{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:09ae7788-9a28-5e2f-a240-e14318fc5e88", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "create-next-app", "purl": "pkg:npm/create-next-app@13.5.11-tuxcare.18", "type": "library", "bom-ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18", "version": "13.5.11-tuxcare.18", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "AIKIDO-2024-10173", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:6aaf67d8-1922-53ba-ab8a-ff2cf87ce708", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.18 of create-next-app." } }, { "id": "AIKIDO-2025-10936", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:80d98764-c6ff-5322-9ef4-00165357632a", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.18 of create-next-app." } }, { "id": "CVE-2024-34351", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:84f18f44-eb78-5cf8-b32e-b7a59b09c50b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.18 of create-next-app." } }, { "id": "CVE-2024-47831", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:b70e4b61-221b-5c03-b01b-e226c442850e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.18 of create-next-app." } }, { "id": "CVE-2024-51479", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:0e2390ae-5354-5dd3-a656-4a9a4fc6275b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.18 of create-next-app." } }, { "id": "CVE-2025-32421", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:d7c247e1-70f8-561b-a472-6b404fe98e45", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.18 of create-next-app." } }, { "id": "CVE-2025-48068", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:b48179ee-d4e0-5834-a86d-0b7061c71c59", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.18 of create-next-app." } }, { "id": "CVE-2025-55173", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:1b67cfc4-9975-56b1-a1ee-4ba746ba019a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.18 of create-next-app." } }, { "id": "CVE-2025-55183", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:20119e03-8f65-53a4-8ad0-bb751ac9d1f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55183 is fixed in version 13.5.11-tuxcare.18 of create-next-app." } }, { "id": "CVE-2025-55184", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:c15ca033-fc95-57d8-be72-43873cc5ff6b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.18 of create-next-app." } }, { "id": "CVE-2025-57752", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:1da1ba5f-1835-5c78-98a0-c75a6ce1d1fe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.18 of create-next-app." } }, { "id": "CVE-2025-57822", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:e6d72176-b9ea-5392-80b9-9341a797da81", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.18 of create-next-app." } }, { "id": "CVE-2025-59471", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:69e430af-656e-5671-bd20-b6f44ee1ca91", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.18 of create-next-app." } }, { "id": "CVE-2025-59472", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:2230fd22-3ee2-5ca4-a929-bfdfca42298d", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.18 of create-next-app. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat...", "justification": "code_not_present" } }, { "id": "CVE-2025-67779", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:327dba68-07ba-59f3-84ae-5ccac3212610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.18 of create-next-app." } }, { "id": "CVE-2026-27980", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:b5f7dcf3-b8db-5cd6-a4a5-f434ed17fbd1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.18 of create-next-app." } }, { "id": "CVE-2026-29057", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:9efbcc00-d752-53cd-aa35-710f989cdbf0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.18 of create-next-app." } }, { "id": "CVE-2026-44572", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:8f3e8816-aeab-56b4-b9d3-84b95d6722b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.18 of create-next-app." } }, { "id": "CVE-2026-44573", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:74398fc5-7a03-5084-9c9e-fefaf5f3431b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.18 of create-next-app." } }, { "id": "CVE-2026-44577", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:3a7abe89-b7d0-5fdb-8f5f-9a77b7ab8e23", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.18 of create-next-app." } }, { "id": "CVE-2026-44578", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:d26f10de-ccc1-5a15-9787-f488cbe4c429", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.18 of create-next-app." } }, { "id": "CVE-2026-44580", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:0383ce95-c12e-55fa-b5f2-14e512498d17", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.18 of create-next-app." } }, { "id": "CVE-2026-44581", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:04210193-1810-59ff-95e2-e8be63c8b253", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.18 of create-next-app." } }, { "id": "CVE-2026-44582", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:1b522344-f9b8-5da9-b790-d4cac2b908d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.18 of create-next-app." } }, { "id": "CVE-2026-64641", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:fd858727-2403-5de5-9426-7530cd4768b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.18 of create-next-app." } }, { "id": "CVE-2026-64643", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:8fac03e7-41f5-5d91-8297-5b194ceadbcc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.18 of create-next-app." } }, { "id": "CVE-2026-64645", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:21dd5a77-0985-5752-a09a-313346efa2b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.18 of create-next-app." } }, { "id": "CVE-2026-64646", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:8227948e-a59d-5d1a-8eaf-1ab93a7f0af3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.18 of create-next-app." } }, { "id": "CVE-2026-64647", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:431e7f81-e14b-5888-8ea2-1ae0fea8f543", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.18 of create-next-app." } }, { "id": "CVE-2026-64648", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:c58592e2-ba57-5fc2-a59c-2a0c9543deed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64648 is fixed in version 13.5.11-tuxcare.18 of create-next-app." } }, { "id": "CVE-2026-75604", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:de0de1cb-e4da-5828-89c6-78784dc2d24a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-75604 is fixed in version 13.5.11-tuxcare.18 of create-next-app." } }, { "id": "GHSA-2xp9-vwfh-vxw4", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:898bbbcb-e9be-52fd-8065-664b1b4e1471", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-2xp9-vwfh-vxw4 is fixed in version 13.5.11-tuxcare.18 of create-next-app." } }, { "id": "GHSA-5j59-xgg2-r9c4", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:b4e84608-13c7-583d-8c40-a9ee8e769438", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.18 of create-next-app." } }, { "id": "GHSA-8h8q-6873-q5fj", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:2cc6c7d9-5aef-5d74-bf82-f59bbf456a04", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.18 of create-next-app." } }, { "id": "GHSA-h25m-26qc-wcjf", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:3a768eb2-7d17-58e3-9cce-885f1efc5734", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.18 of create-next-app." } }, { "id": "GHSA-mwv6-3258-q52c", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:0b83a73f-132a-59dc-9ff1-04c7fa790fdb", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.18 of create-next-app." } }, { "id": "GHSA-q4gf-8mx6-v5v3", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ], "bom-ref": "urn:uuid:a76f347d-05ec-5516-b4fe-7719333bd273", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.18 of create-next-app." } } ], "dependencies": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.18" } ] }