{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:6818466f-1460-5c74-8df5-aa3568bf237b", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@next/polyfill-module", "purl": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18", "type": "library", "bom-ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18", "version": "13.5.11-tuxcare.18", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "AIKIDO-2024-10173", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:f09f13f4-a1cb-5f95-9aae-fed69de6ca7b", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } }, { "id": "AIKIDO-2025-10936", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:1ea14c3e-0b2c-5ca3-9c7b-c43c1a1a69a2", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } }, { "id": "CVE-2024-34351", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:08d5c7fb-cd69-5f45-928a-a70841ed1eb2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } }, { "id": "CVE-2024-47831", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:63522751-4a17-5558-a433-7c08d9f7e4f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } }, { "id": "CVE-2024-51479", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:b5337510-ec19-5c33-8bc9-faa0166a278c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } }, { "id": "CVE-2025-32421", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:942e26b6-29db-5f80-bbe0-281425d45957", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } }, { "id": "CVE-2025-48068", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:0f786090-cd7c-562f-8754-200cf8a7eb4f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } }, { "id": "CVE-2025-55173", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:1573ab8d-efe7-5dab-a14f-719460c5536a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } }, { "id": "CVE-2025-55183", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:acca37f3-19c8-58d7-9d47-7742e4cc0a32", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55183 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } }, { "id": "CVE-2025-55184", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:8cd509f7-34aa-599d-90aa-3dacf9ffd045", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } }, { "id": "CVE-2025-57752", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:80543630-59df-53cf-8378-01c2e871c6f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } }, { "id": "CVE-2025-57822", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:cc831121-280f-5c0b-8234-0aa04c82221e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } }, { "id": "CVE-2025-59471", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:f3aff8f9-68b4-578e-8be1-f488462b981f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } }, { "id": "CVE-2025-59472", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:930463d9-bcdc-534b-97af-6ad3a8586552", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.18 of @next/polyfill-module. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat...", "justification": "code_not_present" } }, { "id": "CVE-2025-67779", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:0835740e-5458-517c-b31c-010686ba8470", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } }, { "id": "CVE-2026-27980", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:f553746d-c108-5b8d-a107-d5067cc05f6e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } }, { "id": "CVE-2026-29057", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:77afb9be-db92-5f2e-bbd7-38cdd669b27c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } }, { "id": "CVE-2026-44572", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:01278621-d7f6-55c4-bf6d-d72f552aa4b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } }, { "id": "CVE-2026-44573", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:abd6b158-77c2-55dc-9355-1cab2a69bc66", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } }, { "id": "CVE-2026-44577", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:48c2eb0c-2eb5-597d-b050-e67cfc4bc561", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } }, { "id": "CVE-2026-44578", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:6bdfe825-67ff-5f4e-abc2-1b9a521f3296", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } }, { "id": "CVE-2026-44580", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:c8a52327-53f5-5f66-858a-31f9c96fdd8a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } }, { "id": "CVE-2026-44581", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:d1b7a919-fe5c-57a0-87e6-b4c29fbc0742", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } }, { "id": "CVE-2026-44582", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:7c856889-3fbc-5c82-840d-97d2ec644081", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } }, { "id": "CVE-2026-64641", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:7a9bf66d-b5e4-532e-b90c-b41d215a5480", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } }, { "id": "CVE-2026-64643", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:bfe710f9-b95b-5681-9118-3891237d10d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } }, { "id": "CVE-2026-64645", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:04e8c9bb-b8b9-5195-98d7-36f7306bde65", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } }, { "id": "CVE-2026-64646", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:59c7887a-d1e3-51b2-a9d2-36bd26381844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } }, { "id": "CVE-2026-64647", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:489c4f33-123c-5423-b78f-e63063d42516", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } }, { "id": "CVE-2026-64648", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:448715b5-f43f-548d-815a-663e831ae749", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64648 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } }, { "id": "CVE-2026-75604", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:24ceda9f-a1cc-55f7-b360-76a88c21b4e8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-75604 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } }, { "id": "GHSA-2xp9-vwfh-vxw4", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:b4511e96-ad28-5e31-be55-8eea7abfd5e3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-2xp9-vwfh-vxw4 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } }, { "id": "GHSA-5j59-xgg2-r9c4", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:35858a28-5c63-5b3a-8717-580881deea38", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } }, { "id": "GHSA-8h8q-6873-q5fj", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:e438c5f2-b503-5cbc-9909-1e497d21b9e0", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } }, { "id": "GHSA-h25m-26qc-wcjf", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:4ce9b01a-a49f-5736-a87c-9d2f1631a3ac", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } }, { "id": "GHSA-mwv6-3258-q52c", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:1089863c-ac7c-5417-b029-16265b1d359a", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } }, { "id": "GHSA-q4gf-8mx6-v5v3", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:91188ca2-a7a8-5174-8811-d68da7806149", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-module." } } ], "dependencies": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.18" } ] }