{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:c58995f9-27ad-55ca-997c-b91d03a31aa3", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@next/polyfill-module", "purl": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17", "type": "library", "bom-ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17", "version": "13.5.11-tuxcare.17", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "AIKIDO-2024-10173", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:0dafd026-76e5-5744-aab8-ebf971ec2eb4", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-module." } }, { "id": "AIKIDO-2025-10936", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:7b421082-9c4d-58f3-ab8a-38000b154eb0", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-module." } }, { "id": "CVE-2024-34351", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:f3bbab6f-72df-5cef-9e07-d04dcce63206", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-module." } }, { "id": "CVE-2024-47831", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:e40cfbec-14b5-54a7-98f0-df3662589041", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-module." } }, { "id": "CVE-2024-51479", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:9f92c261-43e2-51c1-a2aa-b2544600b6d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-module." } }, { "id": "CVE-2025-32421", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:3e5114b0-2e11-5bbd-ba6a-1d47cbb03a08", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-module." } }, { "id": "CVE-2025-48068", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:68f0ac69-21b2-5142-a9ab-8a45dce89542", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-module." } }, { "id": "CVE-2025-55173", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:666f15ed-ead3-5f20-aafe-710ba52378cb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-module." } }, { "id": "CVE-2025-55183", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:f797e7da-0c01-5031-8dd5-ada834c6d12a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55183 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-module." } }, { "id": "CVE-2025-55184", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:e31b2709-ab05-5998-8dac-875e80cb94e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-module." } }, { "id": "CVE-2025-57752", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:3279c807-466a-5bb3-95d4-069aa843f919", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-module." } }, { "id": "CVE-2025-57822", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:3c889617-ab02-55ca-84cd-077e9edcd587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-module." } }, { "id": "CVE-2025-59471", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:b56ab123-9762-5766-a387-ae42b4a9ae77", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-module." } }, { "id": "CVE-2025-59472", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:68f82811-a706-5141-b8d6-60dbab9449a8", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.17 of @next/polyfill-module. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat...", "justification": "code_not_present" } }, { "id": "CVE-2025-67779", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:91499e76-130d-5e20-835e-d3567fccb5bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-module." } }, { "id": "CVE-2026-27980", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:ebdc85db-9c7e-5b05-8e0a-2efe278b08c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-module." } }, { "id": "CVE-2026-29057", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:2194b849-8ab9-5ae8-92cd-78618ce87a91", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-module." } }, { "id": "CVE-2026-44572", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:1838b63a-a273-5b22-952a-c732ad050908", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-module." } }, { "id": "CVE-2026-44573", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:87c16649-74d6-5555-ad47-10895a91d1e0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-module." } }, { "id": "CVE-2026-44577", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:8fc285ba-54b8-5008-a120-f890caaa55ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-module." } }, { "id": "CVE-2026-44578", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:9f1208e6-11b5-532d-a74f-99044120d095", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-module." } }, { "id": "CVE-2026-44580", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:52e772a6-66c2-5391-ad87-6fe8f533b362", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-module." } }, { "id": "CVE-2026-44581", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:5b78ed31-517c-5305-b25d-aa51f668f0cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-module." } }, { "id": "CVE-2026-44582", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:d5012949-b74f-5cdd-a208-9b4fcd662d1a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-module." } }, { "id": "CVE-2026-64641", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:04d0fc57-a24f-5578-8a58-0becf1f0fe6d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-module." } }, { "id": "CVE-2026-64643", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:bffd45e7-dfc1-5fb2-8c9f-ee7f103f4214", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-module." } }, { "id": "CVE-2026-64645", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:a479b786-57ab-5cbe-9ca6-4f90a6763753", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-module." } }, { "id": "CVE-2026-64646", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:cdb9e264-1e9d-5fe7-a543-8d6d097b5c4f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-module." } }, { "id": "CVE-2026-64647", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:b4bd4012-2068-5ecf-8dda-e6a2b268d52e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-module." } }, { "id": "CVE-2026-64648", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:892b9232-4bd9-5b1c-907a-cfb77f2fb743", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64648 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-module." } }, { "id": "CVE-2026-75604", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:0eea5619-acd2-521d-b433-044431fa587d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-75604 affects version 13.5.11-tuxcare.17 of @next/polyfill-module." } }, { "id": "GHSA-2xp9-vwfh-vxw4", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:11beee12-fde5-5445-8971-a274969dd1a4", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-2xp9-vwfh-vxw4 affects version 13.5.11-tuxcare.17 of @next/polyfill-module." } }, { "id": "GHSA-5j59-xgg2-r9c4", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:76324f41-f6a2-54f7-9a18-63e0f807f780", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-module." } }, { "id": "GHSA-8h8q-6873-q5fj", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:352b8862-d34d-591c-8ced-a6ef8cfc7a0e", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-module." } }, { "id": "GHSA-h25m-26qc-wcjf", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:4af2044d-d9cc-58fd-932f-6e8df9be357a", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-module." } }, { "id": "GHSA-mwv6-3258-q52c", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:35542cc8-fc52-5d37-b515-a28483b5716d", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-module." } }, { "id": "GHSA-q4gf-8mx6-v5v3", "affects": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:38f87be2-2933-59ca-826f-bd77c5404764", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-module." } } ], "dependencies": [ { "ref": "pkg:npm/%40next/polyfill-module@13.5.11-tuxcare.17" } ] }