{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:3ab9eca2-9574-5282-8969-4798cb52c10e", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16", "type": "library", "name": "create-next-app", "version": "13.5.11-tuxcare.16", "purl": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:1e062fc2-4342-51b1-bbb8-ba5bc94ff71c", "id": "AIKIDO-2024-10173", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.16 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:a3f712d4-c71b-5d6c-bbea-53503c41612b", "id": "AIKIDO-2025-10936", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.16 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:a3195979-a3e9-53ec-a322-c44ac716183e", "id": "CVE-2024-34351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.16 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:a567d5b7-b921-5a6e-bc13-21d23e1cda62", "id": "CVE-2024-47831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.16 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:6245b1bb-1544-577a-95b8-3e861b7ef94e", "id": "CVE-2024-51479", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.16 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:4dec461b-e777-509a-b7d4-332ff94faa7c", "id": "CVE-2025-32421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.16 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:c898806b-17ed-5b4d-a8ac-2fcb6aa118bb", "id": "CVE-2025-48068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.16 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:fe43d310-8667-5a05-a6d8-41e019ecff7d", "id": "CVE-2025-55173", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.16 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:c5e48898-3733-5665-b345-518062bad5aa", "id": "CVE-2025-55183", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55183 is fixed in version 13.5.11-tuxcare.16 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:8b0ef238-802a-5fc8-9152-9794840b1d42", "id": "CVE-2025-55184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.16 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:4e5da328-6888-5a85-ad63-697b0f74a117", "id": "CVE-2025-57752", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.16 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:60b38151-62f5-5f06-a7fb-e967e0463278", "id": "CVE-2025-57822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.16 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:b0c6bcf6-fd7e-5cc4-b236-56c30d0895bf", "id": "CVE-2025-59471", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.16 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:058928be-c544-514a-b959-d219a7a81789", "id": "CVE-2025-59472", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.16 of create-next-app. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat..." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:eb77c154-5345-506d-a8c5-5ca554065f85", "id": "CVE-2025-67779", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.16 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:f81090e7-a2cd-5b09-9256-82e02281bb36", "id": "CVE-2026-27980", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.16 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:b39b405c-b5d6-5aac-95d2-5e4fa583ad5f", "id": "CVE-2026-29057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.16 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:a2b80411-1d43-5199-9b68-291957086f57", "id": "CVE-2026-44572", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.16 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:eaa8478e-e250-5aea-8a1d-3a3b568c0349", "id": "CVE-2026-44573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.16 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:cdbd3a18-5b6f-5119-aed9-124b5d7d3141", "id": "CVE-2026-44577", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.16 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:0ce95506-6cfa-5abc-9248-96a8b9d6ec43", "id": "CVE-2026-44578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.16 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:d6109998-ab9e-55ff-8aff-0af42707e6bd", "id": "CVE-2026-44580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.16 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:88ee1041-564a-578f-9313-7673572331f5", "id": "CVE-2026-44581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.16 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:5c95bbd1-7f92-55c6-839b-28433c9c5282", "id": "CVE-2026-44582", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.16 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:04e4efd1-d876-59e3-aa53-f9873774b454", "id": "CVE-2026-64641", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.16 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:d510607c-537b-56f6-a2fb-ba8ad0d26e63", "id": "CVE-2026-64643", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.16 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:64bac0a7-cee1-5a0e-b80c-88cd62a87ac0", "id": "CVE-2026-64645", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.16 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:1154b520-28a1-505e-8b92-1a4d219b17a5", "id": "CVE-2026-64646", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.16 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:04bb598d-a129-5960-a6ba-7de9f8a1da2a", "id": "CVE-2026-64647", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.16 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:456bbe57-9572-535e-83a6-0f6c000173f4", "id": "CVE-2026-64648", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64648 is fixed in version 13.5.11-tuxcare.16 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:b405f7f1-4e76-57fd-85e0-317db7cf2fa3", "id": "GHSA-5j59-xgg2-r9c4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.16 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:71298457-b2ca-563b-b57a-d6e16e29e50b", "id": "GHSA-8h8q-6873-q5fj", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.16 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:64f77ca3-16e2-5986-a0bd-017e68b5d038", "id": "GHSA-h25m-26qc-wcjf", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.16 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:8cd0d162-5e10-550a-92b9-9e283f7b9bff", "id": "GHSA-mwv6-3258-q52c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.16 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:f6c20997-9ff6-5663-89aa-b6fc0cb97836", "id": "GHSA-q4gf-8mx6-v5v3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.16 of create-next-app." }, "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] } ], "dependencies": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.16" } ] }