{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b7f52488-a5c0-556b-bc72-396f3ee43726", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@next/react-refresh-utils", "purl": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17", "type": "library", "bom-ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17", "version": "13.5.11-tuxcare.17", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "AIKIDO-2024-10173", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:e79cd28a-935b-5da6-8002-250397acbb54", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } }, { "id": "AIKIDO-2025-10936", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:4659f666-6723-5f7e-ba00-1688f0740754", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } }, { "id": "CVE-2024-34351", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:5e37ffbf-0357-5338-8b7a-3255f17ef04b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } }, { "id": "CVE-2024-47831", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:37b00436-b906-5ceb-b7c3-7b6c29b7f72a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } }, { "id": "CVE-2024-51479", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:8d65d2ca-c055-5b45-b6d8-9c1128758c5d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } }, { "id": "CVE-2025-32421", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:927f7111-bc54-5abb-9fb6-5981bab072a8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } }, { "id": "CVE-2025-48068", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:80d7cce8-860e-5c7b-9f8a-ddba5aee2d3d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } }, { "id": "CVE-2025-55173", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:4e014346-ed7e-518e-b576-d7a40fa7e590", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } }, { "id": "CVE-2025-55183", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:6782b2f8-40ba-575a-b4c4-817b0648249c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55183 is fixed in version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } }, { "id": "CVE-2025-55184", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:2860ed06-95ab-579f-86c7-5ff41f0b21a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } }, { "id": "CVE-2025-57752", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:f42f73a4-6127-5535-9262-7acf85842f8d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } }, { "id": "CVE-2025-57822", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:1556b287-60a5-5176-8179-dd25e828ef35", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } }, { "id": "CVE-2025-59471", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:c7d2698c-1158-5da0-8482-5f4a6050e402", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } }, { "id": "CVE-2025-59472", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:19d904c0-08d6-5633-8faa-263801ecece1", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.17 of @next/react-refresh-utils. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat...", "justification": "code_not_present" } }, { "id": "CVE-2025-67779", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:2ae0c343-00bb-5c14-b12e-07b222939f64", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } }, { "id": "CVE-2026-27980", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:089e6f43-09ec-5752-a5c9-03b62209a1f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } }, { "id": "CVE-2026-29057", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:f2d1c5d0-2054-5a31-b683-618dbcfddbc4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } }, { "id": "CVE-2026-44572", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:9f6c71ca-ec0c-5768-a44e-4fc2ed079e4a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } }, { "id": "CVE-2026-44573", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:4065cc1f-5a89-5729-b569-19abeb862d90", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } }, { "id": "CVE-2026-44577", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:0732c72e-add8-5d14-b06e-f0308aba3377", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } }, { "id": "CVE-2026-44578", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:a361aa34-d6f8-50ac-a09e-7300555948f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } }, { "id": "CVE-2026-44580", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:74d9cd65-583c-56ea-80b4-64d6d41b7be8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } }, { "id": "CVE-2026-44581", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:21e68c6c-2e7c-501a-bd08-fe2f9ac02801", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } }, { "id": "CVE-2026-44582", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:1cf7d7b0-ccf8-53c7-b5e3-26122dc753bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } }, { "id": "CVE-2026-64641", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:a5e2a60a-e0c9-529b-b66f-f293b8c4dca7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } }, { "id": "CVE-2026-64643", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:258b214b-a969-5570-a7a8-d0708dad9e27", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } }, { "id": "CVE-2026-64645", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:b6b39909-7b41-53f2-9c0e-c300e9ce15c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } }, { "id": "CVE-2026-64646", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:987cc7b9-6768-5479-8208-d2b1671373dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } }, { "id": "CVE-2026-64647", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:b02bc0e5-854d-5791-bfa2-3f59f6ea3e77", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } }, { "id": "CVE-2026-64648", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:47b1c45c-71be-55c2-9557-433fcafe33b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64648 is fixed in version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } }, { "id": "CVE-2026-75604", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:1c7b2abb-fc05-5191-8233-ebab26df9540", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-75604 affects version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } }, { "id": "GHSA-2xp9-vwfh-vxw4", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:0797985d-d403-5d46-bc6e-e05931eb17d9", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-2xp9-vwfh-vxw4 affects version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } }, { "id": "GHSA-5j59-xgg2-r9c4", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:12039c83-b788-50e5-a372-44189091c907", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } }, { "id": "GHSA-8h8q-6873-q5fj", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:9e9e855e-b81d-5743-96dd-f1e5f17c27a2", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } }, { "id": "GHSA-h25m-26qc-wcjf", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:8faf3a2e-4fab-576a-94f0-2aeac2ce25e6", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } }, { "id": "GHSA-mwv6-3258-q52c", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:118b0282-c29b-5824-ac92-b5adbfc49586", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } }, { "id": "GHSA-q4gf-8mx6-v5v3", "affects": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:607c0d61-cb39-56bd-b4de-407e7e5ee8df", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.17 of @next/react-refresh-utils." } } ], "dependencies": [ { "ref": "pkg:npm/%40next/react-refresh-utils@13.5.11-tuxcare.17" } ] }