{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:ad5724ee-c4ba-5888-9103-e7b74b0902ab", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "create-next-app", "purl": "pkg:npm/create-next-app@13.5.11-tuxcare.17", "type": "library", "bom-ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17", "version": "13.5.11-tuxcare.17", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "AIKIDO-2024-10173", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:8143efc2-140a-594b-86d7-bab8f416a690", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.17 of create-next-app." } }, { "id": "AIKIDO-2025-10936", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:c4b96549-81f2-5ba7-a445-3f8a076afc21", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.17 of create-next-app." } }, { "id": "CVE-2024-34351", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:dd67baa3-f6b4-5cdf-bc0f-d9a95a2b2a1a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.17 of create-next-app." } }, { "id": "CVE-2024-47831", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:f97ef090-20e2-57d9-abd0-0b35590135f3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.17 of create-next-app." } }, { "id": "CVE-2024-51479", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:13158e2a-5dcc-5865-9148-81215cde8256", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.17 of create-next-app." } }, { "id": "CVE-2025-32421", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:4bb2c13f-97bd-5118-98cd-143829ee4fe2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.17 of create-next-app." } }, { "id": "CVE-2025-48068", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:e04d74a5-e441-5027-b8ab-b06abe094cbd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.17 of create-next-app." } }, { "id": "CVE-2025-55173", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:8db67e91-41e2-5352-b2c4-f155640ba006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.17 of create-next-app." } }, { "id": "CVE-2025-55183", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:59e0d4a3-513d-5779-8b46-5645df67fc37", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55183 is fixed in version 13.5.11-tuxcare.17 of create-next-app." } }, { "id": "CVE-2025-55184", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:ef4530eb-72f0-5ca3-9c9e-505462d779a7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.17 of create-next-app." } }, { "id": "CVE-2025-57752", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:38b34288-2461-5cfd-ac3d-52ecc933617a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.17 of create-next-app." } }, { "id": "CVE-2025-57822", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:6b62c593-865a-52d6-8350-be3802b7e6ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.17 of create-next-app." } }, { "id": "CVE-2025-59471", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:b9449265-f0f4-53be-99c1-37f0d13ec443", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.17 of create-next-app." } }, { "id": "CVE-2025-59472", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:bd0a777f-a541-556a-a789-faa77c4ede6f", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.17 of create-next-app. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat...", "justification": "code_not_present" } }, { "id": "CVE-2025-67779", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:e551d7b3-182e-5c19-bd2b-a2afca78fb1f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.17 of create-next-app." } }, { "id": "CVE-2026-27980", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:fe8841e8-ee1d-5f26-88af-14740e64fdca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.17 of create-next-app." } }, { "id": "CVE-2026-29057", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:fc710298-6381-50f9-a4d3-d66b31701c5c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.17 of create-next-app." } }, { "id": "CVE-2026-44572", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:db78ca0a-1e83-530d-9545-52e95e74d51a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.17 of create-next-app." } }, { "id": "CVE-2026-44573", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:2263c563-e26e-5584-ae3c-0df48f95dfab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.17 of create-next-app." } }, { "id": "CVE-2026-44577", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:d402c3d9-6544-50fc-bc0f-4c396aa6afe8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.17 of create-next-app." } }, { "id": "CVE-2026-44578", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:a5e59c16-b313-52b8-af90-c78fd7a59906", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.17 of create-next-app." } }, { "id": "CVE-2026-44580", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:41abae11-de1f-5b12-bcea-01bfa75a518a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.17 of create-next-app." } }, { "id": "CVE-2026-44581", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:e8162780-e832-5f30-a1fb-254d3fc0ba41", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.17 of create-next-app." } }, { "id": "CVE-2026-44582", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:b41779a3-625c-56f8-98f6-d498f597cc17", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.17 of create-next-app." } }, { "id": "CVE-2026-64641", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:b31e12c1-cc25-59eb-b6d9-e50562169470", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.17 of create-next-app." } }, { "id": "CVE-2026-64643", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:f36a3c13-0e08-53c2-a8aa-56d8d7332ef9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.17 of create-next-app." } }, { "id": "CVE-2026-64645", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:b8644b05-8c03-573e-9bcd-bb9a9640351e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.17 of create-next-app." } }, { "id": "CVE-2026-64646", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:f131087d-5019-5f7d-ad92-99b3170e2361", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.17 of create-next-app." } }, { "id": "CVE-2026-64647", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:68b68af1-1ead-5d13-9dee-62414818d5d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.17 of create-next-app." } }, { "id": "CVE-2026-64648", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:63689b75-0af4-5040-baf5-047cc6382b71", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64648 is fixed in version 13.5.11-tuxcare.17 of create-next-app." } }, { "id": "CVE-2026-75604", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:402eaa74-bfa8-5f98-8269-c78530136a8d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-75604 affects version 13.5.11-tuxcare.17 of create-next-app." } }, { "id": "GHSA-2xp9-vwfh-vxw4", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:8686ee54-6b33-5107-bb37-6c1e4db2c9a0", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-2xp9-vwfh-vxw4 affects version 13.5.11-tuxcare.17 of create-next-app." } }, { "id": "GHSA-5j59-xgg2-r9c4", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:d11cfbc8-a2df-5585-b1ea-c3d558ce190a", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.17 of create-next-app." } }, { "id": "GHSA-8h8q-6873-q5fj", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:25cdc23d-a42a-574b-9415-14012ca0edbd", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.17 of create-next-app." } }, { "id": "GHSA-h25m-26qc-wcjf", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:39d87c48-f74f-54c6-a605-d634e0cdb911", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.17 of create-next-app." } }, { "id": "GHSA-mwv6-3258-q52c", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:2bc46ff2-9abe-5fb4-8210-c4c9f304540f", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.17 of create-next-app." } }, { "id": "GHSA-q4gf-8mx6-v5v3", "affects": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:c6a84738-2df4-5576-bbd9-2f13f1fbc336", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.17 of create-next-app." } } ], "dependencies": [ { "ref": "pkg:npm/create-next-app@13.5.11-tuxcare.17" } ] }