{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a0fe83dd-032c-5842-b115-ff3caac2e8b0", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@next/env", "purl": "pkg:npm/%40next/env@13.5.11-tuxcare.18", "type": "library", "bom-ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18", "version": "13.5.11-tuxcare.18", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "AIKIDO-2024-10173", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:c3a3257c-b1dc-5def-9214-47b17e6888b3", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.18 of @next/env." } }, { "id": "AIKIDO-2025-10936", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:238cd7b9-cda4-53a8-9e50-95b30911b71c", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.18 of @next/env." } }, { "id": "CVE-2024-34351", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:5914d41b-3724-57c4-b59c-b05f0300fdbd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.18 of @next/env." } }, { "id": "CVE-2024-47831", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:08009119-b129-5c32-bc4e-99531c372bc0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.18 of @next/env." } }, { "id": "CVE-2024-51479", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:dea6d8d9-442b-5bda-84c4-335cee3bc2e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.18 of @next/env." } }, { "id": "CVE-2025-32421", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:b860b60e-8be8-5a9b-bf79-a3accbe99628", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.18 of @next/env." } }, { "id": "CVE-2025-48068", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:04b1f86b-c347-5216-925c-c4497aaadeff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.18 of @next/env." } }, { "id": "CVE-2025-55173", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:3259b073-46b3-5771-a527-fd4962c76134", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.18 of @next/env." } }, { "id": "CVE-2025-55183", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:fdaeadbc-4cff-5a8e-9e28-226ad4c09e74", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55183 is fixed in version 13.5.11-tuxcare.18 of @next/env." } }, { "id": "CVE-2025-55184", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:cb94855e-aaae-5ee6-9653-81e03bf729dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.18 of @next/env." } }, { "id": "CVE-2025-57752", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:c1b505fc-74cf-5ac2-9d40-1478ff9b50cb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.18 of @next/env." } }, { "id": "CVE-2025-57822", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:784f6ee3-8fa7-52dc-9f3a-33401fa1d46d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.18 of @next/env." } }, { "id": "CVE-2025-59471", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:4e7b21d3-9695-5620-9f93-0ba407aa6bcb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.18 of @next/env." } }, { "id": "CVE-2025-59472", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:b5254273-12ee-5332-9238-1b06c8bc1e0a", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.18 of @next/env. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat...", "justification": "code_not_present" } }, { "id": "CVE-2025-67779", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:b75a4f14-b591-5f57-9570-0c48b7d44401", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.18 of @next/env." } }, { "id": "CVE-2026-27980", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:4fe3ffc8-62fb-5915-abbe-8b6cafadba95", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.18 of @next/env." } }, { "id": "CVE-2026-29057", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:3f8b469b-4415-5371-b818-ad4f782ed3e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.18 of @next/env." } }, { "id": "CVE-2026-44572", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:43f141bf-d444-5f77-a210-98f1c189ad10", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.18 of @next/env." } }, { "id": "CVE-2026-44573", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:6b1902d4-e385-5b9a-b06a-79242bb13e4a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.18 of @next/env." } }, { "id": "CVE-2026-44577", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:3431f6bc-4bec-53f3-ab71-9c14b7d02eef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.18 of @next/env." } }, { "id": "CVE-2026-44578", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:14c933e6-9d7f-56e9-a4b8-430e6e7bd707", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.18 of @next/env." } }, { "id": "CVE-2026-44580", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:2436fe26-9106-58f6-bfa4-8ddfb5cd89cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.18 of @next/env." } }, { "id": "CVE-2026-44581", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:76a714eb-eb11-5063-a423-401694809bf5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.18 of @next/env." } }, { "id": "CVE-2026-44582", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:6328517c-ba8e-5192-9223-d73cc5f328d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.18 of @next/env." } }, { "id": "CVE-2026-64641", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:a2d0f79b-a7be-5bde-8eab-e52d62711efe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.18 of @next/env." } }, { "id": "CVE-2026-64643", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:0c4182b3-1adb-5bb3-a66a-5926096cbe4b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.18 of @next/env." } }, { "id": "CVE-2026-64645", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:2c0ecf25-b0e8-56c4-923d-cfa2a6ac2bc4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.18 of @next/env." } }, { "id": "CVE-2026-64646", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:f2b907db-f4d2-57be-bd0a-68fb0426893e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.18 of @next/env." } }, { "id": "CVE-2026-64647", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:046eafc8-905f-5afc-8e48-a270614f9c7a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.18 of @next/env." } }, { "id": "CVE-2026-64648", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:0c8fc811-6a69-5650-96b4-331b1a20103f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64648 is fixed in version 13.5.11-tuxcare.18 of @next/env." } }, { "id": "CVE-2026-75604", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:0f48df4f-1b8d-5095-8aa0-ff1c9b2e5bee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-75604 is fixed in version 13.5.11-tuxcare.18 of @next/env." } }, { "id": "GHSA-2xp9-vwfh-vxw4", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:18b1db31-e2aa-52a9-a2e6-99a0072fdc39", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-2xp9-vwfh-vxw4 is fixed in version 13.5.11-tuxcare.18 of @next/env." } }, { "id": "GHSA-5j59-xgg2-r9c4", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:c1c11e1b-3bbb-53bf-bdeb-435e455aa02b", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.18 of @next/env." } }, { "id": "GHSA-8h8q-6873-q5fj", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:53e2492a-b8b6-53b6-9ef2-9996ec7983cc", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.18 of @next/env." } }, { "id": "GHSA-h25m-26qc-wcjf", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:d65cbeb4-970e-50f0-9a9b-15f37a7844b5", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.18 of @next/env." } }, { "id": "GHSA-mwv6-3258-q52c", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:ca7c76e8-9a2d-5267-80b9-6348a7ddce22", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.18 of @next/env." } }, { "id": "GHSA-q4gf-8mx6-v5v3", "affects": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:d46abeb7-8542-522f-98e0-9a6f6658748c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.18 of @next/env." } } ], "dependencies": [ { "ref": "pkg:npm/%40next/env@13.5.11-tuxcare.18" } ] }