{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:34f94100-40d2-512e-a3ad-7035fd2a7d2d", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@next/third-parties", "purl": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18", "type": "library", "bom-ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18", "version": "13.5.11-tuxcare.18", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "AIKIDO-2024-10173", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:7ebc1ce4-79cc-57a9-b4bc-e815358e5edf", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } }, { "id": "AIKIDO-2025-10936", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:97e815cc-bf2d-5564-96b7-7ed7726df7a7", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } }, { "id": "CVE-2024-34351", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:64e00275-c3c7-5252-abf0-d28b77a7e4d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } }, { "id": "CVE-2024-47831", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:9b1981ea-811c-52c7-bd39-123f052f866b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } }, { "id": "CVE-2024-51479", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:06016835-5331-5eee-9bbe-0e67a4db1d05", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } }, { "id": "CVE-2025-32421", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:68c5ef96-d937-5b63-9416-480042f8052d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } }, { "id": "CVE-2025-48068", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:1660144e-6594-5d75-970c-91f191b12cbb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } }, { "id": "CVE-2025-55173", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:0f91d4a3-a829-533a-aa0b-2ef273dde26d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } }, { "id": "CVE-2025-55183", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:f36cb56f-d5ce-5014-8067-88392b5d939d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55183 is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } }, { "id": "CVE-2025-55184", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:249dac45-8281-5aa0-967d-6d4327e03ca5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } }, { "id": "CVE-2025-57752", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:00fb4480-7589-5517-a88d-948e0a10def8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } }, { "id": "CVE-2025-57822", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:26f41a52-fe3e-54db-af16-557efc0b8b22", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } }, { "id": "CVE-2025-59471", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:ec6ed549-8dc7-58ca-9e23-8ff4eadca986", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } }, { "id": "CVE-2025-59472", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:bfa6904f-aaec-53bf-8a80-718cc50c8613", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.18 of @next/third-parties. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat...", "justification": "code_not_present" } }, { "id": "CVE-2025-67779", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:920e2ff2-1b0b-53a3-8276-091254327d2f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } }, { "id": "CVE-2026-27980", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:0109d5e4-e89a-551c-8de8-6651f9d45167", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } }, { "id": "CVE-2026-29057", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:6c5c1a0f-e30e-529a-b5ce-7c9328825041", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } }, { "id": "CVE-2026-44572", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:b6380a8c-7109-59f8-a047-ef3b94f5f9d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } }, { "id": "CVE-2026-44573", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:41eaba4d-eafb-58b2-b2cc-6bdba738aa5d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } }, { "id": "CVE-2026-44577", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:117a3d71-31be-51c3-a2eb-22ccecfe9e54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } }, { "id": "CVE-2026-44578", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:e07ac1c5-8d78-555c-9485-6be687f4080b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } }, { "id": "CVE-2026-44580", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:7a2b8351-a37a-5944-ab84-a6935765b85e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } }, { "id": "CVE-2026-44581", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:03eab74c-f6ce-59e6-afe9-9ccb4b05e509", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } }, { "id": "CVE-2026-44582", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:d816f7e3-0124-5ec8-bd00-484f8afd10b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } }, { "id": "CVE-2026-64641", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:ed684264-dc50-5dd0-9f1b-43aa057219ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } }, { "id": "CVE-2026-64643", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:d6268821-14aa-5266-bf74-c53159ca9bcb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } }, { "id": "CVE-2026-64645", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:c70ddc92-7715-54c4-9699-9b75b06bfa6a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } }, { "id": "CVE-2026-64646", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:deba6f98-fc20-5bf5-ae70-38f1d9ed67af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } }, { "id": "CVE-2026-64647", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:739b93b0-8d96-5af4-8235-a34e2c3b7073", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } }, { "id": "CVE-2026-64648", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:d1f16703-23fe-5948-9a02-6ef4d72debee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64648 is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } }, { "id": "CVE-2026-75604", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:9f2e270d-27ba-5fbf-8871-97b3205c3e3b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-75604 is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } }, { "id": "GHSA-2xp9-vwfh-vxw4", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:2b1d431e-8f40-53e6-b30c-f6112f7dba62", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-2xp9-vwfh-vxw4 is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } }, { "id": "GHSA-5j59-xgg2-r9c4", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:83006ea4-ca55-5a39-a0e1-a96c20690b84", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } }, { "id": "GHSA-8h8q-6873-q5fj", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:135a53c7-a6ee-5a27-8d95-067a3c1d6093", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } }, { "id": "GHSA-h25m-26qc-wcjf", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:0ee8ff3d-c23e-50fc-bfd3-5568b5ca8397", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } }, { "id": "GHSA-mwv6-3258-q52c", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:636dd8e1-6dbe-57e7-96b9-6d8bcc3ce264", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } }, { "id": "GHSA-q4gf-8mx6-v5v3", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:d283d966-17fd-580e-b284-6bbefa01ebe7", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.18 of @next/third-parties." } } ], "dependencies": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.18" } ] }