{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:ec0ac1ed-3d73-5994-a767-e15ab2747625", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@next/plugin-storybook", "purl": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17", "type": "library", "bom-ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17", "version": "13.5.11-tuxcare.17", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "AIKIDO-2024-10173", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:28d80da8-c0fd-5de0-9f21-6add9a8c03c0", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.17 of @next/plugin-storybook." } }, { "id": "AIKIDO-2025-10936", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:3c5626c7-da97-53d7-b242-4f9f9acc0692", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.17 of @next/plugin-storybook." } }, { "id": "CVE-2024-34351", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:b22b8bfb-f0d6-52c2-b83c-619ee7446997", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.17 of @next/plugin-storybook." } }, { "id": "CVE-2024-47831", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:c76ef97a-5733-537a-bbf3-9382194f19ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.17 of @next/plugin-storybook." } }, { "id": "CVE-2024-51479", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:322be2b5-338f-5965-afd6-3ecc92181c73", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.17 of @next/plugin-storybook." } }, { "id": "CVE-2025-32421", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:05881bc2-a279-5181-a200-4912227a5404", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.17 of @next/plugin-storybook." } }, { "id": "CVE-2025-48068", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:f7fae9b9-174c-5993-8e14-01e434a0f1ba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.17 of @next/plugin-storybook." } }, { "id": "CVE-2025-55173", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:d4b118a5-c165-578a-846e-7a39652bb6a9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.17 of @next/plugin-storybook." } }, { "id": "CVE-2025-55183", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:085238b2-7171-5dbb-9910-a45923863edb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55183 is fixed in version 13.5.11-tuxcare.17 of @next/plugin-storybook." } }, { "id": "CVE-2025-55184", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:6d390cb9-574a-5801-bfb4-486df18f1f59", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.17 of @next/plugin-storybook." } }, { "id": "CVE-2025-57752", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:068da157-a2ca-5a9f-8815-b2e67df48cf8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.17 of @next/plugin-storybook." } }, { "id": "CVE-2025-57822", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:f2c6fdca-4dfe-59a6-a76e-581da19c5bad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.17 of @next/plugin-storybook." } }, { "id": "CVE-2025-59471", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:6b0dd3f2-cff5-5286-b6c3-1ba0729d76b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.17 of @next/plugin-storybook." } }, { "id": "CVE-2025-59472", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:f956fba5-088d-5590-9c12-ee67f23cbffa", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.17 of @next/plugin-storybook. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat...", "justification": "code_not_present" } }, { "id": "CVE-2025-67779", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:42d9e5e0-27fc-56bb-aa14-18041e373f36", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.17 of @next/plugin-storybook." } }, { "id": "CVE-2026-27980", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:5d39fcf8-dada-57ae-a772-0a918484c192", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.17 of @next/plugin-storybook." } }, { "id": "CVE-2026-29057", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:e2fa6782-f058-53d6-8bc6-c8201e33d9be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.17 of @next/plugin-storybook." } }, { "id": "CVE-2026-44572", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:faaaa5e3-e787-586f-942c-f0e75e5cb65c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.17 of @next/plugin-storybook." } }, { "id": "CVE-2026-44573", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:e6d7a946-06b5-570f-89db-96d672e623b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.17 of @next/plugin-storybook." } }, { "id": "CVE-2026-44577", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:54897d7c-4e58-515d-be9f-0510ac097c03", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.17 of @next/plugin-storybook." } }, { "id": "CVE-2026-44578", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:5ef6fb62-c334-55a6-b451-f671878247b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.17 of @next/plugin-storybook." } }, { "id": "CVE-2026-44580", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:49538b6f-899a-577d-be94-ef6c88fe873b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.17 of @next/plugin-storybook." } }, { "id": "CVE-2026-44581", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:dfc67fac-44f9-5990-a97f-1d1d32189d39", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.17 of @next/plugin-storybook." } }, { "id": "CVE-2026-44582", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:a9e88c17-e216-5104-9136-b098de7d8e2f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.17 of @next/plugin-storybook." } }, { "id": "CVE-2026-64641", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:b4bffeda-a45b-5426-a0c2-9005b152ea83", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.17 of @next/plugin-storybook." } }, { "id": "CVE-2026-64643", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:7c481315-8462-5817-8c8d-4a1d6da94ede", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.17 of @next/plugin-storybook." } }, { "id": "CVE-2026-64645", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:495b91f7-a879-5144-b4ca-cb34dc39650d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.17 of @next/plugin-storybook." } }, { "id": "CVE-2026-64646", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:8e44c0ed-2c8d-5fc5-b2c6-1281804e03b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.17 of @next/plugin-storybook." } }, { "id": "CVE-2026-64647", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:cb15b265-adc4-516e-aa12-5d9ce3bc2da9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.17 of @next/plugin-storybook." } }, { "id": "CVE-2026-64648", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:2d6171c7-e51e-57aa-8e38-5d22cd39c527", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64648 is fixed in version 13.5.11-tuxcare.17 of @next/plugin-storybook." } }, { "id": "CVE-2026-75604", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:5fa560e9-1743-5414-b0da-34628e2d8422", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-75604 affects version 13.5.11-tuxcare.17 of @next/plugin-storybook." } }, { "id": "GHSA-2xp9-vwfh-vxw4", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:cb7576ed-64d9-5def-b190-84768f8c1f19", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-2xp9-vwfh-vxw4 affects version 13.5.11-tuxcare.17 of @next/plugin-storybook." } }, { "id": "GHSA-5j59-xgg2-r9c4", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:f4001da8-6bdf-52ca-b102-16fc233a5d07", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.17 of @next/plugin-storybook." } }, { "id": "GHSA-8h8q-6873-q5fj", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:7d0ffa1c-d9b5-5765-8e90-d4aacf6cc72c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.17 of @next/plugin-storybook." } }, { "id": "GHSA-h25m-26qc-wcjf", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:c56da81b-93e1-5cc6-99d7-3d53e4c6074a", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.17 of @next/plugin-storybook." } }, { "id": "GHSA-mwv6-3258-q52c", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:e8a20a1a-83c1-5eb1-a0e8-3c8c51cfef2a", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.17 of @next/plugin-storybook." } }, { "id": "GHSA-q4gf-8mx6-v5v3", "affects": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:6165e85a-66a7-5496-81f0-98982a03b2ea", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.17 of @next/plugin-storybook." } } ], "dependencies": [ { "ref": "pkg:npm/%40next/plugin-storybook@13.5.11-tuxcare.17" } ] }