{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:d462b642-04ee-586b-bf15-b31938f2155f", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@next/react-refresh-utils", "purl": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18", "type": "library", "bom-ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18", "version": "13.5.11-tuxcare.18", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "AIKIDO-2024-10173", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:e5570d48-2b95-59a3-9087-c7960f6f6af1", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } }, { "id": "AIKIDO-2025-10936", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:d942c6b0-472e-58e6-a527-9032a33e3372", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } }, { "id": "CVE-2024-34351", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:aafde60c-e39a-5c7e-8b7c-aba1059968d5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } }, { "id": "CVE-2024-47831", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:608fc766-ec28-51d5-8438-b91b0ee1a77b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } }, { "id": "CVE-2024-51479", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:26b75b72-5766-54ba-b9ce-a6aa33eb93c3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } }, { "id": "CVE-2025-32421", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:79156098-78fd-59d5-afb1-ca5d0a38b560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } }, { "id": "CVE-2025-48068", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:e8231f7c-ddbd-567e-8e4c-c0dfca62fe27", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } }, { "id": "CVE-2025-55173", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:03304a36-7954-5b29-9e0d-e4e3be23f8bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } }, { "id": "CVE-2025-55183", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:337ab979-d665-5d90-bb1f-cb63fbdfd1fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55183 is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } }, { "id": "CVE-2025-55184", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:fba002f7-8137-588d-9af6-b289f88f0ba1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } }, { "id": "CVE-2025-57752", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:630bcc7c-92a0-580a-bd9f-211585206bd0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } }, { "id": "CVE-2025-57822", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:a975fd7a-2e9f-57d9-b064-2bba1c05c73e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } }, { "id": "CVE-2025-59471", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:a9821249-36d8-565b-a41a-691bf28b72a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } }, { "id": "CVE-2025-59472", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:97a51e78-1907-5846-93a0-5d2a04df3557", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.18 of @next/react-refresh-utils. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat...", "justification": "code_not_present" } }, { "id": "CVE-2025-67779", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:0ce110b7-61d5-5ea2-bcc1-26a260fda57d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } }, { "id": "CVE-2026-27980", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:9ced672c-01ac-52a1-979c-d8762b85a911", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } }, { "id": "CVE-2026-29057", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:1473f07b-793a-55e1-a32c-b47fafba95fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } }, { "id": "CVE-2026-44572", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:3a3a8825-9054-510b-bb30-6dd613cd43e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } }, { "id": "CVE-2026-44573", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:5c327bcc-f10c-5267-a8ba-09e484de9f70", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } }, { "id": "CVE-2026-44577", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:9bfe9432-e3f0-5e18-831f-c4bb621cade1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } }, { "id": "CVE-2026-44578", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:b93f6b1c-573b-5a71-8363-c7739351baca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } }, { "id": "CVE-2026-44580", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:3ffa4418-cc72-505e-8d89-6b41103364c6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } }, { "id": "CVE-2026-44581", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:1908ba5f-6232-5239-ad86-031d5a7190d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } }, { "id": "CVE-2026-44582", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:b25de312-ec7d-58a1-8543-15152446750b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } }, { "id": "CVE-2026-64641", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:6ae7b22c-2d3c-5895-9c5b-a754f4ada09d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } }, { "id": "CVE-2026-64643", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:ea901220-4261-51dd-8721-cfd817f0ff33", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } }, { "id": "CVE-2026-64645", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:33416286-97a3-5ea8-82bb-6d340a750467", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } }, { "id": "CVE-2026-64646", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:402f8906-3e4e-5564-9f15-26b4ee990d66", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } }, { "id": "CVE-2026-64647", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:ec64ede8-4b90-57c7-b00f-0680573c3178", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } }, { "id": "CVE-2026-64648", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:c3cccd55-0859-5d91-b1b9-fbd740d6f02c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64648 is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } }, { "id": "CVE-2026-75604", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:a1b47230-ec50-541f-b408-9e785649f567", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-75604 is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } }, { "id": "GHSA-2xp9-vwfh-vxw4", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:dd3a6fdc-243a-5191-8805-d6be2f447644", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-2xp9-vwfh-vxw4 is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } }, { "id": "GHSA-5j59-xgg2-r9c4", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:32cc7659-01e3-5e46-9191-d82ba09f7383", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } }, { "id": "GHSA-8h8q-6873-q5fj", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:dff6c155-37ac-5074-af57-6edf80b05242", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } }, { "id": "GHSA-h25m-26qc-wcjf", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:0c3d1fa6-d43e-5299-93c7-ed87eb0855c9", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } }, { "id": "GHSA-mwv6-3258-q52c", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:f887af5a-224e-515d-b69a-9b4c2a663271", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } }, { "id": "GHSA-q4gf-8mx6-v5v3", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:8e8fb881-96be-5a4d-b4ff-6c3612e2e9f7", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.18 of @next/react-refresh-utils." } } ], "dependencies": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.18" } ] }