{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a2d8990c-9b20-5ba5-82db-1e4152578d48", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "axios", "purl": "pkg:npm/axios@1.21.1", "type": "library", "bom-ref": "pkg:npm/axios@1.21.1", "version": "1.21.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2019-10742", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:557291d6-48ba-577d-9d46-c5146610e581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10742 affects version 1.21.1 of axios." } }, { "id": "CVE-2020-28168", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:743f4794-7898-5348-9850-c534fd69a4c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-28168 affects version 1.21.1 of axios." } }, { "id": "CVE-2021-3749", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:1ac411a2-0f52-5fd6-a290-5ebe635268fe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3749 affects version 1.21.1 of axios." } }, { "id": "CVE-2023-45857", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:955a7866-ad8d-5cee-8d11-39930c6f1160", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-45857 affects version 1.21.1 of axios." } }, { "id": "CVE-2024-39338", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:ecbfbe64-af34-5972-945f-6eb8fc8b2825", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39338 affects version 1.21.1 of axios." } }, { "id": "CVE-2025-27152", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:cd4a9b5f-a319-55a9-862c-c1bc10f974c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27152 affects version 1.21.1 of axios." } }, { "id": "CVE-2025-54371", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:2e541ec4-9a8f-5329-a855-ab96e2253f19", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-54371 is a false positive for axios 1.21.1." } }, { "id": "CVE-2025-58754", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:6bc74d48-6d5a-57e6-8877-1f3e8583a7fe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58754 affects version 1.21.1 of axios." } }, { "id": "CVE-2025-62718", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:5c666892-3c92-5cb3-9f9a-b3eccfeed187", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-62718 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-101898", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:fa95fa11-561e-56d7-92dd-1c8ac1ee402b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101898 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-101899", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:17d1ea13-39e0-5117-89c7-b4b8bd3b74b6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101899 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-101900", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:618f6767-7cc5-5890-9dbe-cbc8a8844fb0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101900 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-101901", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:1143ba52-fd19-5e60-845e-f8b428d86612", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101901 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-101902", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:cef4d584-e291-5c5f-b4b3-c9328efa266b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101902 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-101903", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:8e55d1ee-f75c-50a4-8b41-f8f348afe8da", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101903 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-101904", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:496c5121-e38b-59b7-9db9-0f689be30164", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101904 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-101905", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:a43bf08d-7d50-50b8-a7bb-1ebdabd75da9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101905 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-101906", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:5ed9df99-9092-565f-a746-05db24910e90", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101906 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-101907", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:bc934a3b-24b8-5ff2-8ee7-4374a87aa831", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101907 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-101908", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:3c979fb6-08c5-5edf-8147-9fcf1a697760", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101908 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-101909", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:8b0b7e3d-cf24-562f-9083-67483cad30b5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101909 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-25639", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:6140aede-f8da-58a5-b421-b34adedd4762", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25639 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-39865", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:96352848-9a4c-55e3-a02d-ca9dff2ea2fb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-39865 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-40175", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:351a5d8f-2177-5586-b2fb-ca0ec9a0838f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-40175 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-42033", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:7b4a72c7-45f6-511c-aefe-bfb436adc1d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42033 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-42034", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:65982539-8d46-5035-a3b3-015a396fc54c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42034 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-42035", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:87b13acb-f75c-531c-8d15-a2a5516e74bc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42035 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-42036", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:84e19c62-cc5a-50fa-868c-5dfc41da2556", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42036 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-42037", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:2c8b84e4-c989-5fdb-84d6-eb564d7e76e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42037 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-42038", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:ab4e822b-6cb5-5669-8266-509015df5183", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42038 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-42039", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:441a31da-957e-5b31-9a82-ce8c04cb8fbf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42039 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-42040", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:431fe526-0bd4-51b9-8ec2-4ba70770abb4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42040 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-42041", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:9a2e5275-2c79-5108-b794-bb513e0f52e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42041 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-42042", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:94925496-2994-5449-a875-5d2c09f89dbb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42042 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-42043", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:1807d642-14e4-5186-8cf5-b8125bf93f9f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42043 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-42044", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:39a1245e-40fb-5d51-83d7-c7f248603997", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42044 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-42264", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:c7856f64-d65b-5905-9bda-779b3158cd90", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42264 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-44486", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:545997b5-da13-514c-b8b1-d4bb29614d82", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44486 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-44487", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:a3d11aac-6a7b-5659-baff-4c7e4304199c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44487 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-44488", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:5f5bff39-492c-5a03-b46e-05ba8f425141", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44488 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-44489", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:82ac5ed7-82fc-50f7-81da-ca88cb9aeebf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44489 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-44490", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:49984c65-3b3b-5415-ba4c-6df2563076d3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44490 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-44492", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:8ed59eb9-1542-5b11-b248-2fbd4ade720c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44492 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-44494", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:6c0fa045-50c2-553b-9669-6062204f003e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44494 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-44495", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:8a5c20f2-7030-5988-a557-3596ff1c7a5c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44495 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-44496", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:82f69934-ea78-51ae-b7af-80660be6c73e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44496 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-67312", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:79a4cd24-77a7-5bc6-be4c-0e222516afc0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67312 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-67313", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:6b99a5b1-395a-54fa-a8ea-84e68b0a843a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67313 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-67314", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:3e713780-1a31-53cb-9fc2-7b642014c79a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67314 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-67315", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:c81f52d2-9186-5394-a5db-32f7f36099bf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67315 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-67316", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:c33d2775-eea5-599a-aba2-9d4f73935662", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67316 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-67317", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:a0a445a2-b57d-517c-97c1-6e77901d2139", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67317 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-67318", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:9831d580-f820-5fcb-956f-48e10449e971", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67318 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-67319", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:20a19a75-b093-544c-a656-51e8a205eba7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67319 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-67320", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:833d0b9e-dec4-5ba5-9cea-cd1dfa8e8e04", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67320 affects version 1.21.1 of axios." } }, { "id": "CVE-2026-67321", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:2f4d02da-2f50-5785-a914-ae99bf871aa3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67321 affects version 1.21.1 of axios." } }, { "id": "GHSA-38gx-cfqf-f652", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:9368c8f8-76b4-5a1d-91a1-0bb4adc39582", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-38gx-cfqf-f652 is a false positive for axios 1.21.1." } }, { "id": "GHSA-39j5-w47m-2gmv", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:7ceee422-2597-55dd-a606-3ab0c25ba9d8", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-39j5-w47m-2gmv is a false positive for axios 1.21.1." } }, { "id": "GHSA-3mcp-22mf-vrw3", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:68cd41b1-154c-5288-93ec-ea8cce349ba5", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-3mcp-22mf-vrw3 is a false positive for axios 1.21.1." } }, { "id": "GHSA-4ww2-rjh2-xpv9", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:6e53d8d6-47a9-5b14-aa2f-89ab817836ca", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-4ww2-rjh2-xpv9 is a false positive for axios 1.21.1." } }, { "id": "GHSA-68jp-44vc-2x5h", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:8b0c2f69-954c-5934-9d50-b1b9449fa149", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-68jp-44vc-2x5h is a false positive for axios 1.21.1." } }, { "id": "GHSA-6hqm-hm2v-3p2p", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:982c6b1a-fe7b-5114-9fa7-a3d4568044e4", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-6hqm-hm2v-3p2p is a false positive for axios 1.21.1." } }, { "id": "GHSA-9wx3-p993-35vp", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:1059afa8-85a0-5aff-ae25-78c917d80de3", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-9wx3-p993-35vp is a false positive for axios 1.21.1." } }, { "id": "GHSA-f2r5-pqh9-r8f8", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:3f1068f4-2ba7-58dc-8493-a9e85fafcd17", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-f2r5-pqh9-r8f8 is a false positive for axios 1.21.1." } }, { "id": "GHSA-fq2j-3j99-rx65", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:cd8f3bd7-d3a7-5b00-9b86-d4ca22c98024", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-fq2j-3j99-rx65 is a false positive for axios 1.21.1." } }, { "id": "GHSA-fqj3-h9pc-443h", "affects": [ { "ref": "pkg:npm/axios@1.21.1" } ], "bom-ref": "urn:uuid:7964684b-c481-56c1-be04-a0b73c69a107", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-fqj3-h9pc-443h is a false positive for axios 1.21.1." } } ], "dependencies": [ { "ref": "pkg:npm/axios@1.21.1" } ] }