{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:5d04962c-1bf1-51b6-bae9-6567b39ba6f6", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/next@13.5.11-tuxcare.15", "type": "library", "name": "next", "version": "13.5.11-tuxcare.15", "purl": "pkg:npm/next@13.5.11-tuxcare.15" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:1642140f-2a81-50eb-8967-92332d35f73d", "id": "AIKIDO-2024-10173", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.15 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:8ea98b6e-8a53-573c-b846-c2f887814b2b", "id": "AIKIDO-2025-10936", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.15 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:3124c8ee-b821-5ba9-87ed-b441d89f6036", "id": "CVE-2024-34351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.15 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:5644a253-648f-5395-a5ce-72640a2df38b", "id": "CVE-2024-47831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.15 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:00056148-fc0a-579e-af74-eb2a8940a313", "id": "CVE-2024-51479", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.15 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:583babe4-0f21-56ea-b1c3-1f9fec39c0db", "id": "CVE-2025-32421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.15 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:0bd5f42b-956c-5f0d-af91-bd6b8c719463", "id": "CVE-2025-48068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.15 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:70c8f9d8-86fd-540a-9e85-10bc2bda5704", "id": "CVE-2025-55173", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.15 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:21982687-39ad-564d-9d4b-c48628d1b7d1", "id": "CVE-2025-55183", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55183 affects version 13.5.11-tuxcare.15 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:ed22a3cf-e60f-5fe6-a644-11fb484fe415", "id": "CVE-2025-55184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.15 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:d91ac5e9-2ca7-518a-8d2b-e049ae8daecc", "id": "CVE-2025-57752", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.15 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:d0dbe017-3aa3-54f6-b08d-e5afc274bb7e", "id": "CVE-2025-57822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.15 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:722156ce-8b39-575b-b7e7-183376484c3d", "id": "CVE-2025-59471", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.15 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:10469508-d7a2-5e68-a0e3-56a720d71bb4", "id": "CVE-2025-59472", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.15 of next. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat..." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:b9933517-bb39-5c7f-a50b-11354ed7e70a", "id": "CVE-2025-67779", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.15 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:2961f4fd-21b5-5bcb-8ece-7fee286683d4", "id": "CVE-2026-27980", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.15 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:f121b88e-9e1c-5d9e-b651-86494f05c857", "id": "CVE-2026-29057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.15 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:f6d5c120-7721-5db1-bf6c-f461a74f9caf", "id": "CVE-2026-44572", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.15 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:22a829e6-f543-5a0d-8430-8890f40daa53", "id": "CVE-2026-44573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.15 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:3d140c44-1963-559b-a382-e0ad08f70d52", "id": "CVE-2026-44577", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.15 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:0f80ee3d-23d6-5fbc-b520-898fd168ee6e", "id": "CVE-2026-44578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.15 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:45525927-ac20-53e5-9e58-1b24ff0a9fae", "id": "CVE-2026-44580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.15 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:a91e442b-f152-5afa-a75f-5ec9a8de7c8e", "id": "CVE-2026-44581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.15 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:bf64329b-d502-5a0d-a0cf-21fd669c468d", "id": "CVE-2026-44582", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.15 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:88b1e3ea-b2dd-5efe-a9d2-d52f4fd5bf45", "id": "CVE-2026-64641", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.15 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:05b8fb9c-7dea-5960-8793-f70426323bf5", "id": "CVE-2026-64643", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.15 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:fd52ca9f-dfe3-5fde-95ae-f3ba70d87e3d", "id": "CVE-2026-64645", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.15 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:ac83a250-860b-5c3b-89bd-68b9602e821b", "id": "CVE-2026-64646", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.15 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:7aa7907c-6093-5424-bd8a-e4614714477b", "id": "CVE-2026-64647", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.15 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:ab842929-7080-5f08-aa30-7afb98993c34", "id": "CVE-2026-64648", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64648 affects version 13.5.11-tuxcare.15 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:6fcb06fa-ffea-5015-92ba-929da3801af7", "id": "GHSA-5j59-xgg2-r9c4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.15 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:de70e0b8-6c7e-5133-a02f-2c8d63ac67d0", "id": "GHSA-8h8q-6873-q5fj", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.15 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:799cde46-95b1-5cb0-aa65-c993e9e89a71", "id": "GHSA-h25m-26qc-wcjf", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.15 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:0cbbfef3-c9ef-5296-a03f-2af35d50f0fa", "id": "GHSA-mwv6-3258-q52c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.15 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:17ab0a75-95b5-59d3-b3a9-92f9c4bb4c90", "id": "GHSA-q4gf-8mx6-v5v3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.15 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] } ], "dependencies": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.15" } ] }