{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:74f3cfa8-6dd1-533b-806d-a06514c5de8b",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/%40next/plugin-storybook@12.3.7-tuxcare.4",
      "type": "library",
      "name": "@next/plugin-storybook",
      "version": "12.3.7-tuxcare.4",
      "purl": "pkg:npm/%40next/plugin-storybook@12.3.7-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:3225a9d6-dd5b-56eb-ae73-a31d9c4395eb",
      "id": "AIKIDO-2025-10854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability AIKIDO-2025-10854 is fixed in version 12.3.7-tuxcare.4 of @next/plugin-storybook."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40next/plugin-storybook@12.3.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2c4dab1-352e-5180-b49c-6b4fb84ab5d3",
      "id": "CVE-2023-46298",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-46298 affects version 12.3.7-tuxcare.4 of @next/plugin-storybook."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40next/plugin-storybook@12.3.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2debc09-8d26-5845-974d-e36a982316c8",
      "id": "CVE-2024-34351",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-34351 affects version 12.3.7-tuxcare.4 of @next/plugin-storybook."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40next/plugin-storybook@12.3.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8179e37-e310-5c30-9932-4c5916d57b44",
      "id": "CVE-2024-47831",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47831 affects version 12.3.7-tuxcare.4 of @next/plugin-storybook."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40next/plugin-storybook@12.3.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d720707-f8f5-5973-ad07-8c4588a09ebc",
      "id": "CVE-2025-59472",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59472 affects version 12.3.7-tuxcare.4 of @next/plugin-storybook."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40next/plugin-storybook@12.3.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2ca9cf9-0255-5872-ba5e-2cc8e8983564",
      "id": "CVE-2026-44572",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44572 affects version 12.3.7-tuxcare.4 of @next/plugin-storybook."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40next/plugin-storybook@12.3.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:241f4ba6-d954-5f59-b6de-b33ded07fdad",
      "id": "CVE-2026-44573",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44573 affects version 12.3.7-tuxcare.4 of @next/plugin-storybook."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40next/plugin-storybook@12.3.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3cc33913-34ff-5610-996e-27ee0a5f571f",
      "id": "CVE-2026-44577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44577 affects version 12.3.7-tuxcare.4 of @next/plugin-storybook."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40next/plugin-storybook@12.3.7-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40next/plugin-storybook@12.3.7-tuxcare.4"
    }
  ]
}