{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:0e3567a4-04a1-574d-a4b6-2b458f87a34f", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "axios", "purl": "pkg:npm/axios@0.34.0", "type": "library", "bom-ref": "pkg:npm/axios@0.34.0", "version": "0.34.0", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2019-10742", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:5a8d2eef-8012-572a-b27b-8c96fb78f57c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10742 affects version 0.34.0 of axios." } }, { "id": "CVE-2020-28168", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:bb29b08d-3c1a-5148-ae03-61fa8560fb45", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-28168 affects version 0.34.0 of axios." } }, { "id": "CVE-2021-3749", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:48ccb61a-fc08-5431-917b-faa749ccf07f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3749 affects version 0.34.0 of axios." } }, { "id": "CVE-2023-45857", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:e68db630-0f0b-50ae-ae4a-6201fe66387b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-45857 affects version 0.34.0 of axios." } }, { "id": "CVE-2024-39338", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:39250e58-8c09-506f-a8b0-5ea3f7560e99", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39338 affects version 0.34.0 of axios." } }, { "id": "CVE-2025-27152", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:31711e1b-6b49-5f69-947b-9bb7f9ebfc0d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27152 affects version 0.34.0 of axios." } }, { "id": "CVE-2025-54371", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:7cf95549-7480-566f-aa43-e133edbb22f8", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-54371 is a false positive for axios 0.34.0." } }, { "id": "CVE-2025-58754", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:be9856a2-10aa-52ba-b061-c1d192d9043d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58754 affects version 0.34.0 of axios." } }, { "id": "CVE-2025-62718", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:22f4b414-388d-53e6-8399-a53c0a63835b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-62718 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-101898", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:fe8b0aef-3522-5c48-bb11-d2969f87d36f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101898 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-101899", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:23caf2cb-a063-5452-97b1-30d713607541", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101899 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-101900", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:052f4c1a-3203-5913-9c49-391264e676ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101900 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-101901", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:eb057a04-c6b2-5cbc-8973-f06eb65db607", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101901 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-101902", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:fd372e51-1d96-5932-bf83-880ad8275f4f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101902 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-101903", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:16f91bcf-3d46-5004-911a-cdd18366a74a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101903 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-101904", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:f5457fa0-998c-5e2f-896a-0fa2e1944a92", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101904 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-101905", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:b42da8f0-0fd8-5114-8694-ed85271669eb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101905 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-101906", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:ae23a879-c7a4-567b-af30-00507ec14b6f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101906 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-101907", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:3ce54dd3-b988-5619-951b-fd48ae4b942c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101907 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-101908", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:89927499-4502-5d86-8325-0e6831a01069", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101908 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-101909", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:68a8327d-b10a-5e0a-990e-d37a99ee25f5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101909 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-25639", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:15fa4b30-0f32-58c0-b48d-a0de2ab4f12c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25639 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-39865", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:657470f1-0b94-59a0-8d29-a1f9a3ec2cc3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-39865 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-40175", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:18b9fb18-236c-5f34-a30c-89b6ad2e8c32", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-40175 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-42033", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:ba2e0283-7b27-54e7-b3ea-de9e13f99b0e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42033 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-42034", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:bef6ff52-1c63-5b81-a981-92f326eb0186", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42034 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-42035", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:a3916ac9-6847-5e91-ae7b-0c6c4be0288d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42035 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-42036", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:f9c9d146-dfbb-57b8-974d-745bb30ff3c7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42036 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-42037", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:13224d92-0498-53e6-a22a-133a987e926a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42037 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-42038", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:3a2d550f-9b2d-59c2-b272-5c4d5bbbdea8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42038 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-42039", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:fb6c4cb3-aaf5-5774-9701-a92e3c61432d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42039 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-42040", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:12756316-c49a-583c-8400-449a63e29268", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42040 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-42041", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:b2534adf-3a6a-5e00-b542-89ebb77416ea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42041 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-42042", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:8274cc7a-8a7a-5376-95fa-45b4366b06ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42042 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-42043", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:99dd50fe-2c96-5b13-8b20-ae8b027e87f3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42043 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-42044", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:1ea95e77-7f32-505d-8638-1612cac960a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42044 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-42264", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:6be1ae9c-12e4-5433-b2bb-670322313bcd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42264 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-44486", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:8023a989-a3a8-5e84-9d79-4e211b79ce97", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44486 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-44487", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:38956c08-f8aa-51a7-94a4-9705334f0b33", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44487 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-44488", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:1841a0b5-eea7-5ec8-9c78-4e587e8c7e13", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44488 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-44489", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:3b40be3d-5b7f-54c4-9523-cb2238dd5ff4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44489 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-44490", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:1e561844-c381-586f-9310-ddda202e9470", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44490 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-44492", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:0ab9e01f-5336-5ce9-8d34-b472d13e2a51", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44492 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-44494", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:ee05a68a-0695-575c-b673-295ebc681765", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44494 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-44495", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:2d6c3e03-d844-5c3e-a64e-f9bc623e19b6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44495 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-44496", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:542e054c-15a4-5ad7-a154-a75341b04291", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44496 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-67312", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:321c162f-1478-56c4-8c22-274a2a4ec713", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67312 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-67313", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:6a60a8ca-af45-54f2-ad7c-f6e7629f7d25", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67313 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-67314", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:a99e8fbd-8584-5ea0-96d6-18cbce8fa937", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67314 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-67315", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:248a05fa-67ec-567f-bb7b-dfd110ed74b1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67315 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-67316", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:d84353a9-5c15-5e80-baaa-247be5125d23", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67316 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-67317", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:f5b8e682-87a2-57ac-bdc1-7e4f15a13ddd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67317 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-67318", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:3d3d7e5a-9618-57a2-8421-8ca27173499b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67318 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-67319", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:ab77f654-6850-592b-8329-dce0a6c41a34", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67319 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-67320", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:40ac34e8-09a2-55c7-8145-e9b236def201", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67320 affects version 0.34.0 of axios." } }, { "id": "CVE-2026-67321", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:0f6bf707-7dcb-5e78-9ba4-c76f418616ec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67321 affects version 0.34.0 of axios." } }, { "id": "GHSA-38gx-cfqf-f652", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:27d204f9-3813-5f71-a626-ce0fe95eb2cb", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-38gx-cfqf-f652 is a false positive for axios 0.34.0." } }, { "id": "GHSA-39j5-w47m-2gmv", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:d3037c3e-2547-59e4-9de1-8ac4e29f9cc4", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-39j5-w47m-2gmv is a false positive for axios 0.34.0." } }, { "id": "GHSA-3mcp-22mf-vrw3", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:ac04f64d-92ce-57f1-b214-dd2ae09f1cd3", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-3mcp-22mf-vrw3 is a false positive for axios 0.34.0." } }, { "id": "GHSA-4ww2-rjh2-xpv9", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:875c91c4-dda8-5b6e-a0ad-4473d7d47e0a", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-4ww2-rjh2-xpv9 is a false positive for axios 0.34.0." } }, { "id": "GHSA-68jp-44vc-2x5h", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:6f72b369-393b-57fd-917b-cbd37ad6fc75", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-68jp-44vc-2x5h is a false positive for axios 0.34.0." } }, { "id": "GHSA-6hqm-hm2v-3p2p", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:61e16d7a-0a19-5c82-adf0-470b05c511b7", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-6hqm-hm2v-3p2p is a false positive for axios 0.34.0." } }, { "id": "GHSA-9wx3-p993-35vp", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:a87b61f9-2b8a-5ffb-8b83-3cd7eadd8045", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-9wx3-p993-35vp is a false positive for axios 0.34.0." } }, { "id": "GHSA-f2r5-pqh9-r8f8", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:7fb8d903-7836-5e17-9891-17274c392ea5", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-f2r5-pqh9-r8f8 is a false positive for axios 0.34.0." } }, { "id": "GHSA-fq2j-3j99-rx65", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:a997e4db-c905-573b-a3de-d8155201a1e7", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-fq2j-3j99-rx65 is a false positive for axios 0.34.0." } }, { "id": "GHSA-fqj3-h9pc-443h", "affects": [ { "ref": "pkg:npm/axios@0.34.0" } ], "bom-ref": "urn:uuid:2ab0d765-2a86-5613-b3a0-06906cb21851", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-fqj3-h9pc-443h is a false positive for axios 0.34.0." } } ], "dependencies": [ { "ref": "pkg:npm/axios@0.34.0" } ] }