{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b5526967-f6d0-53d6-b3eb-4a6b53ee83f9", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@next/polyfill-nomodule", "purl": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17", "type": "library", "bom-ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17", "version": "13.5.11-tuxcare.17", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "AIKIDO-2024-10173", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:2ba6f69b-9c3a-55a3-8218-af95cb921d60", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } }, { "id": "AIKIDO-2025-10936", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:2dee5a08-6bef-578d-818c-f2984ba7d0bc", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } }, { "id": "CVE-2024-34351", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:d020280e-91e8-5da8-8a0e-7a4ab4511a3c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } }, { "id": "CVE-2024-47831", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:edab8186-8a60-5dd1-9a29-f8d706ba02b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } }, { "id": "CVE-2024-51479", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:8f01afe1-307e-5f10-8c0a-588cb930645c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } }, { "id": "CVE-2025-32421", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:d58297cb-3ecb-53d8-914f-dbf520769de5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } }, { "id": "CVE-2025-48068", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:2c74ac99-79f0-5d6b-8d4c-59d42e40f78d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } }, { "id": "CVE-2025-55173", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:0b759f00-c9e9-5f29-81f7-d14a534c2ac8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } }, { "id": "CVE-2025-55183", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:9a9007b2-0c34-5b56-92eb-be8c462a1bc9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55183 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } }, { "id": "CVE-2025-55184", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:22290a04-d1d8-5877-aedd-0d9c7530dc91", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } }, { "id": "CVE-2025-57752", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:a914c9a6-1e3c-5c57-8155-d88974a9d3ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } }, { "id": "CVE-2025-57822", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:c4cd87ff-7f1d-5d10-bfe7-200ee737091d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } }, { "id": "CVE-2025-59471", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:9e74bfe6-4926-5c1c-88c1-65d4fe758adf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } }, { "id": "CVE-2025-59472", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:5ba49732-a102-5642-b4ab-8ac3ee39d08b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.17 of @next/polyfill-nomodule. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat...", "justification": "code_not_present" } }, { "id": "CVE-2025-67779", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:91b9cb80-ae8a-5aee-81ab-fd3f931b060c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } }, { "id": "CVE-2026-27980", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:4ee2fecf-62f3-5ce5-95fb-06d4dec9f2fe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } }, { "id": "CVE-2026-29057", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:e1b1fb1d-9cd8-5660-94f5-0d3ddbb73920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } }, { "id": "CVE-2026-44572", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:15400c87-da34-5be2-84ca-eed89c2c94c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } }, { "id": "CVE-2026-44573", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:41e9b8de-bab6-55c5-9674-0123012f5b51", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } }, { "id": "CVE-2026-44577", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:e52351f5-9b16-5775-b3b2-71a43aebe340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } }, { "id": "CVE-2026-44578", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:8c1eaf50-cec0-5939-9603-b0abaddd173d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } }, { "id": "CVE-2026-44580", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:dcbca699-89d3-55f3-a175-323efa1cacc8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } }, { "id": "CVE-2026-44581", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:63673907-1dc2-50ed-8220-6ffb51cd67bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } }, { "id": "CVE-2026-44582", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:44a7df78-e9d2-552b-83e7-5e8ddae65034", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } }, { "id": "CVE-2026-64641", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:c97ee109-52e3-57ec-b22c-be55e43cb55a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } }, { "id": "CVE-2026-64643", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:f0640e9c-a5ab-51c5-81a9-b620e6e43466", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } }, { "id": "CVE-2026-64645", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:2387c278-043b-59f9-990a-be4e65b45862", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } }, { "id": "CVE-2026-64646", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:e987ba8b-ca01-5b40-9c7e-d52764123870", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } }, { "id": "CVE-2026-64647", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:7bbd248e-35bb-5eea-be97-70c2be0deef9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } }, { "id": "CVE-2026-64648", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:d40688c1-0bbc-514c-9582-7e8bcfc4b6c4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64648 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } }, { "id": "CVE-2026-75604", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:4597649b-2470-5c8e-8d11-e2c2d65364f7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-75604 affects version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } }, { "id": "GHSA-2xp9-vwfh-vxw4", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:253f278d-6165-54da-a4ba-2f8ec71d276a", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-2xp9-vwfh-vxw4 affects version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } }, { "id": "GHSA-5j59-xgg2-r9c4", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:e9e2bb2e-7271-5b40-b860-8d3b932b5587", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } }, { "id": "GHSA-8h8q-6873-q5fj", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:cecf136b-08aa-5ffd-b9de-36b32fc9ce81", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } }, { "id": "GHSA-h25m-26qc-wcjf", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:a2c80fd3-a838-56b3-89eb-fe1d25da0a5e", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } }, { "id": "GHSA-mwv6-3258-q52c", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:82a714ce-a63b-5634-bfd6-6a4b4aa18ff9", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } }, { "id": "GHSA-q4gf-8mx6-v5v3", "affects": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:cd180817-7b59-5d6c-be49-68ad89a5c989", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.17 of @next/polyfill-nomodule." } } ], "dependencies": [ { "ref": "pkg:npm/%40next/polyfill-nomodule@13.5.11-tuxcare.17" } ] }