{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b6fb319a-ea58-5a64-857b-ac2bdbdaef5f", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "axios", "purl": "pkg:npm/axios@1.12.2-tuxcare.1", "type": "library", "bom-ref": "pkg:npm/axios@1.12.2-tuxcare.1", "version": "1.12.2-tuxcare.1", "pedigree": { "ancestors": [ { "name": "axios", "purl": "pkg:npm/axios@1.12.2", "type": "library", "version": "1.12.2" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2019-10742", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:e3633f82-d3be-586c-995d-c9856feefeed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10742 affects version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2020-28168", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:2d64db9b-baea-57c5-8063-158f2a3212cb", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2020-28168 does not affect version 1.12.2-tuxcare.1 of axios. not_affected \u2014 CVE-2020-28168 (SSRF via proxy bypass on HTTP redirects) is not present in axios 1.12.2. The upstream fix (commit c7329fef, Nov 2020) that adds the beforeRedirects.proxy callback to re-apply proxy settings on redirects was already included in the upstream 1.12.2 release, 743 commits before TuxCare onboarded this version. The vulnerable pattern (missing redirect proxy re-application) does not ex...", "justification": "code_not_present" } }, { "id": "CVE-2021-3749", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:ed28acbd-4c7a-5d7a-8ea1-9a2f06af63dc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3749 affects version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2023-45857", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:d5727941-c437-57a8-a347-57c564de149a", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2023-45857 does not affect version 1.12.2-tuxcare.1 of axios. not_affected \u2014 The target repository (axios v1.12.2) is NOT AFFECTED by CVE-2023-45857. The vulnerability, which allowed XSRF tokens to be leaked to cross-origin hosts when withCredentials was set, has been fixed by upstream commits that shipped in the v1.12.2 release. The vulnerable code pattern (automatic cross-origin XSRF token transmission via withCredentials bypass) is not present in the target.", "justification": "code_not_present" } }, { "id": "CVE-2024-39338", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:909f6a16-a232-5a77-bbdf-af87fbf8b2b5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39338 affects version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2025-27152", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:b6dda688-00e4-5941-b71e-43a0db0eb9f7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27152 affects version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2025-54371", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:5db811ce-7e5f-579c-84d6-c7a513a90d61", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-54371 is a false positive for axios 1.12.2-tuxcare.1." } }, { "id": "CVE-2025-58754", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:37c1bdb9-0b93-57f6-9841-4d057cb84ae0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58754 affects version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2025-62718", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:f669bab4-e80f-54af-b382-5bfc985f940c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-62718 is fixed in version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-101898", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:1a4bee05-f76c-5c20-86a6-262e2d77bc4a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101898 affects version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-101899", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:f5ca4db3-24b1-5f92-91de-3485d2097e94", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101899 affects version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-101900", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:12c5268f-0520-593b-923d-5e779a7a0a4e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101900 is fixed in version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-101901", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:de596428-d70d-54cf-986a-dfe3077f2e26", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101901 affects version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-101902", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:84684155-6fe6-5efd-b41f-a0832cb2b4a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101902 is fixed in version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-101903", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:7e5222de-26b2-5953-a6d8-c8b1b680e6ae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101903 affects version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-101904", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:71fb7222-d756-5fc8-9a18-731c2c44d814", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101904 is fixed in version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-101905", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:6993f448-e637-5482-b74d-e63385cdb1a3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101905 affects version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-101906", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:146e6436-681c-56c4-9fe7-11b89cb97c33", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101906 affects version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-101907", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:48ccce1c-4d4c-5a5b-93d8-6c02ea97ffec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101907 affects version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-101908", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:32b6b298-ae70-5d3a-acf8-796f67f73341", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101908 is fixed in version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-101909", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:7b25ee37-97f5-5fdb-bf2f-3e02cc4f8672", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101909 affects version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-25639", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:cb7ad140-9209-56ca-96f5-99a5b1daaf41", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25639 is fixed in version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-39865", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:a1f7e9ba-4710-53bd-9d0d-bb2bc64b0e87", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-39865 does not affect version 1.12.2-tuxcare.1 of axios. not_affected \u2014 Version 1.12.2 is not affected by CVE-2026-39865. The vulnerability exists in HTTP/2 session cleanup logic (Http2Sessions class), but HTTP/2 support was not added to axios until v1.13.0\u2014after this version. The entire vulnerable code pattern (session array cleanup loop with continued iteration after splice) is absent because the target version does not contain any HTTP/2 implementation. Exhausti...", "justification": "code_not_present" } }, { "id": "CVE-2026-40175", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:51fc129b-00f9-51c2-86fa-99d64d51276d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40175 is fixed in version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-42033", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:aa28267b-1840-5f59-8438-f59b3df86b36", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42033 is fixed in version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-42034", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:9ea7afda-5724-5b3a-99a8-db7554d5e789", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42034 is fixed in version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-42035", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:d0638453-f0db-53c5-8b24-e3d231fd67b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42035 is fixed in version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-42036", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:9d5741be-ceef-598f-b782-81a98a10788b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42036 is fixed in version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-42037", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:1f1e9141-8447-5a99-b12c-4e26491a7861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42037 is fixed in version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-42038", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:3c487508-36d1-5e7e-bae0-f0c34a6bc20a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42038 is fixed in version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-42039", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:0afd3c64-b9cf-5cd4-bb86-b46c17c6b9ba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42039 is fixed in version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-42040", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:e074f19b-ec75-5bff-81ab-e9a5aff45087", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42040 is fixed in version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-42041", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:e7d02896-4c27-5d23-88cb-e4b4e1e4255f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42041 is fixed in version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-42042", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:49f64627-293c-55ed-ab80-c6b7c32aca01", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42042 is fixed in version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-42043", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:9ea51308-f6c8-555d-945c-b57a0a6783d5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42043 is fixed in version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-42044", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:4a2eb101-02dc-5872-9a98-2ac773ebdd19", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42044 is fixed in version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-42264", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:fcfb6664-2e12-52e4-a048-2d0f7e045cd9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42264 is fixed in version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-44486", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:87bb3815-6110-556f-a07f-b8a46d95a701", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44486 is fixed in version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-44487", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:4fac6728-e498-58aa-b59e-ecfb97ebc409", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44487 is fixed in version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-44488", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:85ef3dcf-5409-5aae-afa3-2487b8e73bcd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44488 is fixed in version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-44489", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:1ad0fff1-f307-5c80-87ff-1572d707e1da", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44489 affects version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-44490", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:39d633b1-ea92-5a25-b35a-03ecf2eec223", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44490 is fixed in version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-44492", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:a48b784a-c8d3-563d-883c-86ef05ba8200", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44492 affects version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-44494", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:47616f34-e42a-5ce6-9b5d-0620c2c8e860", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44494 is fixed in version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-44495", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:7527c827-26c5-581e-8657-14c57cc439a2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44495 is fixed in version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-44496", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:ec82a49c-224e-527e-8993-a7710cffc89e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44496 is fixed in version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-67312", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:a8fccbdb-4cf8-5db2-8bad-934f03b3c867", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67312 is fixed in version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-67313", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:54094133-e89f-5034-873f-e7d73ea33e09", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67313 is fixed in version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-67314", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:0b2ce2df-38ff-5a1b-8689-3a86c326b110", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67314 affects version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-67315", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:90f45f91-bcb9-5a04-91e9-dc0b4669b3e9", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-67315 does not affect version 1.12.2-tuxcare.1 of axios. not_affected \u2014 Axios 1.12.2 does not contain lib/helpers/shouldBypassProxy.js or its isLoopback() equivalence logic. That helper was added in 1.15.0, and the CVE is an omission in it (0.0.0.0 missing from the loopback set). This target selects env proxies with the proxy-from-env dependency (v1.1.0) via lib/adapters/http.js:89. That library matches NO_PROXY entries literally and has no loopback-equivalence fea...", "justification": "code_not_present" } }, { "id": "CVE-2026-67316", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:8a5e56e0-0d5c-5ab1-8d55-a0bc24b57e68", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67316 is fixed in version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-67317", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:abd3599a-b5b3-50ce-858c-9a3ed647de73", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67317 is fixed in version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-67318", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:737181b5-ab8a-5286-a824-cbf2cd370e6b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-67318 does not affect version 1.12.2-tuxcare.1 of axios. not_affected \u2014 axios 1.12.2 has no Node.js HTTP/2 support. There is no httpVersion option and no http2 transport, and a grep of lib/ and index.d.ts finds neither. The CVE's affected functionality (httpVersion: 2 streamed uploads bypassing maxBodyLength) cannot occur here. The default HTTP/1.1 path goes through follow-redirects, which enforces maxBodyLength. Caveat: the native-transport path (maxRedirects: 0) ...", "justification": "code_not_present" } }, { "id": "CVE-2026-67319", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:0ad3ccbb-68ad-5cda-8d05-3d82ceb61065", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67319 is fixed in version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-67320", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:bd6cadc7-162b-5bb8-a299-38e6350dceeb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67320 affects version 1.12.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-67321", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:dd098c99-7c85-5291-a73c-e21abbd7ddcc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67321 affects version 1.12.2-tuxcare.1 of axios." } }, { "id": "GHSA-38gx-cfqf-f652", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:8158bc74-02a3-50ab-ba4f-425c5ad33524", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-38gx-cfqf-f652 is a false positive for axios 1.12.2-tuxcare.1." } }, { "id": "GHSA-39j5-w47m-2gmv", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:4662e44c-d525-5d9d-9322-517cf060bd62", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-39j5-w47m-2gmv is a false positive for axios 1.12.2-tuxcare.1." } }, { "id": "GHSA-3mcp-22mf-vrw3", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:862de38f-d026-548b-827a-61c44274c276", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-3mcp-22mf-vrw3 is a false positive for axios 1.12.2-tuxcare.1." } }, { "id": "GHSA-4ww2-rjh2-xpv9", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:cb09650f-1300-5e72-be34-64d8b08ffb56", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-4ww2-rjh2-xpv9 is a false positive for axios 1.12.2-tuxcare.1." } }, { "id": "GHSA-68jp-44vc-2x5h", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:978ab3b5-3422-55ab-9526-af997c960de7", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-68jp-44vc-2x5h is a false positive for axios 1.12.2-tuxcare.1." } }, { "id": "GHSA-6hqm-hm2v-3p2p", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:d95f2224-b1a3-55c8-bbd7-b3e56c6c8322", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-6hqm-hm2v-3p2p is a false positive for axios 1.12.2-tuxcare.1." } }, { "id": "GHSA-9wx3-p993-35vp", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:1f01b0f9-4d71-5094-851e-d97a59b0caf1", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-9wx3-p993-35vp is a false positive for axios 1.12.2-tuxcare.1." } }, { "id": "GHSA-f2r5-pqh9-r8f8", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:7df1b86e-1299-50b4-b073-b33e1f4ac1cd", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-f2r5-pqh9-r8f8 is a false positive for axios 1.12.2-tuxcare.1." } }, { "id": "GHSA-fq2j-3j99-rx65", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:06575be8-96b3-52c3-ba28-6316cbb96b5e", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-fq2j-3j99-rx65 is a false positive for axios 1.12.2-tuxcare.1." } }, { "id": "GHSA-fqj3-h9pc-443h", "affects": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ], "bom-ref": "urn:uuid:fe839387-dbe1-5d46-9bf9-a0ae99ea46a6", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-fqj3-h9pc-443h is a false positive for axios 1.12.2-tuxcare.1." } } ], "dependencies": [ { "ref": "pkg:npm/axios@1.12.2-tuxcare.1" } ] }