{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:3f0884a9-514b-563e-932d-a4b4e1b655cf", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@next/eslint-plugin-next", "purl": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12", "type": "library", "bom-ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12", "version": "13.5.11-tuxcare.12", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "AIKIDO-2024-10173", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:a18330df-3d98-5a95-92ed-ffd8b597c446", "analysis": { "state": "exploitable", "detail": "Vulnerability AIKIDO-2024-10173 affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "AIKIDO-2025-10936", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:511fe5de-6e95-567b-8866-e7b4cfa50272", "analysis": { "state": "exploitable", "detail": "Vulnerability AIKIDO-2025-10936 affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2024-34351", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:8921258f-8bb7-5e78-9ed4-56da70af8eb3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-34351 affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2024-47831", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:bc26a182-c3c6-50e4-aeca-3126033ac9b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-47831 affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2024-51479", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:a7554a98-e7cf-5556-b77d-24bdfd6d7b60", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-51479 affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2025-32421", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:34190f71-3ed8-5381-93c1-fd755bbd2c0f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32421 affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2025-48068", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:956a4c83-7404-5f71-ada0-9661b70a7cb6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-48068 affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2025-55173", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:9046fa7f-6a54-525d-8926-7b8135e4b6b2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55173 affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2025-55183", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:1abffdca-314d-553c-8067-3ad8cb7af641", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55183 affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.16." } }, { "id": "CVE-2025-55184", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:e7741579-a8eb-5747-b45b-a955f330bbcf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55184 affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2025-57752", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:d61d8e4f-45ca-5b71-a6fb-ffa459dfac1e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-57752 affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2025-57822", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:2af1407a-5411-5719-96a6-7fa97f3d402b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-57822 affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2025-59471", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:3620a398-0cfc-5549-b350-7e8dc829c317", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59471 affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2025-59472", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:1328423e-8691-523c-adfa-1be04b588b48", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.12 of @next/eslint-plugin-next. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat...", "justification": "code_not_present" } }, { "id": "CVE-2025-67779", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:98b915a6-c483-513c-ba4a-f06a8e8ed3ec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67779 affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2026-27980", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:c343ee1b-0313-507c-a5f4-0d816bdf8d9d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27980 affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2026-29057", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:4b9f4aa5-67b4-5783-b509-807d3b6e3f79", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-29057 affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2026-44572", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:ea4d1426-092c-52c0-a8f6-c0cd258a5bbf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44572 affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2026-44573", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:31fd040a-014f-5737-8e81-322c833c0702", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44573 affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2026-44577", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:88bd1f4d-92ae-5ce7-9eb5-40ba99baca0b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44577 affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-44578", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:a6c6c6d6-e0b2-58f1-abe9-7ccf2f400eaa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44578 affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-44580", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:ff8b8360-6ffc-5d0e-838d-85b5e9908b35", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44580 affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-44581", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:6b33ca84-23dc-5a9b-9afe-063512227ddc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44581 affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-44582", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:e5f0a4b3-af35-53f9-a3fe-ea3b70e8da01", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44582 affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-64641", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:2a5057e0-fa51-5545-a0f0-2287c371decf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64641 affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-64643", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:e2bb31b0-5631-55a9-a05c-3a6626fc4689", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64643 affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-64645", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:8299c523-9e06-5679-bcde-30c62916660e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64645 affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-64646", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:4bf8a1a4-44b3-5a8f-bdeb-0f0a10b57145", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64646 affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-64647", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:c5516122-8f62-52a6-81d2-3b96e87f2bef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64647 affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-64648", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:c9ca20e8-e6cd-534c-b670-f1c057395805", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64648 affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.16." } }, { "id": "CVE-2026-75604", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:3fb8b6c0-2f4d-5940-b278-300003ca1903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-75604 affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next." } }, { "id": "GHSA-2xp9-vwfh-vxw4", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:0c575e14-3f42-5c2d-8265-5fd3a83cdceb", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-2xp9-vwfh-vxw4 affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next." } }, { "id": "GHSA-5j59-xgg2-r9c4", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:a9197b27-d069-58b0-9dd3-aaadaac7dbde", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "GHSA-8h8q-6873-q5fj", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:b2bbd3df-b2a8-5d9d-9622-34dde0f947d1", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-8h8q-6873-q5fj affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "GHSA-h25m-26qc-wcjf", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:9866f4a9-2fa5-5da9-b1db-dab0b58bc643", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-h25m-26qc-wcjf affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "GHSA-mwv6-3258-q52c", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:0532c03e-5c5c-50e6-a2f2-86378728a72f", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mwv6-3258-q52c affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "GHSA-q4gf-8mx6-v5v3", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ], "bom-ref": "urn:uuid:d4da5a52-7a98-5e07-88b3-c404a4912919", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 affects version 13.5.11-tuxcare.12 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } } ], "dependencies": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.12" } ] }