{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:bc751f0a-5e8d-5649-9bcd-44f17a4023c7", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@next/eslint-plugin-next", "purl": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3", "type": "library", "bom-ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3", "version": "13.5.11-tuxcare.3", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "AIKIDO-2024-10173", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:e1551658-1d8a-5950-af2f-cb6311985579", "analysis": { "state": "exploitable", "detail": "Vulnerability AIKIDO-2024-10173 affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "AIKIDO-2025-10936", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:997becc4-78b4-5833-92f7-107b783d299c", "analysis": { "state": "exploitable", "detail": "Vulnerability AIKIDO-2025-10936 affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2024-34351", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:1f87da2f-cf54-5483-a67a-6dce042d13d8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-34351 affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2024-47831", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:a583313d-2bcb-5b57-982f-11c7351f05f3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-47831 affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2024-51479", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:14fdf16a-714e-5597-af38-2b10a2230690", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-51479 affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2025-32421", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:dd220ffd-1599-5b21-983b-8dcd96b06cd8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32421 affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2025-48068", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:b1a2615e-2d07-5712-af3c-f99e587c0b9c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-48068 affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2025-55173", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:aebfcd9a-c79a-5942-87fe-c816aa06e4f7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55173 affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2025-55183", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:b22d16cc-70ec-5b64-8be0-3c2a3176963b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55183 affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.16." } }, { "id": "CVE-2025-55184", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:bb463582-5365-5185-bda8-71ad447bba21", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55184 affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2025-57752", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:4a396583-406e-538e-a60f-8795b0f45f3a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-57752 affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2025-57822", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:32a13541-c958-51db-aa3a-88e12c5b84ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-57822 affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2025-59471", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:2e876d49-9b95-5850-b09a-9d4781abb3c2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59471 affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2025-59472", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:91745c85-570f-58b0-b463-70775596310e", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.3 of @next/eslint-plugin-next. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat...", "justification": "code_not_present" } }, { "id": "CVE-2025-67779", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:970d4419-2878-5c8a-aafc-41b8f3a4504b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67779 affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2026-27980", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:8b03db37-05c0-5c81-8319-3707e693f851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27980 affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2026-29057", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:b965ed6c-9c5a-56a7-af35-8cf600030d38", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-29057 affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2026-44572", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:579634a3-0bb8-58d2-bb32-6d86654a6de3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44572 affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2026-44573", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:35c52041-16fb-5145-a13a-ea9b8635b88f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44573 affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2026-44577", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:3a5802fd-99e2-5ea7-b0d9-9d10ad7c67db", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44577 affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-44578", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:47141f50-ff45-50e1-91f4-c4773bf78ef8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44578 affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-44580", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:e5cce026-e1f1-527c-821f-bf7db7680949", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44580 affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-44581", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:354da5d1-a3c3-5d50-a88c-81e3370b53a3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44581 affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-44582", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:9135bbe3-6238-58ad-a89d-50ab110e4f54", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44582 affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-64641", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:0c0a7a7e-f3cb-5b27-ac5d-094824049aa6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64641 affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-64643", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:70dffc7c-581e-5657-8b75-c4fe825f199b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64643 affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-64645", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:453bd8b2-6935-52fe-bd0e-a52ca0bf5d14", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64645 affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-64646", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:96d20d86-5cdf-5d59-84e6-674e554cede9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64646 affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-64647", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:22cfeac3-5f57-5de5-ab42-6cb82321093e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64647 affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-64648", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:ab8df395-4d57-5651-a721-3e5763d837dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64648 affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.16." } }, { "id": "CVE-2026-75604", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:33d4134f-b19f-578f-8d78-77858f815c69", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-75604 affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next." } }, { "id": "GHSA-2xp9-vwfh-vxw4", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:0472a88f-e4bf-5c6e-8978-9548a0034a42", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-2xp9-vwfh-vxw4 affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next." } }, { "id": "GHSA-5j59-xgg2-r9c4", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:a7768391-1a3a-56fd-a567-d4b8f375aabc", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "GHSA-8h8q-6873-q5fj", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:f7c23da2-1420-5731-a722-40e23f1b7ab5", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-8h8q-6873-q5fj affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "GHSA-h25m-26qc-wcjf", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:9097515c-44a9-5c88-b48d-af1fef781102", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-h25m-26qc-wcjf affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "GHSA-mwv6-3258-q52c", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:e13a7865-2a46-50a0-aee7-3e7dbed1e2be", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mwv6-3258-q52c affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "GHSA-q4gf-8mx6-v5v3", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ], "bom-ref": "urn:uuid:a37dfa5a-018b-5878-814d-9cfa32cca595", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 affects version 13.5.11-tuxcare.3 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } } ], "dependencies": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.3" } ] }