{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:583ccd67-e800-5081-8ba9-6951fbd1d05c", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "axios", "purl": "pkg:npm/axios@1.15.0-tuxcare.1", "type": "library", "bom-ref": "pkg:npm/axios@1.15.0-tuxcare.1", "version": "1.15.0-tuxcare.1", "pedigree": { "ancestors": [ { "name": "axios", "purl": "pkg:npm/axios@1.15.0", "type": "library", "version": "1.15.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2019-10742", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:bec027b6-29ce-5e56-8977-8c4796c0fd9e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10742 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2020-28168", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:a6a60715-fb2c-58f4-8915-cfc12806e471", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-28168 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2021-3749", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:5f306eb3-a917-5572-bcdf-8cc9ce6a07df", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3749 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2023-45857", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:b05d3530-329e-536e-977d-dcc70ef585e1", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2023-45857 does not affect version 1.15.0-tuxcare.1 of axios. not_affected \u2014 Target axios 1.15.0 already contains the upstream CVE-2023-45857 fix. lib/helpers/resolveConfig.js only attaches the XSRF header when withXSRFToken is truthy or the request URL is same-origin. The fix shipped in the upstream release, before the first TuxCare commit.", "justification": "code_not_present" } }, { "id": "CVE-2024-39338", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:b19151a0-f3e9-590c-a087-f66e567b9e6f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39338 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2025-27152", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:78c89fb0-d52f-56ef-9131-aeaef1b2707e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27152 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2025-54371", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:cb40ca31-a2bb-55ec-9d5a-89605af6b04c", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-54371 is a false positive for axios 1.15.0-tuxcare.1." } }, { "id": "CVE-2025-58754", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:4267a885-d7de-5ae3-96c5-7f9522d6b9ad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58754 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2025-62718", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:49e85484-4438-579b-b6cb-fb7263225905", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-62718 does not affect version 1.15.0-tuxcare.1 of axios. not_affected \u2014 The upstream fix for CVE-2025-62718 (axios commit fb3befb, \"no_proxy hostname normalization bypass leads to ssrf\") is already in the 1.15.0 release this branch was built from. lib/helpers/shouldBypassProxy.js normalizes both the request host and the NO_PROXY entries before comparing them. It strips brackets and trailing dots, so `localhost.` and `[::1]` now match NO_PROXY. The fix commit is by ...", "justification": "code_not_present" } }, { "id": "CVE-2026-101898", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:9a3790f2-9394-58ba-b17c-b86949f0fd04", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101898 is fixed in version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-101899", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:72cedf58-fd8e-5845-a4c0-79542e7bd4c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101899 is fixed in version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-101900", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:e89969ed-f692-5937-81a1-74399555c4b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101900 is fixed in version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-101901", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:f78caa59-6c0d-57ed-ac7f-ba43a901e258", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101901 is fixed in version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-101902", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:036d65a6-3ad7-5aa5-a914-dd5d04d1cdeb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101902 affects version 1.15.0-tuxcare.1 of axios, and is fixed in 1.15.0-tuxcare.2." } }, { "id": "CVE-2026-101903", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:2afb9008-8cb6-5b81-a5f1-e856396fd562", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101903 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-101904", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:46b5d7cd-e584-5b8f-a8af-9f8f3030070c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101904 is fixed in version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-101905", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:e7fdeb95-9d76-5db1-8c3a-0b0195e58e82", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101905 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-101906", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:90c39a42-f9dd-5d4c-8ccd-23d56d56c230", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101906 is fixed in version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-101907", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:5e6f921a-fb54-5d18-a5b7-577c6590452e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101907 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-101908", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:18f78897-0dd2-5eb9-935c-34891730e608", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101908 affects version 1.15.0-tuxcare.1 of axios, and is fixed in 1.15.0-tuxcare.2." } }, { "id": "CVE-2026-101909", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:c79a9ef2-86fa-5eb3-bbfa-4acb6c88fcb6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101909 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-25639", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:47c0b156-a9e5-5c5a-8cf4-3b3955cd589d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25639 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-39865", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:8c7683ef-8a11-5fb2-9fc8-c36e6ab89015", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-39865 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-40175", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:282a9a02-8420-55a8-965d-349bc5792559", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-40175 does not affect version 1.15.0-tuxcare.1 of axios. not_affected \u2014 The upstream fix for CVE-2026-40175 (axios commit 363185461, \"unrestricted cloud metadata exfiltration via header injection chain\", #10660) is an ancestor of HEAD. It was already in the upstream 1.15.0 release before the first TuxCare commit. A later TuxCare backport (CVE-2026-42038) changed the header handling to strip CR/LF, and the CVE-2026-42041 backport makes the config merge use own prope...", "justification": "code_not_present" } }, { "id": "CVE-2026-42033", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:ba9ff830-9657-5188-8a90-41c52fc6d26c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42033 affects version 1.15.0-tuxcare.1 of axios, and is fixed in 1.15.0-tuxcare.2." } }, { "id": "CVE-2026-42034", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:256adfb3-6658-5a75-9d69-9c3036dfb1d8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42034 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-42035", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:4b52e526-ac69-548c-9ce8-94c4f8ddd166", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42035 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-42036", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:847f69a1-2fec-5d58-8a48-8f08fa05c10b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42036 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-42037", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:b5ff1eb0-6d01-5aee-ad30-cfbe6b29b96e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42037 is fixed in version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-42038", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:dc552db6-339e-5c93-a4db-96b14d68e223", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42038 is fixed in version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-42039", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:95ae073e-0d01-506f-8183-cea7d91d32a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42039 is fixed in version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-42040", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:0e050a8c-d95e-5b62-8817-fff9fb26add9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42040 is fixed in version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-42041", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:c9d80795-9bc9-5f0a-8607-870d1b36bbb3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42041 is fixed in version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-42042", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:af647581-e204-537e-b38f-677b968788d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42042 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-42043", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:22c53a60-3153-59a8-8f81-54cd06965a4d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42043 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-42044", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:f1618faa-6bd0-503e-87da-8da38b8a9940", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42044 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-42264", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:1fce86bb-3d20-54af-8ab3-839c3f776819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42264 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-44486", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:ca89b122-8799-57e5-976a-e52d00ccd48a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44486 is fixed in version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-44487", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:1c325a33-468e-5c90-ada4-4137ba4cc54a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44487 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-44488", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:a2be718f-1961-5704-b85d-1faaade79bfd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44488 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-44489", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:779d52d8-bc98-55f4-a10a-eb1dfce51bc6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44489 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-44490", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:ed159b69-e9b1-5363-af35-eb1560342a82", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44490 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-44492", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:dcb162f7-6503-56e6-89c8-9803f63a20ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44492 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-44494", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:217143f4-a1fc-56cd-8906-cb0e2ba36870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44494 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-44495", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:509eb5a0-c12a-56c3-a35d-f6dd631971ab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44495 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-44496", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:6cbe122a-a0bb-58ad-b63a-4a4b69d78651", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44496 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-67312", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:069f8226-850c-5237-adbe-b5dde1f0ee26", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67312 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-67313", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:0823c231-e91a-52de-a42d-5a1b67602b7f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67313 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-67314", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:b2d77060-f341-5987-ba66-80eb8fa6d3e1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67314 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-67315", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:5e3cd4f9-b338-5f1b-b552-a64f8f0c08d4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67315 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-67316", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:ef86b50d-d7a7-54c3-b960-98864565c99e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67316 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-67317", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:dc96fa5f-3f54-5085-9481-a6c58db97dcf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67317 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-67318", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:3d15a890-5b3b-5372-b4e6-7b762ca8bf3c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67318 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-67319", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:75e683c8-15f9-55af-8793-9374368eee35", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67319 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-67320", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:14f77478-6c3c-5c23-a18e-0134d5de4094", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67320 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "CVE-2026-67321", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:10a864fc-9e41-5ec9-b1fd-eba1205b3e6d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67321 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "GHSA-38gx-cfqf-f652", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:1daa7dbb-3d61-5f28-936b-a0ddae7743b3", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-38gx-cfqf-f652 is a false positive for axios 1.15.0-tuxcare.1." } }, { "id": "GHSA-39j5-w47m-2gmv", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:8a146c60-72f6-5149-9f20-701e1b8da101", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-39j5-w47m-2gmv is a false positive for axios 1.15.0-tuxcare.1." } }, { "id": "GHSA-3mcp-22mf-vrw3", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:888050dd-3df5-587a-93a5-b1541babd959", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-3mcp-22mf-vrw3 is a false positive for axios 1.15.0-tuxcare.1." } }, { "id": "GHSA-42h9-826w-cgv3", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:0df213ac-cdd2-52ae-a77f-8e70b463b90a", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-42h9-826w-cgv3 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "GHSA-4ww2-rjh2-xpv9", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:1e4622f8-8726-5d20-99a4-9a5da1220d95", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-4ww2-rjh2-xpv9 is a false positive for axios 1.15.0-tuxcare.1." } }, { "id": "GHSA-68jp-44vc-2x5h", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:8f0bc32e-ea03-5042-999e-8737c18e1aa7", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-68jp-44vc-2x5h is a false positive for axios 1.15.0-tuxcare.1." } }, { "id": "GHSA-6hqm-hm2v-3p2p", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:6c598a4a-0bc3-5ee6-b2a6-9c6ba0241b30", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-6hqm-hm2v-3p2p is a false positive for axios 1.15.0-tuxcare.1." } }, { "id": "GHSA-7q8q-rj6j-mhjq", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:77bd8fd6-3d6d-5467-9c4c-0ba26b7f297f", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-7q8q-rj6j-mhjq affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "GHSA-9wx3-p993-35vp", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:e7e65c13-1aa4-5975-ab30-e63db0e38c96", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-9wx3-p993-35vp is a false positive for axios 1.15.0-tuxcare.1." } }, { "id": "GHSA-f2r5-pqh9-r8f8", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:edacea8c-f6df-58ed-970e-f3dd385a6681", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-f2r5-pqh9-r8f8 is a false positive for axios 1.15.0-tuxcare.1." } }, { "id": "GHSA-f4gw-2p7v-4548", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:6098d744-bf35-5442-9fd9-676cb8a02482", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-f4gw-2p7v-4548 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "GHSA-fq2j-3j99-rx65", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:1c6ffa61-5b4a-5bf9-8c74-c51467b53d17", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-fq2j-3j99-rx65 is a false positive for axios 1.15.0-tuxcare.1." } }, { "id": "GHSA-fqj3-h9pc-443h", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:10ecc96b-4133-5678-b92a-16c3a968c866", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-fqj3-h9pc-443h is a false positive for axios 1.15.0-tuxcare.1." } }, { "id": "GHSA-jqh4-m9w3-8hp9", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:c485f736-5c59-5908-bbe7-fc84362c44b1", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-jqh4-m9w3-8hp9 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "GHSA-mmx7-hfxf-jppx", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:dbeede21-c0e0-5d73-bdaf-d26e3063c793", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mmx7-hfxf-jppx affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "GHSA-mwf2-3pr3-8698", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:5f80b2d0-d92a-505e-aefa-bcacd108009c", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mwf2-3pr3-8698 affects version 1.15.0-tuxcare.1 of axios." } }, { "id": "GHSA-pmv8-rq9r-6j72", "affects": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ], "bom-ref": "urn:uuid:58c815d4-e71e-5ecc-ba10-62f8e7150824", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-pmv8-rq9r-6j72 affects version 1.15.0-tuxcare.1 of axios." } } ], "dependencies": [ { "ref": "pkg:npm/axios@1.15.0-tuxcare.1" } ] }