{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:bd69bca0-960e-53f3-8849-83667c6f83c3", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@next/polyfill-nomodule", "purl": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18", "type": "library", "bom-ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18", "version": "13.5.11-tuxcare.18", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "AIKIDO-2024-10173", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:a8c0d816-0fda-5c1d-9528-2cbdba73817d", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } }, { "id": "AIKIDO-2025-10936", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:53590f14-6421-511a-9465-146d4eecda2f", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } }, { "id": "CVE-2024-34351", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:1b7e9af4-048e-56ab-9996-e7a67514f03a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } }, { "id": "CVE-2024-47831", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:29c5a9c6-2a27-5b34-bd8a-943ec2491b3a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } }, { "id": "CVE-2024-51479", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:214b0a68-ca82-58e2-b459-e2467b0c7a88", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } }, { "id": "CVE-2025-32421", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:fe832569-d991-5b73-8dc4-57f3212b2021", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } }, { "id": "CVE-2025-48068", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:ce13f038-1360-54e9-b60f-427e03d567d7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } }, { "id": "CVE-2025-55173", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:f527dff1-aa53-5e79-93db-f2505516b1de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } }, { "id": "CVE-2025-55183", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:037df74b-e64d-578c-ac81-1cd6d2ce4907", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55183 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } }, { "id": "CVE-2025-55184", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:5313c7f2-ab86-5525-9db1-ff0b7a5b2b59", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } }, { "id": "CVE-2025-57752", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:5e914347-ea11-53ad-9b0c-676ebd31ef21", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } }, { "id": "CVE-2025-57822", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:7e94e73a-8042-53c7-a688-6886845c2773", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } }, { "id": "CVE-2025-59471", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:eccabb62-e84b-5a6b-9f2b-539cd97d9349", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } }, { "id": "CVE-2025-59472", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:4b40fd5e-fafc-5a1a-9a0f-ae0ebfef8c1f", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.18 of @next/polyfill-nomodule. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat...", "justification": "code_not_present" } }, { "id": "CVE-2025-67779", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:8e907779-cff0-5e69-8c6f-559cfd328409", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } }, { "id": "CVE-2026-27980", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:f8c94682-817f-5ab8-a72b-8a020ef42e81", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } }, { "id": "CVE-2026-29057", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:f4691184-86d7-5741-b839-5622b032e766", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } }, { "id": "CVE-2026-44572", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:2cfde45d-8bc2-5267-b13d-02bf684dfb59", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } }, { "id": "CVE-2026-44573", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:9e393dd1-7698-57c6-b8ae-93dd832adce8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } }, { "id": "CVE-2026-44577", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:6a1e2a09-a907-5f54-8d48-a3b8deefdc3f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } }, { "id": "CVE-2026-44578", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:6f840c05-abd2-57ce-9b4a-407051a8dffa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } }, { "id": "CVE-2026-44580", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:e7adcda3-0f8b-5425-8d7a-6f32e9f500e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } }, { "id": "CVE-2026-44581", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:286ef214-3cb8-586d-a0ca-f3ede7d0768e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } }, { "id": "CVE-2026-44582", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:d8a7638f-8539-5152-95d4-cbb7a07ab5e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } }, { "id": "CVE-2026-64641", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:0b350119-3d5d-5605-8732-eaa052f9313f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } }, { "id": "CVE-2026-64643", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:74c840ca-3ef7-5e0a-946a-b1a669b27ee6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } }, { "id": "CVE-2026-64645", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:c19997b5-00a0-5f98-8b18-dcb1835eb8c6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } }, { "id": "CVE-2026-64646", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:955d63ec-7888-5f6d-8842-02f4920f4718", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } }, { "id": "CVE-2026-64647", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:a0aa228c-b66c-559c-bc6d-f8eb388b2019", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } }, { "id": "CVE-2026-64648", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:dc3d7eb4-1476-5733-a39d-979f9bb312b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64648 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } }, { "id": "CVE-2026-75604", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:76c4a3bc-b037-5f19-ab89-2e31bcd4708a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-75604 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } }, { "id": "GHSA-2xp9-vwfh-vxw4", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:f53a4db2-a53c-5084-8e83-9dd5521781e7", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-2xp9-vwfh-vxw4 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } }, { "id": "GHSA-5j59-xgg2-r9c4", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:56fca4f1-8198-59e8-835c-7efdb6a06904", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } }, { "id": "GHSA-8h8q-6873-q5fj", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:80b60fd4-a240-525b-ac7e-161400d2dbc9", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } }, { "id": "GHSA-h25m-26qc-wcjf", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:f4968330-fa84-51bd-b539-17f34421cadd", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } }, { "id": "GHSA-mwv6-3258-q52c", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:ccd79140-bc23-5a7e-8387-97c4b33f0058", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } }, { "id": "GHSA-q4gf-8mx6-v5v3", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:5527d681-3fb2-5897-916f-cdf36f61d72c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.18 of @next/polyfill-nomodule." } } ], "dependencies": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.18" } ] }