{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:24bc2b77-9a9c-5f01-99bb-f79b1c7e6d74", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "axios", "purl": "pkg:npm/axios@1.8.2", "type": "library", "bom-ref": "pkg:npm/axios@1.8.2", "version": "1.8.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2019-10742", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:68e9e5fe-3cb6-51e6-992d-847640441c55", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10742 affects version 1.8.2 of axios." } }, { "id": "CVE-2020-28168", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:765ecb65-8e23-53a5-adf7-61733f47b636", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-28168 affects version 1.8.2 of axios." } }, { "id": "CVE-2021-3749", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:92d2a8bd-0d62-58ab-9e68-a4fd29074d2d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3749 affects version 1.8.2 of axios." } }, { "id": "CVE-2023-45857", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:39fbf90d-fb59-5707-983a-51073b2510aa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-45857 affects version 1.8.2 of axios." } }, { "id": "CVE-2024-39338", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:fcbd40a4-0b8d-5458-9389-d5e67ccf28ad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39338 affects version 1.8.2 of axios." } }, { "id": "CVE-2025-27152", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:63c15506-5b33-5985-9cbe-a13326e83188", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27152 affects version 1.8.2 of axios." } }, { "id": "CVE-2025-54371", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:c6b49751-4f75-54cd-a7c4-fbe2423ea6b2", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-54371 is a false positive for axios 1.8.2." } }, { "id": "CVE-2025-58754", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:dc2ffe40-b054-5999-98c2-711198a5fdc8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58754 affects version 1.8.2 of axios." } }, { "id": "CVE-2025-62718", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:5d08f4b2-d3be-5413-870c-b6e87087c8af", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-62718 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-101898", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:e40b1491-e9c7-53c1-948a-486d8e479c72", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101898 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-101899", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:c393bf7f-5b3e-5372-8ad7-cc7285433e4d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101899 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-101900", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:4f4a2fff-8fcf-5981-a4f3-30d36c74c3a7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101900 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-101901", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:8be107b4-b55d-5b06-91cb-4b7999833330", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101901 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-101902", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:829765a8-c295-556b-a4d4-516629def41e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101902 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-101903", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:1acf5bca-b02f-5beb-9950-3fdb58cc6a35", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101903 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-101904", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:ba9f4e04-ead6-5f39-abf2-30b9b743e6a3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101904 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-101905", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:c3e82b2f-7f00-5af3-ac12-8e7567b43430", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101905 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-101906", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:c3f9400b-7e1c-5d87-99d8-59862fdc0df1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101906 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-101907", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:428ee750-e408-567b-b595-a6b8175593bd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101907 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-101908", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:2b2298ef-e622-553a-bca9-89b4275706e5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101908 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-101909", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:2ba62845-8fd0-54bc-8106-b43eba8140bd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101909 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-25639", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:ba251c77-26e7-50d9-b650-3e42a0f8f91c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25639 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-39865", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:83923be8-e5a3-5d6e-ba67-a03382df1c8d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-39865 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-40175", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:d4a7a1d9-e251-580f-b865-60ae66da279f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-40175 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-42033", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:1e539bdb-9ad9-547e-8e7e-6287aaed7588", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42033 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-42034", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:9ace8320-be2d-5964-a9fb-317f2ef3561d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42034 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-42035", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:188339af-fd6d-5b8f-b6ac-24831f13cbd0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42035 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-42036", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:6c693869-d2c4-5a14-aa37-d9f39c83ce75", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42036 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-42037", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:990e3f24-0d4a-58ee-b0ba-2f5eb3e0058e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42037 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-42038", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:1846116b-b2e2-5f82-9db6-04ca6290740a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42038 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-42039", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:671e078c-cf32-517f-801e-e744f04b68bf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42039 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-42040", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:774d971d-2b35-5f75-90e6-44e4773154e5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42040 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-42041", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:e74c9d6f-0c25-552e-af4a-0b9336ba4dd3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42041 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-42042", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:eafd8a1f-a1e4-531f-b267-45383e26c6d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42042 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-42043", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:75197acd-5fb6-5bd4-81e2-0caaa5eea73c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42043 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-42044", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:8f69fb75-4074-5ca6-87ed-403717469229", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42044 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-42264", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:a2c449d7-52e5-593f-88cf-4e419ac1e97a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42264 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-44486", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:83a58a92-10bf-55a2-b1c0-14daee7acf84", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44486 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-44487", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:4d02c17f-f841-5f08-9821-25683a924cba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44487 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-44488", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:5d33a7e6-0bc3-5a15-92e2-ea3c39901c2d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44488 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-44489", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:43a8d56f-b951-58a0-9d77-fb9c30fc76e1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44489 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-44490", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:2113bd59-decf-52a1-ab0e-940492758a56", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44490 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-44492", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:7df5ce54-ae6e-57bc-a7ad-900e989f22bc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44492 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-44494", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:5dbd9dd3-3089-5dc6-8043-a4b98494a9c8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44494 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-44495", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:094289a8-2b1a-51ba-a4ea-755c0b58b5fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44495 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-44496", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:ecee793b-228d-581d-957b-6edd43ae53ef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44496 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-67312", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:857ac8ca-bd2e-5ef6-8bf4-ada730d9e472", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67312 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-67313", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:21abd216-e050-5b07-bf79-36a67faf6a33", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67313 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-67314", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:ba65db84-4037-5e4e-be59-72953de82607", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67314 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-67315", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:8f4839af-9788-592c-bfb2-a6bf793dada9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67315 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-67316", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:cf821c93-3976-5392-8930-1cfc674c14e0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67316 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-67317", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:e8fa307a-0bcd-5c34-8b6d-10704130d3e3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67317 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-67318", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:2bff00c1-8bd2-52f3-a0b6-e7a3c9397c4a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67318 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-67319", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:00168cb2-9929-5677-815a-9ac4bc11dc44", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67319 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-67320", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:168c5aba-130b-55d3-a0de-5aba160e1358", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67320 affects version 1.8.2 of axios." } }, { "id": "CVE-2026-67321", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:0f8dc5ed-499e-58de-9371-87483ca11b89", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67321 affects version 1.8.2 of axios." } }, { "id": "GHSA-38gx-cfqf-f652", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:e88b2117-f9c6-5512-a5f3-620a733c4253", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-38gx-cfqf-f652 is a false positive for axios 1.8.2." } }, { "id": "GHSA-39j5-w47m-2gmv", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:03416f14-c24f-5692-a30c-44ec6384c121", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-39j5-w47m-2gmv is a false positive for axios 1.8.2." } }, { "id": "GHSA-3mcp-22mf-vrw3", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:13ef732a-e7d2-5097-b21c-d2e9deacbe72", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-3mcp-22mf-vrw3 is a false positive for axios 1.8.2." } }, { "id": "GHSA-4ww2-rjh2-xpv9", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:2b8f4e8d-01af-5f1f-9301-1efb440465ce", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-4ww2-rjh2-xpv9 is a false positive for axios 1.8.2." } }, { "id": "GHSA-68jp-44vc-2x5h", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:44040ced-53a2-5c31-ba75-6b4b14420607", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-68jp-44vc-2x5h is a false positive for axios 1.8.2." } }, { "id": "GHSA-6hqm-hm2v-3p2p", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:a60e843f-84b7-5d34-85b2-37be6d6ee790", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-6hqm-hm2v-3p2p is a false positive for axios 1.8.2." } }, { "id": "GHSA-9wx3-p993-35vp", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:c8dd48cb-ba87-5d0e-af51-c86c066351a7", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-9wx3-p993-35vp is a false positive for axios 1.8.2." } }, { "id": "GHSA-f2r5-pqh9-r8f8", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:51d87b27-dcb5-5783-8e93-810b6c1f78b9", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-f2r5-pqh9-r8f8 is a false positive for axios 1.8.2." } }, { "id": "GHSA-fq2j-3j99-rx65", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:8353ee48-f6ce-59f3-857c-612eb0bd831e", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-fq2j-3j99-rx65 is a false positive for axios 1.8.2." } }, { "id": "GHSA-fqj3-h9pc-443h", "affects": [ { "ref": "pkg:npm/axios@1.8.2" } ], "bom-ref": "urn:uuid:0505c01a-7182-5b1c-bdb0-47a4aed1b4d4", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-fqj3-h9pc-443h is a false positive for axios 1.8.2." } } ], "dependencies": [ { "ref": "pkg:npm/axios@1.8.2" } ] }