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44492 affects version 1.7.7-tuxcare.7 of axios." } }, { "id": "CVE-2026-44494", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:d49c3773-1d3d-521c-934f-08ffe24c5b2b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44494 is fixed in version 1.7.7-tuxcare.7 of axios." } }, { "id": "CVE-2026-44495", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:ff3c3f06-76d0-543e-91b0-1f11884130f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44495 is fixed in version 1.7.7-tuxcare.7 of axios." } }, { "id": "CVE-2026-44496", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:644b3a59-62cd-5e23-9590-7b26f22d226c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44496 is fixed in version 1.7.7-tuxcare.7 of axios." } }, { "id": "CVE-2026-67312", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:2dfedcb0-6bef-5a79-b3cb-1eb9b6c99619", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67312 is fixed in version 1.7.7-tuxcare.7 of axios." } }, { "id": "CVE-2026-67313", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:85cf136a-5d07-5bee-8e36-492e10eca5cf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67313 is fixed in version 1.7.7-tuxcare.7 of axios." } }, { "id": "CVE-2026-67316", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:fa1a6a50-86b8-5e06-838d-5edc0f47ca5c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67316 is fixed in version 1.7.7-tuxcare.7 of axios." } }, { "id": "CVE-2026-67317", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:398340f8-e187-5fa4-bd2e-9539d56c6c9a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67317 is fixed in version 1.7.7-tuxcare.7 of axios." } }, { "id": "CVE-2026-67319", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:5d0b0f1a-b69d-56bf-9c5a-1f89d69ef473", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67319 is fixed in version 1.7.7-tuxcare.7 of axios." } }, { "id": "GHSA-39j5-w47m-2gmv", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:0c8e0304-530d-5e1b-bb09-6c77353d068a", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-39j5-w47m-2gmv is a false positive for axios 1.7.7-tuxcare.7." } }, { "id": "GHSA-42h9-826w-cgv3", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:45d4a590-72e7-56e1-8f02-a12a74a64b27", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-42h9-826w-cgv3 affects version 1.7.7-tuxcare.7 of axios." } }, { "id": "GHSA-4ww2-rjh2-xpv9", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:a8f99c17-7825-5025-b40c-dc03b27de887", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-4ww2-rjh2-xpv9 is a false positive for axios 1.7.7-tuxcare.7." } }, { "id": "GHSA-6hqm-hm2v-3p2p", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:34d1e7ad-39ad-560b-aeb6-2665d433bff7", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-6hqm-hm2v-3p2p is a false positive for axios 1.7.7-tuxcare.7." } }, { "id": "GHSA-7q8q-rj6j-mhjq", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:46bb058a-9fdc-5bf2-8341-04dc89f6b67a", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-7q8q-rj6j-mhjq affects version 1.7.7-tuxcare.7 of axios." } }, { "id": "GHSA-9wx3-p993-35vp", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:ae7ab32a-7db9-56e7-9bef-d8decc645b93", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-9wx3-p993-35vp is a false positive for axios 1.7.7-tuxcare.7." } }, { "id": "GHSA-fq2j-3j99-rx65", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:fb282a6b-3687-5ab5-9b29-a9fd5f9135d3", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-fq2j-3j99-rx65 is a false positive for axios 1.7.7-tuxcare.7." } }, { "id": "GHSA-jqh4-m9w3-8hp9", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:26d57f11-c41d-5f54-aa81-b7892ea5002e", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-jqh4-m9w3-8hp9 affects version 1.7.7-tuxcare.7 of axios." } }, { "id": "GHSA-mmx7-hfxf-jppx", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:8f28fa48-e275-5e2b-8922-2a5ab53a04a1", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mmx7-hfxf-jppx is fixed in version 1.7.7-tuxcare.7 of axios." } }, { "id": "GHSA-pmv8-rq9r-6j72", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ], "bom-ref": "urn:uuid:6bc61723-7201-5da1-9c3c-d81ce1ce19ba", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-pmv8-rq9r-6j72 affects version 1.7.7-tuxcare.7 of axios." } } ], "dependencies": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.7" } ] }