{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:743f2397-d59f-51ea-8e47-d6d6395e9404", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@next/codemod", "purl": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18", "type": "library", "bom-ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18", "version": "13.5.11-tuxcare.18", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "AIKIDO-2024-10173", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:70cae010-c444-587a-9b0f-a0db75de3508", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } }, { "id": "AIKIDO-2025-10936", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:fa993cbd-2a92-5428-99aa-492593780a0e", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } }, { "id": "CVE-2024-34351", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:d48a66dd-9f55-523d-aa75-48093392f9af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } }, { "id": "CVE-2024-47831", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:f5dac39a-2b22-5f4f-85a1-1cbdccd27272", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } }, { "id": "CVE-2024-51479", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:ed66bcf3-196d-54c0-b0df-80ece1f49678", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } }, { "id": "CVE-2025-32421", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:6738b2ce-772e-5e85-ad97-f39f931ac6fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } }, { "id": "CVE-2025-48068", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:b75fe56e-4018-5b46-a267-689877a352fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } }, { "id": "CVE-2025-55173", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:2af28c36-12c9-58df-b418-5ac29a8772f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } }, { "id": "CVE-2025-55183", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:23d670b5-57ec-5b15-997f-fb435f686164", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55183 is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } }, { "id": "CVE-2025-55184", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:77704b51-840e-58dd-ad7e-ee6c5c82642f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } }, { "id": "CVE-2025-57752", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:28738439-181f-5a4e-a376-6a2f7477196b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } }, { "id": "CVE-2025-57822", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:9ea11999-745b-5c02-9624-c16f53d54886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } }, { "id": "CVE-2025-59471", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:f5079cca-3305-5e86-9690-d4e4bd031da3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } }, { "id": "CVE-2025-59472", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:1632865b-5bc7-57d3-83b9-69e58e08464c", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.18 of @next/codemod. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat...", "justification": "code_not_present" } }, { "id": "CVE-2025-67779", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:53247836-6709-5edf-969d-2ca9718e5e2b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } }, { "id": "CVE-2026-27980", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:fe9d425d-f0bb-5690-879d-f0b82d560a6d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } }, { "id": "CVE-2026-29057", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:84960a88-75e0-5674-96d1-2b80bbe58cc6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } }, { "id": "CVE-2026-44572", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:84467faa-61f7-5ad8-8a6d-8d03b7bbe0b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } }, { "id": "CVE-2026-44573", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:d0e7178d-4faa-5667-a5a3-a44d6aa705ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } }, { "id": "CVE-2026-44577", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:7e9ea327-0e35-54f2-86e7-4c69ad6da67d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } }, { "id": "CVE-2026-44578", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:5c2282dd-3f4c-58ba-80c4-99499ff2d0c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } }, { "id": "CVE-2026-44580", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:a38db0b1-6312-525e-bdaf-0e54b6255716", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } }, { "id": "CVE-2026-44581", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:70325a41-abee-5d2f-8cac-5e6d3ff1354c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } }, { "id": "CVE-2026-44582", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:78bc3092-6120-524c-ad9b-c8b7b7f4f4b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } }, { "id": "CVE-2026-64641", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:33140eea-b608-590b-80c3-7bdd08bd78c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } }, { "id": "CVE-2026-64643", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:f03b07a5-81fa-5d95-ada7-c8d3007fe392", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } }, { "id": "CVE-2026-64645", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:89d48e0d-ec1b-5051-9598-9782040b5e7f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } }, { "id": "CVE-2026-64646", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:04edcaaf-36e0-5c06-b251-9e95ef4ca630", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } }, { "id": "CVE-2026-64647", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:44c4b7e3-6f03-5fd7-baf0-316106d2a3ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } }, { "id": "CVE-2026-64648", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:22cfc3d5-d26a-5ee1-a75e-1526748a14da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64648 is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } }, { "id": "CVE-2026-75604", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:7fd1cbac-71e9-5415-9fea-c72175a17295", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-75604 is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } }, { "id": "GHSA-2xp9-vwfh-vxw4", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:f49fbf20-4b09-5424-9593-2e66ffdbc100", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-2xp9-vwfh-vxw4 is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } }, { "id": "GHSA-5j59-xgg2-r9c4", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:bb609a14-7408-5510-8024-0d39fd333b98", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } }, { "id": "GHSA-8h8q-6873-q5fj", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:8d5262a0-833d-5b16-bcc3-31234e7deb8b", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } }, { "id": "GHSA-h25m-26qc-wcjf", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:4e7a9cd4-c9f0-5b6a-9762-c0e2b7210f5d", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } }, { "id": "GHSA-mwv6-3258-q52c", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:d0f430f3-1787-507e-a697-d016ae72d24c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } }, { "id": "GHSA-q4gf-8mx6-v5v3", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:d5ca54c0-17e3-5e3f-8337-4aa7db21e1c2", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.18 of @next/codemod." } } ], "dependencies": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.18" } ] }