{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:1ff56583-38da-57cf-9e62-22e7263342bc", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "axios", "purl": "pkg:npm/axios@1.21.0", "type": "library", "bom-ref": "pkg:npm/axios@1.21.0", "version": "1.21.0", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2019-10742", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:9102fd17-1f3c-55ce-9bb2-26f8361c92ac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10742 affects version 1.21.0 of axios." } }, { "id": "CVE-2020-28168", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:67e193ec-1ac5-549c-90bc-2e9b05c3afee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-28168 affects version 1.21.0 of axios." } }, { "id": "CVE-2021-3749", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:098b4c29-6565-5f04-9388-d3358fa4b870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3749 affects version 1.21.0 of axios." } }, { "id": "CVE-2023-45857", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:d7918a4d-67c2-5449-8a36-50096a5b14c9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-45857 affects version 1.21.0 of axios." } }, { "id": "CVE-2024-39338", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:9a7bc8bc-1a8b-5df9-9a33-85da8cc24616", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39338 affects version 1.21.0 of axios." } }, { "id": "CVE-2025-27152", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:2e1b57de-fe6a-5908-bc0a-16651916da61", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27152 affects version 1.21.0 of axios." } }, { "id": "CVE-2025-54371", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:dbc95932-0644-5564-94fb-f55d2ef336ea", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-54371 is a false positive for axios 1.21.0." } }, { "id": "CVE-2025-58754", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:0c60b53c-55a8-5732-adbc-a0c25a4f2432", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58754 affects version 1.21.0 of axios." } }, { "id": "CVE-2025-62718", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:e6fe88a6-b9df-54f2-8a82-9a0618e2232d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-62718 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-101898", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:8ca0f821-ac3f-5b3f-b10a-844bda647652", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101898 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-101899", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:dfb1776d-7de0-5762-9a33-bde7d088e2c5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101899 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-101900", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:7ac99a4a-be6b-5e42-9482-21c4f0a40c46", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101900 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-101901", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:ff9d5f4c-a21c-5434-bc2a-3b6d43ac80c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101901 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-101902", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:18ac48e7-e0a3-5020-b582-17fabe427d1c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101902 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-101903", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:27cefc47-39ef-57dd-9168-5daac56adb51", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101903 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-101904", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:b151ed77-2f4a-5d36-85cf-5e5353d41bcf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101904 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-101905", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:7da2d080-e097-51d2-9d74-bb377cc90ef7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101905 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-101906", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:727c97fd-dadf-5524-ac37-64b55227a0c0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101906 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-101907", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:7c33e0fc-97a0-5d3b-b250-f1c7dc252b0a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101907 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-101908", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:424df43a-f0f1-55fc-89b8-60b7648f59d4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101908 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-101909", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:d9df74c6-4ef8-5612-887d-8fb9f995d23e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101909 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-25639", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:e2493d73-6e47-5c7a-be14-07c571721985", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25639 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-39865", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:50aee930-3a6a-5a54-b8ba-672c3eca9b82", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-39865 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-40175", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:0d1dcab7-993c-5cf7-a106-931d38c9ae7f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-40175 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-42033", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:54ed96d5-7c8d-5f51-830b-77236ce20796", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42033 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-42034", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:4cf74a78-a0e2-5f89-b0a5-bcd76a758abf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42034 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-42035", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:45889c67-7937-5507-a424-cfce59563f58", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42035 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-42036", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:b9263bbe-7ca6-5f09-960d-5def79c3223e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42036 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-42037", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:3ec935bf-4caa-564d-aef9-9ff250ddca11", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42037 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-42038", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:99b40e89-e1bb-5694-a512-68fcbf30ccda", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42038 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-42039", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:6f65eba5-ff64-564c-9d29-732a1b4feec3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42039 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-42040", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:f3ca6151-c97e-5aa0-96dc-95e4426051ec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42040 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-42041", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:478dd548-5ee3-5567-8dc7-405401e777de", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42041 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-42042", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:4db524ac-af26-502c-ac4a-1c25bf019c06", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42042 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-42043", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:08a49b80-3a90-56d4-a1bb-ab0b0bd10c48", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42043 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-42044", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:e2d7d373-f193-5958-9e96-31e39635e549", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42044 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-42264", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:a0696f8e-af72-5a72-a889-f9579703a4a1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42264 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-44486", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:ba677ac7-8a77-5a80-aee9-41ba3a309ea6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44486 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-44487", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:f3f6c3b2-8275-592d-8670-1735285f174b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44487 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-44488", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:0634970b-1adf-5613-ac15-87f27e459f6b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44488 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-44489", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:a3fbbdf0-0a62-5244-bfca-a5d909b5e681", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44489 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-44490", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:fa82b3d5-1fb6-52aa-88c2-23a7b9925f8b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44490 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-44492", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:41e4791e-ae79-51ed-9c03-55582232645e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44492 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-44494", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:d6160dee-729a-5e11-9b0d-c2c7764bd4be", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44494 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-44495", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:66e96ff8-3bce-5b87-938b-edd5d729346e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44495 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-44496", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:14d6e5d7-5ca0-58a4-88a7-964113260763", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44496 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-67312", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:7609bc0c-89ad-5396-8371-180751ef4733", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67312 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-67313", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:91ffcc5d-0064-5b51-961d-434376e8af33", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67313 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-67314", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:f955a53a-e651-503b-909f-9b016ccd1a93", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67314 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-67315", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:a747c5ef-2507-547e-bfef-d38785f31cb0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67315 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-67316", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:e540dbec-e725-5825-816b-fa4be43c03c5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67316 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-67317", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:4963848f-5385-563e-adbe-ba422009853c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67317 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-67318", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:2bb19373-af3a-577a-8b73-6f9301f81dbd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67318 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-67319", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:df6207f9-8728-5d85-9a2d-32d3babab517", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67319 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-67320", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:1f469170-6e34-5c1d-a6f8-7360e88f78b0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67320 affects version 1.21.0 of axios." } }, { "id": "CVE-2026-67321", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:f823b16f-79c6-5915-9aca-0aee25aa43de", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67321 affects version 1.21.0 of axios." } }, { "id": "GHSA-38gx-cfqf-f652", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:15b93819-1749-507a-8ba0-da1f78c6645e", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-38gx-cfqf-f652 is a false positive for axios 1.21.0." } }, { "id": "GHSA-39j5-w47m-2gmv", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:d9701e91-32e3-5334-9853-1a146d75f99c", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-39j5-w47m-2gmv is a false positive for axios 1.21.0." } }, { "id": "GHSA-3mcp-22mf-vrw3", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:932c5402-8503-5260-9e81-5ddc8206f7c8", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-3mcp-22mf-vrw3 is a false positive for axios 1.21.0." } }, { "id": "GHSA-4ww2-rjh2-xpv9", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:e68af12b-c3f4-564e-8e52-dcf8998c57ce", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-4ww2-rjh2-xpv9 is a false positive for axios 1.21.0." } }, { "id": "GHSA-68jp-44vc-2x5h", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:4d957c63-0ad2-5d96-b27e-c6010c255126", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-68jp-44vc-2x5h is a false positive for axios 1.21.0." } }, { "id": "GHSA-6hqm-hm2v-3p2p", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:21e60fb2-4a3c-524b-a25c-7ead5d307df1", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-6hqm-hm2v-3p2p is a false positive for axios 1.21.0." } }, { "id": "GHSA-9wx3-p993-35vp", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:bf1493b4-646c-5c56-854c-7cdeb73c0d4d", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-9wx3-p993-35vp is a false positive for axios 1.21.0." } }, { "id": "GHSA-f2r5-pqh9-r8f8", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:61f83c3a-e5c1-5a74-9d74-5864d1bf6d4d", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-f2r5-pqh9-r8f8 is a false positive for axios 1.21.0." } }, { "id": "GHSA-fq2j-3j99-rx65", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:5c1eeafc-9fd0-528c-982e-75e3e160433a", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-fq2j-3j99-rx65 is a false positive for axios 1.21.0." } }, { "id": "GHSA-fqj3-h9pc-443h", "affects": [ { "ref": "pkg:npm/axios@1.21.0" } ], "bom-ref": "urn:uuid:db74cc42-f1bd-51e3-b7ff-c451b48ca92d", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-fqj3-h9pc-443h is a false positive for axios 1.21.0." } } ], "dependencies": [ { "ref": "pkg:npm/axios@1.21.0" } ] }