{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:7b3d1461-10c4-5dc9-bb6a-edfa5388d25c", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "axios", "purl": "pkg:npm/axios@0.35.0", "type": "library", "bom-ref": "pkg:npm/axios@0.35.0", "version": "0.35.0", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2019-10742", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:acecde82-a7d3-5062-aea1-b39ebceced2f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10742 affects version 0.35.0 of axios." } }, { "id": "CVE-2020-28168", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:e90213ec-3b8e-53bf-bb7b-c3e74394566e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-28168 affects version 0.35.0 of axios." } }, { "id": "CVE-2021-3749", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:5a930885-061b-5dd1-86f8-ce05fa69912b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3749 affects version 0.35.0 of axios." } }, { "id": "CVE-2023-45857", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:aa6d3621-1211-5064-ab54-ed4b59b3c586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-45857 affects version 0.35.0 of axios." } }, { "id": "CVE-2024-39338", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:e908a14f-4fbe-54e0-8d72-78eda1936563", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39338 affects version 0.35.0 of axios." } }, { "id": "CVE-2025-27152", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:e2254a21-6807-5fa6-af5d-87d84033b1ba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27152 affects version 0.35.0 of axios." } }, { "id": "CVE-2025-54371", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:e6797b5b-2cf0-56cb-86c9-7b47784f84ac", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-54371 is a false positive for axios 0.35.0." } }, { "id": "CVE-2025-58754", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:791962fd-b0d5-5b86-a5b0-3344b5babc59", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58754 affects version 0.35.0 of axios." } }, { "id": "CVE-2025-62718", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:c3721c09-b38d-5baf-94ef-511562196d94", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-62718 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-101898", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:d96197c4-8f39-55f9-84e2-87807f298589", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101898 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-101899", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:4a1475f9-f4df-5530-aacc-8204e71161fc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101899 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-101900", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:1f19d9d6-b575-5126-9216-04dc84a9eee0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101900 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-101901", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:b97071ff-4ab1-5218-9aa3-87352fd44c23", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101901 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-101902", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:8875f1e0-4bd8-526f-bdf7-b4f0be7c4a80", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101902 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-101903", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:6865e556-1725-5ba4-8663-add33d474c72", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101903 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-101904", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:0a0d4472-5cb9-57c6-bf7a-4062385fff1e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101904 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-101905", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:77c85fa2-3680-5998-b260-496a3e933351", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101905 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-101906", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:c81689c8-b5ac-544e-b333-0d8263d13c5f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101906 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-101907", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:091beb38-50b8-5c63-b03f-7567b03e090d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101907 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-101908", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:f89e420d-e5fb-5a6a-84ad-857a08aa0240", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101908 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-101909", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:34769d1e-f219-5e6f-aeed-c443b6a85a9d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101909 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-25639", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:bfbb6d71-c55c-5430-955f-f16767007b87", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25639 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-39865", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:05e7d53f-e88a-5616-9558-349e422b5ca9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-39865 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-40175", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:1888c29d-726b-53ba-aebe-f433099ad7a5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-40175 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-42033", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:f28f36c4-b273-5a17-9706-869d9bdbc7c0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42033 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-42034", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:c1850410-5eca-5078-b2de-d7811bc6d92f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42034 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-42035", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:4fd748f6-24b5-54b6-ac6a-2fcf97962684", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42035 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-42036", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:e133a2d9-a2e5-55cb-ab90-81907689673f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42036 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-42037", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:b7b1aa46-0e37-591a-9168-79c0e24fbd2c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42037 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-42038", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:a9af989c-ae7a-5386-bdeb-c1e903a539fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42038 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-42039", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:8657e576-d2ef-502f-8e4d-9af6610bf288", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42039 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-42040", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:c8cce602-d5ff-5f89-9c6f-fff4d6ac5873", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42040 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-42041", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:6984d8d6-3741-5971-8b30-bff67692df3e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42041 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-42042", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:52b2fa10-0a28-56c2-be90-8a5ffccf486b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42042 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-42043", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:1d1ab11f-f1d6-5d47-af07-10a04f7073b0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42043 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-42044", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:7a14a955-ba50-53ae-a396-05f8d9e4bbc6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42044 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-42264", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:7ae65a4d-51ec-5421-b066-ba2cdad3dda8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42264 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-44486", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:3874ca9a-5b36-59a6-b5f5-527eb46e63b8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44486 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-44487", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:b804818c-dd86-5a51-ac47-6547e2231b0c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44487 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-44488", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:55c1a35a-7890-5ee6-bceb-51c939e1e18c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44488 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-44489", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:351c59c8-2a72-5df6-a339-dbf12a5f299d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44489 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-44490", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:878ad861-397a-5f1d-9250-eb0be6153e48", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44490 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-44492", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:671aeabe-ad5b-5662-8736-555545e7abfa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44492 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-44494", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:312c0032-327e-5c0f-ab99-db8f5ab08ede", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44494 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-44495", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:d282fcaf-d430-518d-9c05-3ba4fc9dfe4b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44495 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-44496", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:b8e67349-fdc0-58f9-a88f-dd1921c3b60c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44496 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-67312", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:5db9f276-e767-5a99-bfa8-3cef249ccc7c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67312 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-67313", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:7e531e6c-bf59-5d48-8fe6-024105068f21", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67313 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-67314", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:3ee64210-6a31-57a2-99aa-8a9481d47f7c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67314 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-67315", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:c1e3a751-cf4f-5a40-b622-ad1bb326fda9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67315 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-67316", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:ca0e2e7f-812b-57fa-a825-8347f836583e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67316 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-67317", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:fc535c53-73f7-566c-8b15-f936b7e331e1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67317 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-67318", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:c53c1506-eae1-5fe8-a427-affb21f497a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67318 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-67319", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:ff9f2c73-e7c7-5686-9cf0-196e6e74a687", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67319 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-67320", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:a7237c23-a9ec-5f35-befd-17ab99a05cc9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67320 affects version 0.35.0 of axios." } }, { "id": "CVE-2026-67321", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:abc088e4-75bb-54a5-85e1-1d51355079cf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67321 affects version 0.35.0 of axios." } }, { "id": "GHSA-38gx-cfqf-f652", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:eb6c5d99-1574-50d0-bf46-1744928fd6eb", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-38gx-cfqf-f652 is a false positive for axios 0.35.0." } }, { "id": "GHSA-39j5-w47m-2gmv", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:790084e4-5df9-530e-8739-381fcee9c217", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-39j5-w47m-2gmv is a false positive for axios 0.35.0." } }, { "id": "GHSA-3mcp-22mf-vrw3", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:b85ee37f-8f7c-504b-bace-3c50dc70e1ad", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-3mcp-22mf-vrw3 is a false positive for axios 0.35.0." } }, { "id": "GHSA-4ww2-rjh2-xpv9", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:a123748f-39cf-508f-bbdd-5c76e8a18a30", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-4ww2-rjh2-xpv9 is a false positive for axios 0.35.0." } }, { "id": "GHSA-68jp-44vc-2x5h", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:ec1cabbb-a964-53e8-a58a-e65739707b0c", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-68jp-44vc-2x5h is a false positive for axios 0.35.0." } }, { "id": "GHSA-6hqm-hm2v-3p2p", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:1d0c4a8a-838b-5c48-835a-8f962dabd99c", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-6hqm-hm2v-3p2p is a false positive for axios 0.35.0." } }, { "id": "GHSA-9wx3-p993-35vp", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:33ea771b-faaa-59e0-b445-ffdaf6a99b67", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-9wx3-p993-35vp is a false positive for axios 0.35.0." } }, { "id": "GHSA-f2r5-pqh9-r8f8", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:f28c3097-2268-54d6-b421-b4a02c294828", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-f2r5-pqh9-r8f8 is a false positive for axios 0.35.0." } }, { "id": "GHSA-fq2j-3j99-rx65", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:50559d54-789d-5206-b9a4-4feafb44492b", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-fq2j-3j99-rx65 is a false positive for axios 0.35.0." } }, { "id": "GHSA-fqj3-h9pc-443h", "affects": [ { "ref": "pkg:npm/axios@0.35.0" } ], "bom-ref": "urn:uuid:6743c278-e1bf-5160-9f2f-c8c60f6e3558", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-fqj3-h9pc-443h is a false positive for axios 0.35.0." } } ], "dependencies": [ { "ref": "pkg:npm/axios@0.35.0" } ] }