{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:3c0a3523-0fba-523e-88d7-e1dd6dc599c2", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@next/plugin-storybook", "purl": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18", "type": "library", "bom-ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18", "version": "13.5.11-tuxcare.18", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "AIKIDO-2024-10173", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:e61d0fc3-87f1-50d2-b7bf-0430a199c539", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } }, { "id": "AIKIDO-2025-10936", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:33a7ea8a-c836-5162-996f-06d8b912611e", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } }, { "id": "CVE-2024-34351", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:f5c9277b-ae4d-5f5f-bde6-bff91e1be937", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } }, { "id": "CVE-2024-47831", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:5e81fbce-4577-5347-93c5-0d71941444cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } }, { "id": "CVE-2024-51479", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:5989a203-76ee-59cd-a33c-c542a4540f65", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } }, { "id": "CVE-2025-32421", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:321553d6-debc-564f-a343-29b2c59e89ed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } }, { "id": "CVE-2025-48068", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:65c5f0a8-0804-52f0-9fcc-76ae0b0a48c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } }, { "id": "CVE-2025-55173", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:c79e5abc-8d1d-59b3-8217-fb82c0f68c90", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } }, { "id": "CVE-2025-55183", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:8630ceae-9317-56e2-a171-22a7c48abb59", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55183 is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } }, { "id": "CVE-2025-55184", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:1ea128bc-dfcc-5a66-88c7-ae810dc0aeca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } }, { "id": "CVE-2025-57752", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:ffa6df4c-3d4b-5e58-9942-8ae7bd390ff2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } }, { "id": "CVE-2025-57822", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:de048408-df7b-53fa-b406-7f86e7f76796", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } }, { "id": "CVE-2025-59471", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:ff4ab648-e83e-52b8-aa47-9018112215dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } }, { "id": "CVE-2025-59472", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:1aebbe31-0a1f-5aee-bf9c-9972a31c984a", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.18 of @next/plugin-storybook. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat...", "justification": "code_not_present" } }, { "id": "CVE-2025-67779", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:b262b303-39c2-5e72-9d55-bb5e8ba551fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } }, { "id": "CVE-2026-27980", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:0474bf92-d659-594b-9875-c7ce919429ba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } }, { "id": "CVE-2026-29057", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:76f1ae47-3b7f-5c36-aec1-5d9030ff4b71", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } }, { "id": "CVE-2026-44572", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:e9024a8a-fa76-522c-990d-66091182bc86", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } }, { "id": "CVE-2026-44573", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:395bd100-9b48-5e16-8c7d-a0016192f29e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } }, { "id": "CVE-2026-44577", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:3ce5a098-6eb3-5128-8a96-9c67238ac94b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } }, { "id": "CVE-2026-44578", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:7915274e-8dc3-50a8-846e-6f8626021fad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } }, { "id": "CVE-2026-44580", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:950605ab-1e9f-5732-b877-3d50d69c5e55", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } }, { "id": "CVE-2026-44581", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:4383b38f-3d95-5218-89c5-2e0e133106a9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } }, { "id": "CVE-2026-44582", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:92e976df-f812-5b9b-b721-45b9eb92fd46", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } }, { "id": "CVE-2026-64641", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:ba74b5bf-cfb5-5648-ab16-ebf722819917", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } }, { "id": "CVE-2026-64643", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:462d77a9-a69b-5379-a42c-f15671496b21", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } }, { "id": "CVE-2026-64645", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:7406500a-25cd-5957-bc20-f490457d6791", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } }, { "id": "CVE-2026-64646", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:759b36c5-626f-5fba-bb40-b4fb32008051", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } }, { "id": "CVE-2026-64647", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:07536afa-2429-5016-bc0a-369a1b657aff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } }, { "id": "CVE-2026-64648", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:465e7b9f-0fc3-5a94-a14f-fed937df20c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64648 is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } }, { "id": "CVE-2026-75604", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:77953252-3e56-53a6-ad8b-2228f4125b8d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-75604 is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } }, { "id": "GHSA-2xp9-vwfh-vxw4", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:99bda6df-5bcc-585c-9699-87d222b33920", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-2xp9-vwfh-vxw4 is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } }, { "id": "GHSA-5j59-xgg2-r9c4", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:9f3a1744-974a-59d8-8162-e5848460f199", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } }, { "id": "GHSA-8h8q-6873-q5fj", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:e5a982ac-abbd-5255-a66e-2f9230aa64e7", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } }, { "id": "GHSA-h25m-26qc-wcjf", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:c28fd6f3-953c-5b24-b672-282e20dbaa82", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } }, { "id": "GHSA-mwv6-3258-q52c", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:f37d11e4-16fa-53f1-b6d7-b3360175851c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } }, { "id": "GHSA-q4gf-8mx6-v5v3", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:b7014669-9fde-5769-96e6-e647cc7683f9", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.18 of @next/plugin-storybook." } } ], "dependencies": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.18" } ] }