{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b9ba9cac-edff-5128-99fa-89be5acf5175", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@next/third-parties", "purl": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17", "type": "library", "bom-ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17", "version": "13.5.11-tuxcare.17", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "AIKIDO-2024-10173", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:9ac64221-8f33-5a10-a82b-18f5bfd5efaa", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.17 of @next/third-parties." } }, { "id": "AIKIDO-2025-10936", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:21694942-a4f9-58c3-b676-306b57efae92", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.17 of @next/third-parties." } }, { "id": "CVE-2024-34351", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:015080fe-accc-5b2d-914f-718a7bacee79", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.17 of @next/third-parties." } }, { "id": "CVE-2024-47831", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:9c6f3d67-a677-5a21-827e-bd44449d0d73", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.17 of @next/third-parties." } }, { "id": "CVE-2024-51479", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:ebeab4c2-f6ad-57ae-898a-13f08c98d72e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.17 of @next/third-parties." } }, { "id": "CVE-2025-32421", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:15846f60-5810-5f6e-b86c-65b8a87fcd26", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.17 of @next/third-parties." } }, { "id": "CVE-2025-48068", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:de3c24c1-ad4b-5b0c-8b91-fbb05c8a51a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.17 of @next/third-parties." } }, { "id": "CVE-2025-55173", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:8aa1447a-2a9f-5ab9-b3e3-66999c3d921f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.17 of @next/third-parties." } }, { "id": "CVE-2025-55183", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:ed41e8b7-b6bb-5768-aa97-04f99aeac687", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55183 is fixed in version 13.5.11-tuxcare.17 of @next/third-parties." } }, { "id": "CVE-2025-55184", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:44e8c480-af61-536e-8fae-3c5add6cd09f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.17 of @next/third-parties." } }, { "id": "CVE-2025-57752", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:9139358c-2b47-52ca-92cb-cabce2f2fe9e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.17 of @next/third-parties." } }, { "id": "CVE-2025-57822", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:f09f2d28-b105-52a9-ba6d-e3c4c79b84cc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.17 of @next/third-parties." } }, { "id": "CVE-2025-59471", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:2815c507-ea0b-5500-b624-a3d4eda43da1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.17 of @next/third-parties." } }, { "id": "CVE-2025-59472", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:dc51e0d3-18ca-5de7-8433-60ffd1201213", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.17 of @next/third-parties. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat...", "justification": "code_not_present" } }, { "id": "CVE-2025-67779", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:f09f222c-4986-5d4d-ac31-cabf5c407b1e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.17 of @next/third-parties." } }, { "id": "CVE-2026-27980", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:54f89e6e-058c-5569-bb77-2c266ee744e8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.17 of @next/third-parties." } }, { "id": "CVE-2026-29057", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:0e44a9cd-d528-5b7c-8622-1e4acfb65807", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.17 of @next/third-parties." } }, { "id": "CVE-2026-44572", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:01f66747-28e0-56d4-8a32-05a8aa2b1998", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.17 of @next/third-parties." } }, { "id": "CVE-2026-44573", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:caa87ec8-13f3-5e9c-95c6-ea22b80286b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.17 of @next/third-parties." } }, { "id": "CVE-2026-44577", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:46a83e1f-2ead-5ccb-8673-e075c34b1af3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.17 of @next/third-parties." } }, { "id": "CVE-2026-44578", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:ff8b9ee2-2ef3-5c81-b3fe-61659b290998", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.17 of @next/third-parties." } }, { "id": "CVE-2026-44580", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:0e04bef9-ebb6-50ba-977f-094fe0ca01f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.17 of @next/third-parties." } }, { "id": "CVE-2026-44581", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:c0d489e4-abab-5b75-a6aa-4fde2e07c79d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.17 of @next/third-parties." } }, { "id": "CVE-2026-44582", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:77241144-5ce9-57b1-af46-34a0464de3e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.17 of @next/third-parties." } }, { "id": "CVE-2026-64641", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:8118cb1f-64ec-5eff-b89f-d40150d1d575", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.17 of @next/third-parties." } }, { "id": "CVE-2026-64643", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:707b6585-9884-5aff-8301-a3678c4b0372", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.17 of @next/third-parties." } }, { "id": "CVE-2026-64645", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:73c5d28b-c2a3-544f-86cc-fc2b2dff56ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.17 of @next/third-parties." } }, { "id": "CVE-2026-64646", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:2ffd20dc-22c8-544d-9fe2-743abdd84bec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.17 of @next/third-parties." } }, { "id": "CVE-2026-64647", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:85bd2daa-0f5b-554c-9b65-f4ab29b36327", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.17 of @next/third-parties." } }, { "id": "CVE-2026-64648", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:245177c8-eccf-5b9e-a94f-3a695db3cf69", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64648 is fixed in version 13.5.11-tuxcare.17 of @next/third-parties." } }, { "id": "CVE-2026-75604", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:ec78d254-46eb-5949-b6cc-5b2b1ed5949f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-75604 affects version 13.5.11-tuxcare.17 of @next/third-parties." } }, { "id": "GHSA-2xp9-vwfh-vxw4", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:e410b4a3-e704-59a3-b4a8-f4415d30e2e2", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-2xp9-vwfh-vxw4 affects version 13.5.11-tuxcare.17 of @next/third-parties." } }, { "id": "GHSA-5j59-xgg2-r9c4", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:1a44451a-4742-56f6-8ef4-09a9d8ea1c49", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.17 of @next/third-parties." } }, { "id": "GHSA-8h8q-6873-q5fj", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:f4bc57b7-337a-58f4-8d57-ef8db3ac5240", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.17 of @next/third-parties." } }, { "id": "GHSA-h25m-26qc-wcjf", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:3210682f-c99f-5fa3-828c-3728ce5616e2", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.17 of @next/third-parties." } }, { "id": "GHSA-mwv6-3258-q52c", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:4b504176-4be4-5e3b-934e-75605e5106a2", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.17 of @next/third-parties." } }, { "id": "GHSA-q4gf-8mx6-v5v3", "affects": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:5ef47e92-15b7-5a13-994a-4bfda9bd483f", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.17 of @next/third-parties." } } ], "dependencies": [ { "ref": "pkg:npm/%40next/third-parties@13.5.11-tuxcare.17" } ] }