{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:3adc7968-8dac-5a4d-b074-ee8481d7a113", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "axios", "purl": "pkg:npm/axios@1.13.5-tuxcare.2", "type": "library", "bom-ref": "pkg:npm/axios@1.13.5-tuxcare.2", "version": "1.13.5-tuxcare.2", "pedigree": { "ancestors": [ { "name": "axios", "purl": "pkg:npm/axios@1.13.5", "type": "library", "version": "1.13.5" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2019-10742", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:2f50b0f4-ca9b-55a5-8c76-a8aa84f2a4ec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10742 affects version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2020-28168", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:a8094234-0ecd-5358-b28c-07b7e18a3c9f", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2020-28168 does not affect version 1.13.5-tuxcare.2 of axios. not_affected \u2014 CVE-2020-28168 (SSRF via redirect bypassing proxy) is NOT present in axios 1.13.5-tuxcare.3. The vulnerability was fixed in upstream axios 0.21.3 (commit c7329fef by Daniel Lopretto) which added a beforeRedirect callback to reapply proxy settings on HTTP redirects. This fix was already present in the axios 1.13.5 upstream release that TuxCare onboarded (commit 3c7c08566). The target code at SHA...", "justification": "code_not_present" } }, { "id": "CVE-2021-3749", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:8a0b1bfb-a7a8-501f-84d4-ca4e975962b2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3749 affects version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2023-45857", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:c3946c88-7697-5e15-8935-823617ba15cd", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2023-45857 does not affect version 1.13.5-tuxcare.2 of axios. not_affected \u2014 CVE-2023-45857 is NOT present in axios 1.13.5-tuxcare.3. The vulnerability (XSRF token leaked to cross-origin requests via withCredentials bypass) was fixed in upstream commit 96ee232b by Valentin Panov on 2023-10-26. This fix was already included in the upstream axios 1.13.5 release that TuxCare onboarded. The current code in lib/helpers/resolveConfig.js (lines 71-73) correctly restricts XSRF ...", "justification": "code_not_present" } }, { "id": "CVE-2024-39338", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:faecdad6-60d6-58cf-aa11-5b3304326fa8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39338 affects version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2025-27152", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:573b7582-f49e-518a-ba43-ae9120cb96f6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27152 affects version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2025-54371", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:6026d31b-115f-5035-8acb-d3ba15e72227", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-54371 is a false positive for axios 1.13.5-tuxcare.2." } }, { "id": "CVE-2025-58754", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:f9cc7320-a96e-5562-84ac-ca5d38a2dc4c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58754 affects version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2025-62718", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:1639936f-ed4c-5331-a23e-6b1e7bd97864", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-62718 is fixed in version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-101898", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:55d65347-5b8f-5d2e-b9f1-8816c8dd645e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101898 is fixed in version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-101899", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:3005ea4d-cf5d-5e21-b140-39c3f06301b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101899 affects version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-101900", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:6c2b6e64-13f2-5189-9408-89cf5e35f4e0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101900 is fixed in version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-101901", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:a2202072-983d-5b8d-a8d0-dbbb0f881ccf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101901 is fixed in version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-101902", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:2318ca9e-aedc-5d2f-b8f6-43f3cb18f77b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101902 is fixed in version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-101903", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:ae11540f-12ff-50a9-af03-90388af381df", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101903 affects version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-101904", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:6d6f2cde-fc89-5f27-b3eb-6bdfa168919d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101904 is fixed in version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-101905", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:925c6942-301e-5e9b-a8d2-18362a7df4e0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101905 affects version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-101906", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:167f798c-14a4-5364-8c0c-1365bb467f4f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101906 affects version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-101907", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:40f9a0c5-97aa-59dd-a911-8e5e1cb90fff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101907 affects version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-101908", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:afbcac29-6077-56f1-aab4-cd96778af676", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101908 is fixed in version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-101909", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:d209a3e1-ab32-54ae-add1-aaa0842b4ea2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101909 affects version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-25639", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:1c3088e6-7df9-5426-b49b-6a17761f83da", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25639 affects version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-39865", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:54f67c86-1218-59ea-80bc-1439ed55b8af", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-39865 does not affect version 1.13.5-tuxcare.2 of axios. not_affected \u2014 CVE-2026-39865 affects axios HTTP/2 session cleanup logic due to a control flow bug that allows continued iteration after array.splice() modifies the array. The target axios 1.13.5-tuxcare.3 is NOT AFFECTED because the upstream fix (commit 12c314b6) by Dmitriy Mozgovoy was already present in the axios 1.13.5 upstream release before TuxCare onboarded it. The vulnerable pattern (splice followed b...", "justification": "code_not_present" } }, { "id": "CVE-2026-40175", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:f8df83f5-16ce-597c-9af9-6782704dd3fd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40175 is fixed in version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-42033", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:e4e53c99-9958-543c-8a5b-aec5d4e08638", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42033 is fixed in version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-42034", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:1ad60812-bee6-5e23-a26f-ef9ccabee1d7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42034 is fixed in version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-42035", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:0e7f57fe-8046-56e7-9e11-d7f942e67cdb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42035 is fixed in version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-42036", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:af944757-f3f2-5256-aece-6514a7c06a8e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42036 is fixed in version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-42037", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:7fc5a655-950c-5d9f-b02b-17a6ea21dd81", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42037 is fixed in version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-42038", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:2c7a7a82-28d3-5288-ae8e-b741f622d378", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42038 is fixed in version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-42039", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:323b2a3f-5976-5ba5-a43e-6ce8f4540b40", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42039 is fixed in version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-42040", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:f84fef0a-b279-5fd3-b8ff-4f08954249e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42040 is fixed in version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-42041", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:de8e64ee-4740-5888-aa68-752f840baba4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42041 is fixed in version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-42042", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:646747df-3b3d-56f7-9006-1a9e8cbe8d24", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42042 is fixed in version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-42043", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:2c91e2e5-40a4-5e33-84a9-8e6e202cfd27", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42043 is fixed in version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-42044", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:b70a9a5d-3a2d-581d-ae4d-b07f1ebc026c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42044 is fixed in version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-42264", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:1f115071-f212-58dc-aa3c-0146bb3424eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42264 is fixed in version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-44486", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:db8bba03-794c-54c0-aa53-7a098222b53c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44486 is fixed in version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-44487", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:327dee76-1996-5c0d-a4aa-b0a4cdb6c330", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44487 is fixed in version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-44488", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:1085c0ca-6010-5e5d-96b4-39242f2e4db6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44488 is fixed in version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-44489", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:83ba8ce7-34e1-5031-a1ce-8c74ca076a6b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44489 affects version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-44490", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:643c0832-35d4-5878-993c-cee1fc35860a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44490 is fixed in version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-44492", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:a5c777f5-b2ea-5401-a762-8add72ea3afc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44492 affects version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-44494", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:e98a5db0-09ed-5ccb-ba22-b684530c64cc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44494 is fixed in version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-44495", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:03680477-e4fa-50b2-9341-5eaec94fbdd4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44495 is fixed in version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-44496", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:849ec67e-3220-59a9-85bd-17e8fa64a5d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44496 is fixed in version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-67312", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:b2679bfa-4d76-5111-a482-424480842100", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67312 is fixed in version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-67313", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:3240e92c-ac93-514e-8077-b593c3580014", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67313 is fixed in version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-67314", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:77888ac4-63ff-5080-907a-10e8266d539d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67314 affects version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-67315", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:a4d9416c-7f0b-5537-8b14-1793fbd449a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67315 affects version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-67316", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:9be35723-5389-585f-b0b3-13b06764b419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67316 is fixed in version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-67317", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:b0ad6749-53e5-505a-b99b-06bc23b3bd6a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67317 is fixed in version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-67318", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:0f394f37-fc93-5a74-8b46-359508414546", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67318 is fixed in version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-67319", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:846eeaa4-e3e0-5ebc-bb1e-c17d057864be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67319 is fixed in version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-67320", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:7fd9fd8a-908a-58c7-8b9a-4015bf108ce6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67320 affects version 1.13.5-tuxcare.2 of axios." } }, { "id": "CVE-2026-67321", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:6342534d-3f85-59c7-80ac-92707305a832", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67321 affects version 1.13.5-tuxcare.2 of axios." } }, { "id": "GHSA-38gx-cfqf-f652", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:2552dbac-db41-54b0-97bb-17ceb8c0d7fc", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-38gx-cfqf-f652 is a false positive for axios 1.13.5-tuxcare.2." } }, { "id": "GHSA-39j5-w47m-2gmv", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:eb689c6e-c043-5f46-bed3-45c78b689290", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-39j5-w47m-2gmv is a false positive for axios 1.13.5-tuxcare.2." } }, { "id": "GHSA-3mcp-22mf-vrw3", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:ac01b0c8-f2ff-5080-aadb-6a24ef68d626", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-3mcp-22mf-vrw3 is a false positive for axios 1.13.5-tuxcare.2." } }, { "id": "GHSA-4ww2-rjh2-xpv9", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:ec042832-a142-5843-8631-15217c4872c9", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-4ww2-rjh2-xpv9 is a false positive for axios 1.13.5-tuxcare.2." } }, { "id": "GHSA-68jp-44vc-2x5h", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:354aa728-8010-576d-b676-fd6bef2d8bd8", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-68jp-44vc-2x5h is a false positive for axios 1.13.5-tuxcare.2." } }, { "id": "GHSA-6hqm-hm2v-3p2p", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:e11b8e6a-8758-5024-b268-78f8aba82502", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-6hqm-hm2v-3p2p is a false positive for axios 1.13.5-tuxcare.2." } }, { "id": "GHSA-9wx3-p993-35vp", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:13da63cd-050e-5c43-b0de-00f24b3c8eaa", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-9wx3-p993-35vp is a false positive for axios 1.13.5-tuxcare.2." } }, { "id": "GHSA-f2r5-pqh9-r8f8", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:bd6a7a3b-146f-5dab-aa6f-93bcafb4dc29", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-f2r5-pqh9-r8f8 is a false positive for axios 1.13.5-tuxcare.2." } }, { "id": "GHSA-fq2j-3j99-rx65", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:a6e153fa-3354-5245-9910-64d3240378b2", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-fq2j-3j99-rx65 is a false positive for axios 1.13.5-tuxcare.2." } }, { "id": "GHSA-fqj3-h9pc-443h", "affects": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ], "bom-ref": "urn:uuid:c01f8353-ed23-5162-ad4d-a49562c94036", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-fqj3-h9pc-443h is a false positive for axios 1.13.5-tuxcare.2." } } ], "dependencies": [ { "ref": "pkg:npm/axios@1.13.5-tuxcare.2" } ] }