{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:67e1e9dc-4ca5-58ac-8a18-304d702d842f", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@next/eslint-plugin-next", "purl": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14", "type": "library", "bom-ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14", "version": "13.5.11-tuxcare.14", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "AIKIDO-2024-10173", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:eba8c664-ba4a-5a98-8ad4-4a4d067ea3b8", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.14 of @next/eslint-plugin-next." } }, { "id": "AIKIDO-2025-10936", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:d471ba39-fb70-5ec9-a208-3d291a216b93", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.14 of @next/eslint-plugin-next." } }, { "id": "CVE-2024-34351", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:f19f99f9-93df-57ab-896d-8f0d2beab226", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.14 of @next/eslint-plugin-next." } }, { "id": "CVE-2024-47831", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:476ad14b-94b3-5f0d-b06a-c46e516cf28f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.14 of @next/eslint-plugin-next." } }, { "id": "CVE-2024-51479", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:18fe2754-f6e3-5cc6-a215-bbc474673bdd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.14 of @next/eslint-plugin-next." } }, { "id": "CVE-2025-32421", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:1bb331a3-ac8f-5ab7-ade5-0e73a559df0b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.14 of @next/eslint-plugin-next." } }, { "id": "CVE-2025-48068", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:f4ba5e4e-d7c5-5a83-bb6d-e63c86a3602c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.14 of @next/eslint-plugin-next." } }, { "id": "CVE-2025-55173", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:a1b46299-18af-556a-a5a7-ff930ea212d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.14 of @next/eslint-plugin-next." } }, { "id": "CVE-2025-55183", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:8292a0d2-f38e-5466-a501-f8364cb3f80b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55183 affects version 13.5.11-tuxcare.14 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.16." } }, { "id": "CVE-2025-55184", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:2c07eac6-8972-5e99-a41c-0b749685d9b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.14 of @next/eslint-plugin-next." } }, { "id": "CVE-2025-57752", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:712cb9cc-c83b-551e-a343-5aee10b1fc5c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.14 of @next/eslint-plugin-next." } }, { "id": "CVE-2025-57822", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:f26808ce-91c5-5104-866f-3d4bd8a38a68", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.14 of @next/eslint-plugin-next." } }, { "id": "CVE-2025-59471", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:8957dd7f-eea1-5570-8f44-5833c97a5659", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.14 of @next/eslint-plugin-next." } }, { "id": "CVE-2025-59472", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:f5f3dc0c-5dc1-5250-b5bd-7d9591be855b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.14 of @next/eslint-plugin-next. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat...", "justification": "code_not_present" } }, { "id": "CVE-2025-67779", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:933bad79-4de1-5b91-8e91-7c81a06aeafa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.14 of @next/eslint-plugin-next." } }, { "id": "CVE-2026-27980", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:e95f2397-0098-5271-b6e8-b422c93fc609", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.14 of @next/eslint-plugin-next." } }, { "id": "CVE-2026-29057", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:502df87a-a7ac-5465-82af-ae2ad3f82784", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.14 of @next/eslint-plugin-next." } }, { "id": "CVE-2026-44572", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:52077751-1948-516a-8791-48f375ddf077", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.14 of @next/eslint-plugin-next." } }, { "id": "CVE-2026-44573", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:d95b78f0-9482-5676-8154-d1246946d1db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.14 of @next/eslint-plugin-next." } }, { "id": "CVE-2026-44577", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:01b55f76-03a0-583f-b4dc-9eb097ee1e7e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.14 of @next/eslint-plugin-next." } }, { "id": "CVE-2026-44578", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:dd52264c-01c5-5937-a829-dd263494e792", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.14 of @next/eslint-plugin-next." } }, { "id": "CVE-2026-44580", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:8c0e92af-b9c7-52e4-88e6-a174f0cc5736", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.14 of @next/eslint-plugin-next." } }, { "id": "CVE-2026-44581", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:5a0b29d3-d158-5b88-b99f-1f99eec97d2d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.14 of @next/eslint-plugin-next." } }, { "id": "CVE-2026-44582", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:f9935bc2-f6e7-5953-b81c-aefad12358b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.14 of @next/eslint-plugin-next." } }, { "id": "CVE-2026-64641", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:2c312a50-07ab-52fb-a3ee-9fff7104a0f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.14 of @next/eslint-plugin-next." } }, { "id": "CVE-2026-64643", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:af69699a-b3d4-55d8-81dc-e843b1313a30", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.14 of @next/eslint-plugin-next." } }, { "id": "CVE-2026-64645", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:2a9ee2c6-4155-567b-8464-6da48092d66e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.14 of @next/eslint-plugin-next." } }, { "id": "CVE-2026-64646", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:9594b28c-78d3-597d-99b0-03ac57f6df8e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.14 of @next/eslint-plugin-next." } }, { "id": "CVE-2026-64647", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:dad36c45-22a7-5d06-9e01-89f9899d810e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.14 of @next/eslint-plugin-next." } }, { "id": "CVE-2026-64648", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:4297d614-f576-55bc-9662-21372699b9c0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64648 affects version 13.5.11-tuxcare.14 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.16." } }, { "id": "CVE-2026-75604", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:84f0620f-df9f-510e-8afb-b343e56b239c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-75604 affects version 13.5.11-tuxcare.14 of @next/eslint-plugin-next." } }, { "id": "GHSA-2xp9-vwfh-vxw4", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:b058b47a-71e8-566c-9233-337d263923f4", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-2xp9-vwfh-vxw4 affects version 13.5.11-tuxcare.14 of @next/eslint-plugin-next." } }, { "id": "GHSA-5j59-xgg2-r9c4", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:8e5fa9ec-33b7-531c-bfd0-9af1c78dba7a", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.14 of @next/eslint-plugin-next." } }, { "id": "GHSA-8h8q-6873-q5fj", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:d8433cc1-e055-547f-8252-a654b44f6a2d", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.14 of @next/eslint-plugin-next." } }, { "id": "GHSA-h25m-26qc-wcjf", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:a2d7889b-30cd-5552-8e6b-e0e086f65ef1", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.14 of @next/eslint-plugin-next." } }, { "id": "GHSA-mwv6-3258-q52c", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:8952460d-b7a5-51cf-aed2-7ee1cca25e8a", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.14 of @next/eslint-plugin-next." } }, { "id": "GHSA-q4gf-8mx6-v5v3", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ], "bom-ref": "urn:uuid:06c5ffe0-d089-55c2-b316-33bd20f500ee", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.14 of @next/eslint-plugin-next." } } ], "dependencies": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.14" } ] }