{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a3ddee8f-0966-5ca4-bbf8-26850c28e228", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "next", "purl": "pkg:npm/next@13.5.11-tuxcare.17", "type": "library", "bom-ref": "pkg:npm/next@13.5.11-tuxcare.17", "version": "13.5.11-tuxcare.17", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "AIKIDO-2024-10173", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:2384e3e6-272c-5d6a-8c35-232cef98df15", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.17 of next." } }, { "id": "AIKIDO-2025-10936", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:b8df6d71-529b-5c71-afec-dccc91908bf3", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.17 of next." } }, { "id": "CVE-2024-34351", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:64925ca9-55e2-593e-b8a8-b575a659ae7f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.17 of next." } }, { "id": "CVE-2024-47831", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:aae9eff4-b40b-5cb9-8942-58fa48ed8fa2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.17 of next." } }, { "id": "CVE-2024-51479", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:0a48dc79-4e7e-5eb6-8b2f-52019e3c1ee2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.17 of next." } }, { "id": "CVE-2025-32421", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:57bb5560-e353-57af-bb18-a5c4e8d80c86", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.17 of next." } }, { "id": "CVE-2025-48068", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:365c7a5b-53af-5a9c-94be-1199e1a17651", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.17 of next." } }, { "id": "CVE-2025-55173", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:d34afa10-a0cb-5807-bbe2-621b8cb72ffe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.17 of next." } }, { "id": "CVE-2025-55183", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:1a65e581-859f-55fa-b424-3472cc024672", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55183 is fixed in version 13.5.11-tuxcare.17 of next." } }, { "id": "CVE-2025-55184", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:a26dd447-4652-598d-9473-eec649268d32", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.17 of next." } }, { "id": "CVE-2025-57752", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:d601357d-2981-518c-a8f4-dee2dc8f34ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.17 of next." } }, { "id": "CVE-2025-57822", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:4c32831d-6f51-5447-b23d-d2e9e5d66fdc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.17 of next." } }, { "id": "CVE-2025-59471", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:f8ac15f3-89d3-58b9-a9b4-26b7a665a452", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.17 of next." } }, { "id": "CVE-2025-59472", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:884f4642-e7f3-5078-9c9b-4ac024015739", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.17 of next. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat...", "justification": "code_not_present" } }, { "id": "CVE-2025-67779", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:8e02830d-a6d1-5023-83f5-6f8d4aba8238", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.17 of next." } }, { "id": "CVE-2026-27980", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:1b628bff-090c-54c9-b3b4-fbc0fd3b12a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.17 of next." } }, { "id": "CVE-2026-29057", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:ab06828d-29e2-5a6a-9fad-004c5be6c1f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.17 of next." } }, { "id": "CVE-2026-44572", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:28367e5f-f58f-50e7-977d-c3b900b916c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.17 of next." } }, { "id": "CVE-2026-44573", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:3de9ac43-6f22-5ebc-83d8-a1219458dae5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.17 of next." } }, { "id": "CVE-2026-44577", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:836c0f4d-5986-577e-9832-d76758355e64", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.17 of next." } }, { "id": "CVE-2026-44578", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:8c55175f-2f20-57dd-ba97-d17a005a8043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.17 of next." } }, { "id": "CVE-2026-44580", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:68b6a608-004f-5ee6-8659-9d185516c899", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.17 of next." } }, { "id": "CVE-2026-44581", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:6b5542f7-cf93-5bae-930c-e982f2a7e9d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.17 of next." } }, { "id": "CVE-2026-44582", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:d2fd273e-8175-5e84-8ce5-4dcaab2b6cc4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.17 of next." } }, { "id": "CVE-2026-64641", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:220e53bc-d1b3-5fed-ab5f-8f1aab1ab144", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.17 of next." } }, { "id": "CVE-2026-64643", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:a6fdea84-7ec1-568f-a2bb-c03be16d2a4a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.17 of next." } }, { "id": "CVE-2026-64645", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:f69d2c39-fb89-5ca3-8812-8ed23396ce3a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.17 of next." } }, { "id": "CVE-2026-64646", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:85a5b30b-f519-5611-b4da-0403bbaae017", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.17 of next." } }, { "id": "CVE-2026-64647", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:88134f25-2304-58c9-a0e3-b7c922a0f77f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.17 of next." } }, { "id": "CVE-2026-64648", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:77b57b89-51fb-5ae7-b6a6-b6891d91e4bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64648 is fixed in version 13.5.11-tuxcare.17 of next." } }, { "id": "CVE-2026-75604", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:4cd66e39-3149-5aef-bd43-90d4d65290ea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-75604 affects version 13.5.11-tuxcare.17 of next." } }, { "id": "GHSA-2xp9-vwfh-vxw4", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:1395ec45-70f1-5c52-b3e0-accb9c1dd48e", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-2xp9-vwfh-vxw4 affects version 13.5.11-tuxcare.17 of next." } }, { "id": "GHSA-5j59-xgg2-r9c4", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:3e1d6581-53bc-5764-9824-2481393d780b", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.17 of next." } }, { "id": "GHSA-8h8q-6873-q5fj", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:90cc848b-c022-5c55-b548-6022a95132aa", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.17 of next." } }, { "id": "GHSA-h25m-26qc-wcjf", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:a9db5474-6562-588c-b14f-7c508725a314", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.17 of next." } }, { "id": "GHSA-mwv6-3258-q52c", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:f59beb10-28b7-5d72-a170-10c51b8a6518", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.17 of next." } }, { "id": "GHSA-q4gf-8mx6-v5v3", "affects": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:7871f447-0514-5800-8e38-5cb1d24f9106", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.17 of next." } } ], "dependencies": [ { "ref": "pkg:npm/next@13.5.11-tuxcare.17" } ] }