{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:28d1dcf3-81c1-5055-8ba2-4fb6325dd4dc", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@next/bundle-analyzer", "purl": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17", "type": "library", "bom-ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17", "version": "13.5.11-tuxcare.17", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "AIKIDO-2024-10173", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:ed410700-a435-58d7-9abd-b5195c6788f0", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } }, { "id": "AIKIDO-2025-10936", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:4c946a67-33ae-57ae-a9eb-834eb1d8fc5c", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } }, { "id": "CVE-2024-34351", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:e948036d-a36e-513e-b429-b729a5d1ebb6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } }, { "id": "CVE-2024-47831", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:a2b552f1-7f81-5095-97ec-501c3b8a1e2b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } }, { "id": "CVE-2024-51479", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:c97fc893-7d54-5d45-b6dc-d4ecae69ccc6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } }, { "id": "CVE-2025-32421", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:3505bade-9571-528c-9288-35b6d35e25c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } }, { "id": "CVE-2025-48068", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:b968b836-0cf1-5d99-9052-922847d8f9d2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } }, { "id": "CVE-2025-55173", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:2599ad1a-bf25-5a09-b961-b6937eb2bdf8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } }, { "id": "CVE-2025-55183", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:2445e7d3-abdd-5f69-af41-a87ce5c1efce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55183 is fixed in version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } }, { "id": "CVE-2025-55184", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:ba557750-994a-5026-926d-6a288496fc6d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } }, { "id": "CVE-2025-57752", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:a2318f3d-6a03-5cc7-98ea-ddfd3978d0ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } }, { "id": "CVE-2025-57822", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:61f26203-8ee6-5ea0-b078-f91e460f1d64", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } }, { "id": "CVE-2025-59471", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:2beb1eeb-72fb-539a-8113-52607713a9bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } }, { "id": "CVE-2025-59472", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:ebafb3aa-4c6a-5d0b-9df3-e8da61ae4ebf", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.17 of @next/bundle-analyzer. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat...", "justification": "code_not_present" } }, { "id": "CVE-2025-67779", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:ecfdbcc6-9eab-5752-a2a7-e287ab7d762f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } }, { "id": "CVE-2026-27980", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:5411fa98-b225-5a4c-bea5-35a8fefff5d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } }, { "id": "CVE-2026-29057", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:1405d1a1-1b70-53a5-80f9-fd0f351d83f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } }, { "id": "CVE-2026-44572", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:18202842-e1db-5621-ab81-7661a8f76f6b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } }, { "id": "CVE-2026-44573", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:74d7ad44-f3e5-5c8b-a4ce-cbe659b0454a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } }, { "id": "CVE-2026-44577", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:1c1ac1d8-5301-58fe-8659-036c95ac72e5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } }, { "id": "CVE-2026-44578", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:5f7d3990-e14a-5908-9e71-0a562e0b4e83", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } }, { "id": "CVE-2026-44580", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:f5b69ec7-1d3e-52d5-97ad-7744e9edc6d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } }, { "id": "CVE-2026-44581", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:53516447-db9b-5b4b-9d55-9d59c6fa4b33", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } }, { "id": "CVE-2026-44582", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:af97f3e3-5234-5e76-a01f-060069c42664", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } }, { "id": "CVE-2026-64641", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:08a85e33-db8b-574b-b085-3bf30063f16e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } }, { "id": "CVE-2026-64643", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:2bafbc19-1f8e-5305-ae18-7212121e0785", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } }, { "id": "CVE-2026-64645", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:454bcd08-4920-5782-a0c1-95796ad72e01", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } }, { "id": "CVE-2026-64646", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:9fc9bf1c-53b7-5dcc-8564-c71106e32089", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } }, { "id": "CVE-2026-64647", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:ca736ca8-9214-51ff-9c1e-3118a1d60d6e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } }, { "id": "CVE-2026-64648", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:ff235fdf-c874-543b-a9fe-80b4398f770e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64648 is fixed in version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } }, { "id": "CVE-2026-75604", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:0de7cf47-05fe-5c53-ae59-cca1dc2c4cd0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-75604 affects version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } }, { "id": "GHSA-2xp9-vwfh-vxw4", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:8be66725-4dc2-5eca-85bc-053468acf9d2", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-2xp9-vwfh-vxw4 affects version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } }, { "id": "GHSA-5j59-xgg2-r9c4", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:a8292717-c6ef-5fbe-85ef-63f5d81db67b", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } }, { "id": "GHSA-8h8q-6873-q5fj", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:1117dc97-4477-57af-a746-e4f446b874d0", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } }, { "id": "GHSA-h25m-26qc-wcjf", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:a23e23c7-7688-50d7-9c81-ccc3358fcb8f", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } }, { "id": "GHSA-mwv6-3258-q52c", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:6ea35e39-c1f4-5d43-acf0-b033e08cac4f", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } }, { "id": "GHSA-q4gf-8mx6-v5v3", "affects": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:1a8fa3c7-ff71-5e28-931e-8332b5862cae", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.17 of @next/bundle-analyzer." } } ], "dependencies": [ { "ref": "pkg:npm/%40next/bundle-analyzer@13.5.11-tuxcare.17" } ] }