{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:f3304802-a602-50e9-93f7-c4d72e22a2e1", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@next/mdx", "purl": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17", "type": "library", "bom-ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17", "version": "13.5.11-tuxcare.17", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "AIKIDO-2024-10173", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:7397de16-e38e-5110-aea9-a379131232ec", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.17 of @next/mdx." } }, { "id": "AIKIDO-2025-10936", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:72d1b0c1-c343-5d56-ae9e-6320c1b063d9", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.17 of @next/mdx." } }, { "id": "CVE-2024-34351", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:7b08f767-846f-5995-b551-4efbebdb5883", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.17 of @next/mdx." } }, { "id": "CVE-2024-47831", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:a74f8a02-f57d-5b79-8ab0-9ada10d24c84", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.17 of @next/mdx." } }, { "id": "CVE-2024-51479", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:e2985f75-8383-56af-8c5a-1f39c98ccbb6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.17 of @next/mdx." } }, { "id": "CVE-2025-32421", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:0355b790-f3c6-533f-b2e8-5b2678f4fcc2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.17 of @next/mdx." } }, { "id": "CVE-2025-48068", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:21c03d1a-819a-5078-8cfe-f48477ce277f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.17 of @next/mdx." } }, { "id": "CVE-2025-55173", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:0e75984f-6473-5c88-b74e-304c361efb08", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.17 of @next/mdx." } }, { "id": "CVE-2025-55183", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:a962c3a7-4d6f-5c06-b8ab-673fa077a673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55183 is fixed in version 13.5.11-tuxcare.17 of @next/mdx." } }, { "id": "CVE-2025-55184", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:204fee8f-e2bb-5120-a88e-7aa8fa866b68", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.17 of @next/mdx." } }, { "id": "CVE-2025-57752", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:a50c09ea-c4e3-5166-bfe5-3640ed88c682", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.17 of @next/mdx." } }, { "id": "CVE-2025-57822", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:194227a0-df44-5309-9ad0-4f29333c4dc8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.17 of @next/mdx." } }, { "id": "CVE-2025-59471", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:e70b4998-1abe-547d-b02d-69c5051dcf05", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.17 of @next/mdx." } }, { "id": "CVE-2025-59472", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:23ec59db-9b59-51d8-be05-d1819edc1d76", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.17 of @next/mdx. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat...", "justification": "code_not_present" } }, { "id": "CVE-2025-67779", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:5e6a7b23-2f17-5515-96d5-6516fb157b03", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.17 of @next/mdx." } }, { "id": "CVE-2026-27980", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:dfc42867-6aa9-5a6d-b3bd-e445e62cdd8b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.17 of @next/mdx." } }, { "id": "CVE-2026-29057", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:68518fed-eae4-5bcb-af41-74972c89503a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.17 of @next/mdx." } }, { "id": "CVE-2026-44572", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:0169e889-1867-5453-965b-82114d010621", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.17 of @next/mdx." } }, { "id": "CVE-2026-44573", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:36ee8d25-5210-5c0b-a39b-dfceef9f4f60", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.17 of @next/mdx." } }, { "id": "CVE-2026-44577", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:85954404-cd11-5d7a-ab9c-51c223465e24", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.17 of @next/mdx." } }, { "id": "CVE-2026-44578", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:a4795805-3afc-5857-b416-eacef511842c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.17 of @next/mdx." } }, { "id": "CVE-2026-44580", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:60d578f2-5cb8-5788-901e-082bd65e3a86", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.17 of @next/mdx." } }, { "id": "CVE-2026-44581", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:f28a2bb2-23a1-59eb-a41a-1ca4d00aba98", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.17 of @next/mdx." } }, { "id": "CVE-2026-44582", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:456aec3a-4e91-5fcf-a484-9e873dc326e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.17 of @next/mdx." } }, { "id": "CVE-2026-64641", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:16e5b6ce-26e1-51c8-a949-7f8ad99812cf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.17 of @next/mdx." } }, { "id": "CVE-2026-64643", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:1d33594f-d2e3-545e-8479-ed2167c41273", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.17 of @next/mdx." } }, { "id": "CVE-2026-64645", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:e859b970-0108-52db-b4b1-97c140319f27", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.17 of @next/mdx." } }, { "id": "CVE-2026-64646", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:bd3aa9ad-7ebf-5af4-bdb5-d9dac0d040c6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.17 of @next/mdx." } }, { "id": "CVE-2026-64647", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:47cbcf93-f54f-52c3-8019-2ab278cbc305", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.17 of @next/mdx." } }, { "id": "CVE-2026-64648", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:bb821525-11d3-51a9-9e7c-59f295814ffc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64648 is fixed in version 13.5.11-tuxcare.17 of @next/mdx." } }, { "id": "CVE-2026-75604", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:f63d10a5-ffad-5cfb-a6d6-9d8ac9676607", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-75604 affects version 13.5.11-tuxcare.17 of @next/mdx." } }, { "id": "GHSA-2xp9-vwfh-vxw4", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:32999664-5ee5-584c-b92e-d8bdb6dcdf83", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-2xp9-vwfh-vxw4 affects version 13.5.11-tuxcare.17 of @next/mdx." } }, { "id": "GHSA-5j59-xgg2-r9c4", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:40ba9d98-2957-584f-a786-1ca3c35615b4", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.17 of @next/mdx." } }, { "id": "GHSA-8h8q-6873-q5fj", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:bb080b6e-ed5a-5df7-b099-7a454ced4711", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.17 of @next/mdx." } }, { "id": "GHSA-h25m-26qc-wcjf", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:ccc9abe1-a55a-5863-9305-b732015ac203", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.17 of @next/mdx." } }, { "id": "GHSA-mwv6-3258-q52c", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:3962e910-e1ab-576a-8589-99b8162d3c13", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.17 of @next/mdx." } }, { "id": "GHSA-q4gf-8mx6-v5v3", "affects": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:5b0d4ff9-0762-52b9-8436-7bb370be7ade", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.17 of @next/mdx." } } ], "dependencies": [ { "ref": "pkg:npm/%40next/mdx@13.5.11-tuxcare.17" } ] }