{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8ca65087-e8d7-520f-a7d9-6a7edd665298", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/next@13.5.11-tuxcare.16", "type": "library", "name": "next", "version": "13.5.11-tuxcare.16", "purl": "pkg:npm/next@13.5.11-tuxcare.16" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:1c07570d-c38a-5228-96a3-1e39cf85d519", "id": "AIKIDO-2024-10173", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.16 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:ff2606b6-681a-5aa0-a62c-c7a6fa5f4abc", "id": "AIKIDO-2025-10936", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.16 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:9f938ea0-cd3e-5479-9f72-f83e0daa169f", "id": "CVE-2024-34351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.16 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:15d0f851-abf5-5aa9-a55f-0626753a820e", "id": "CVE-2024-47831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.16 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:ec994429-ac5c-57fe-b4e8-91c597f32075", "id": "CVE-2024-51479", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.16 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:4c9c5654-ee2e-5a0f-a7d0-bdeeae056b44", "id": "CVE-2025-32421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.16 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:6964ceaa-731f-5e8b-8bf8-82a9707204d9", "id": "CVE-2025-48068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.16 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:ea821398-f679-5998-b3a0-5980279384ae", "id": "CVE-2025-55173", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.16 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:10cb6b2a-3dc5-50a8-9b04-264d41248988", "id": "CVE-2025-55183", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55183 is fixed in version 13.5.11-tuxcare.16 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:0b86fa0f-ff7f-5671-9dd1-54565f9f557b", "id": "CVE-2025-55184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.16 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:6717f209-9ca8-586e-a7b6-6beff7dc011d", "id": "CVE-2025-57752", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.16 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:1fafeb53-bf07-50d9-97e5-14700b77f902", "id": "CVE-2025-57822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.16 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:7b56c5f9-5b64-5d96-ac98-feb81894d39f", "id": "CVE-2025-59471", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.16 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:849c0ecc-df5e-5109-adf4-d64a10a5470b", "id": "CVE-2025-59472", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.16 of next. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat..." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:04b8f5c6-f4b8-518d-9935-f5635a89f8ec", "id": "CVE-2025-67779", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.16 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:97550a9b-6f6a-55da-8b5c-db3f0e554d43", "id": "CVE-2026-27980", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.16 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:9c6d1efc-ed1d-5b60-9d0e-f5e027b13f6d", "id": "CVE-2026-29057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.16 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:60a74503-1b3c-5696-8b3b-6e9b9ea9bac9", "id": "CVE-2026-44572", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.16 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:59e37a57-29b8-56cc-992b-e76b4b25960d", "id": "CVE-2026-44573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.16 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:523e369f-0bc5-5230-9ea8-1e00826d7ed6", "id": "CVE-2026-44577", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.16 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:e123f626-2709-5991-9084-25c8d1b1cc86", "id": "CVE-2026-44578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.16 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:11487d48-8191-557c-a389-ab497f90137e", "id": "CVE-2026-44580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.16 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:698bf903-0331-5182-b61d-d89edbf763e3", "id": "CVE-2026-44581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.16 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:3731d972-7daa-5b56-a2ac-145ed220f724", "id": "CVE-2026-44582", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.16 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:41e555c2-8589-5890-b147-e759deaadd18", "id": "CVE-2026-64641", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.16 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:a103eae5-5930-5e78-957b-8eb4cf2c25b9", "id": "CVE-2026-64643", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.16 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:a02fa2a9-90b6-56c6-a46a-440f0c81db15", "id": "CVE-2026-64645", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.16 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:760583f8-a3f1-5437-aabe-407990db0197", "id": "CVE-2026-64646", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.16 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:908ceca5-34e2-5749-89f7-495c2a741cbe", "id": "CVE-2026-64647", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.16 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:13848e15-9d32-5144-9022-eacd2690548a", "id": "CVE-2026-64648", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64648 is fixed in version 13.5.11-tuxcare.16 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:a3ae1696-150d-5214-9938-1ffe91f0e82a", "id": "GHSA-5j59-xgg2-r9c4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.16 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:e24bc68c-7cf7-5daa-9541-24b59bd1179f", "id": "GHSA-8h8q-6873-q5fj", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.16 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:15aaf1a2-34d2-5932-b847-93f44cba61b3", "id": "GHSA-h25m-26qc-wcjf", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.16 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:ed519f44-3443-579b-b59c-0faf4d276275", "id": "GHSA-mwv6-3258-q52c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.16 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:78f92237-b88c-598c-a4ca-4737b4376735", "id": "GHSA-q4gf-8mx6-v5v3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.16 of next." }, "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] } ], "dependencies": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.16" } ] }