{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:99f711ba-4f0a-5136-a65d-3d292f60b3d1", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@next/font", "purl": "pkg:npm/%40next/font@13.5.11-tuxcare.17", "type": "library", "bom-ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17", "version": "13.5.11-tuxcare.17", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "AIKIDO-2024-10173", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:f7d5c343-c573-5750-8e3a-813fd6d7eba7", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.17 of @next/font." } }, { "id": "AIKIDO-2025-10936", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:c2c58368-cc14-5ee7-bb32-f575ad5e41cb", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.17 of @next/font." } }, { "id": "CVE-2024-34351", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:937b9c64-7d8f-5c5b-b0d7-370a4917adb6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.17 of @next/font." } }, { "id": "CVE-2024-47831", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:94a28289-4954-5398-b759-b67f80bbef66", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.17 of @next/font." } }, { "id": "CVE-2024-51479", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:cdcbf234-8ebd-5c9c-83bc-953bfab6ca5d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.17 of @next/font." } }, { "id": "CVE-2025-32421", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:d566ad6e-980c-50cf-b2bb-e490a1904e0f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.17 of @next/font." } }, { "id": "CVE-2025-48068", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:77b951f1-8324-578d-a04b-90bd272138b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.17 of @next/font." } }, { "id": "CVE-2025-55173", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:58cc06ba-efb5-5657-b450-c64349d850fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.17 of @next/font." } }, { "id": "CVE-2025-55183", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:ba217995-30f6-58b3-9246-de54099df1da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55183 is fixed in version 13.5.11-tuxcare.17 of @next/font." } }, { "id": "CVE-2025-55184", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:4eb2a457-f43e-5eca-a527-a203d2d1e246", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.17 of @next/font." } }, { "id": "CVE-2025-57752", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:5b054c96-811d-51a5-b29a-6ef2149580b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.17 of @next/font." } }, { "id": "CVE-2025-57822", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:b0a19aad-507e-5b31-a9ed-382ac78f3a67", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.17 of @next/font." } }, { "id": "CVE-2025-59471", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:9344de80-0540-5f47-9462-271a2a1bbe8d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.17 of @next/font." } }, { "id": "CVE-2025-59472", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:0e3dd0f1-4176-573c-bef7-235fe55d0eb8", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.17 of @next/font. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat...", "justification": "code_not_present" } }, { "id": "CVE-2025-67779", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:f9e96f81-3b96-528e-9992-36cfec0bdc00", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.17 of @next/font." } }, { "id": "CVE-2026-27980", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:e835c4b8-3c50-5371-8e96-29b72f9eeb78", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.17 of @next/font." } }, { "id": "CVE-2026-29057", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:faf533ad-d2d5-52e1-9593-4ca53d311cf9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.17 of @next/font." } }, { "id": "CVE-2026-44572", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:75738bce-a0f4-5090-b82a-e99a8eb33bc5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.17 of @next/font." } }, { "id": "CVE-2026-44573", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:520b96bb-6a28-5040-9c0a-ac6d6e290087", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.17 of @next/font." } }, { "id": "CVE-2026-44577", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:7046b4eb-20b5-5298-8cb8-1e1a23989411", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.17 of @next/font." } }, { "id": "CVE-2026-44578", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:1fdc2efc-14d1-5d36-a369-d1ebf66525d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.17 of @next/font." } }, { "id": "CVE-2026-44580", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:d321b9a3-98e2-5c67-a4b6-a2a5500025e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.17 of @next/font." } }, { "id": "CVE-2026-44581", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:f70d0a13-72f2-50c1-9668-1544be303900", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.17 of @next/font." } }, { "id": "CVE-2026-44582", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:6f901c18-b594-5883-94e1-2ef9e100f90d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.17 of @next/font." } }, { "id": "CVE-2026-64641", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:661de9e8-37d0-57f7-88eb-bfea310ad781", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.17 of @next/font." } }, { "id": "CVE-2026-64643", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:2cf769e5-2ed2-5804-9d26-fe6cbb803708", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.17 of @next/font." } }, { "id": "CVE-2026-64645", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:abe3d6a3-60cd-5c1f-b09f-bc0065a3b9e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.17 of @next/font." } }, { "id": "CVE-2026-64646", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:f512e1b4-73d7-5f74-8cac-284331b128d7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.17 of @next/font." } }, { "id": "CVE-2026-64647", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:af33f6ce-d9b6-5910-b0b0-c501a930a294", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.17 of @next/font." } }, { "id": "CVE-2026-64648", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:2bddd4df-4c4d-5800-b584-364fb1075599", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64648 is fixed in version 13.5.11-tuxcare.17 of @next/font." } }, { "id": "CVE-2026-75604", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:30fb53a0-1359-50bf-8501-a2e22a1c46d8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-75604 affects version 13.5.11-tuxcare.17 of @next/font." } }, { "id": "GHSA-2xp9-vwfh-vxw4", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:4437ed7e-d65d-5868-b551-25efda18abde", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-2xp9-vwfh-vxw4 affects version 13.5.11-tuxcare.17 of @next/font." } }, { "id": "GHSA-5j59-xgg2-r9c4", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:7be64b40-094f-5b80-a1ed-44cd477e76fd", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.17 of @next/font." } }, { "id": "GHSA-8h8q-6873-q5fj", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:b9e12903-d785-5e62-a971-984cdf38576e", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.17 of @next/font." } }, { "id": "GHSA-h25m-26qc-wcjf", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:0984eba3-95e8-5981-8320-fbe2c5c3d469", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.17 of @next/font." } }, { "id": "GHSA-mwv6-3258-q52c", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:eb76541d-e796-54aa-965e-cd02042fc159", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.17 of @next/font." } }, { "id": "GHSA-q4gf-8mx6-v5v3", "affects": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:ca3a6178-ef8a-5423-8bdc-f2ae8770fec2", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.17 of @next/font." } } ], "dependencies": [ { "ref": "pkg:npm/%40next/font@13.5.11-tuxcare.17" } ] }