{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a6f75536-21d2-5944-99ef-8ea5c766a824", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15", "type": "library", "name": "create-next-app", "version": "13.5.11-tuxcare.15", "purl": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:04b1e9f8-f476-574d-871b-56e66225342f", "id": "AIKIDO-2024-10173", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.15 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:3d40dd3b-ab10-5595-af68-b9bb2f1ad0a9", "id": "AIKIDO-2025-10936", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.15 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:fead62a6-af5b-5ad4-91d8-d9856f4a8777", "id": "CVE-2024-34351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.15 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:41c8775c-7df6-59b3-bbef-5049848be8c9", "id": "CVE-2024-47831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.15 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:130b9f8e-3c6c-5ddf-b427-3809a2fc58aa", "id": "CVE-2024-51479", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.15 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:2a12b907-ae11-524e-8aae-ac5b88ebb651", "id": "CVE-2025-32421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.15 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:737bb669-f533-561e-aa42-9d8aeba45bce", "id": "CVE-2025-48068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.15 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:333b3e98-f6e8-5a3c-b36c-53fc437a757e", "id": "CVE-2025-55173", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.15 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:5f01d761-ff56-5399-93ff-d7e3b3010181", "id": "CVE-2025-55183", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55183 affects version 13.5.11-tuxcare.15 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:99d7dc28-6607-55dd-a2d7-7d5e260ee423", "id": "CVE-2025-55184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.15 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:6cbacb83-5f46-5b2b-922b-ebd24883ae85", "id": "CVE-2025-57752", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.15 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:43eba081-be67-5cdb-a856-6f804c545ae0", "id": "CVE-2025-57822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.15 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:c46a5987-8322-5aa5-b270-47210b7cd721", "id": "CVE-2025-59471", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.15 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:7fab8bd6-1512-530a-a261-84baa6aad5a3", "id": "CVE-2025-59472", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.15 of create-next-app. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat..." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:97796b74-8a3a-589b-86bf-fa12abe2843a", "id": "CVE-2025-67779", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.15 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:da0dfcff-1581-5209-9436-f22ddc9ae16f", "id": "CVE-2026-27980", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.15 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:ac8e812b-f4ba-56de-aba5-c1640a9bfeed", "id": "CVE-2026-29057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.15 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:87f575a3-2955-590c-a173-a19044ae426a", "id": "CVE-2026-44572", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.15 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:b65ad6a7-dcee-5ccb-b091-3f1b1b8e5d83", "id": "CVE-2026-44573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.15 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:0aa7e738-cf6e-5a1a-bf99-7ca0a7a0d72e", "id": "CVE-2026-44577", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.15 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:7bc15eaa-0e12-5b97-b249-2b0eb648b1c6", "id": "CVE-2026-44578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.15 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:b832866e-b925-584e-ace2-e25a39d5945c", "id": "CVE-2026-44580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.15 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:e6f569c0-b0e5-5434-b304-0638c53bf499", "id": "CVE-2026-44581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.15 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:2c7bd85b-89a6-5627-a988-cef3b60bad32", "id": "CVE-2026-44582", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.15 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:4ddb8800-180d-57a4-ae94-ca5b58166451", "id": "CVE-2026-64641", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.15 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:1dbecbfd-a8d1-5868-b334-c3a84610eb32", "id": "CVE-2026-64643", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.15 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:d7de9914-e06d-58a0-a305-7ed8abb450e3", "id": "CVE-2026-64645", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.15 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:d83c7d6c-32d0-5f7f-bbd1-c69ed34d687e", "id": "CVE-2026-64646", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.15 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:6cb980c6-c02d-5873-83d1-42eeda7ae93a", "id": "CVE-2026-64647", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.15 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:43fb2d51-72d1-5a19-b99a-0a52d70e03fd", "id": "CVE-2026-64648", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64648 affects version 13.5.11-tuxcare.15 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:17eaf99c-fe20-5e4e-96db-7221ccb41fa6", "id": "GHSA-5j59-xgg2-r9c4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.15 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:bb795d4e-de6b-5140-afe0-81ec47166546", "id": "GHSA-8h8q-6873-q5fj", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.15 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:1b775611-a6f8-5d03-b5da-cb8b6c26ad26", "id": "GHSA-h25m-26qc-wcjf", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.15 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:458df3c9-c8b8-589e-b0c5-58320962b456", "id": "GHSA-mwv6-3258-q52c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.15 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:5e65b8a6-3271-5967-8492-957604160f33", "id": "GHSA-q4gf-8mx6-v5v3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.15 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] } ], "dependencies": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.15" } ] }