{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:17b63bd3-3b85-5235-a68f-457f75aa1a74", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@next/eslint-plugin-next", "purl": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6", "type": "library", "bom-ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6", "version": "13.5.11-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "AIKIDO-2024-10173", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:ec2a8f4f-d6b3-52d6-b7d1-8704fd8f3ef1", "analysis": { "state": "exploitable", "detail": "Vulnerability AIKIDO-2024-10173 affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "AIKIDO-2025-10936", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:036d6e26-d3f4-5af2-9b1c-8c576192e107", "analysis": { "state": "exploitable", "detail": "Vulnerability AIKIDO-2025-10936 affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2024-34351", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:dc743414-964d-52ae-a35f-4b15a14c6c0a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-34351 affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2024-47831", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:c3fd5aaf-885c-5ce9-87f2-8258f538fb0f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-47831 affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2024-51479", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:38439bb7-5d00-537c-92f3-340b9647db3d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-51479 affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2025-32421", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:b1e0b7ac-497d-5bb9-a24e-c3728c46374d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32421 affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2025-48068", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:de1d2b6b-60b7-54e4-b9e8-26dc5d5d5b1b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-48068 affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2025-55173", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:2dc19131-97bd-591a-92c5-5a2ef8afe513", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55173 affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2025-55183", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:0604d64f-26b9-5c50-b3a1-e0274933ae97", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55183 affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.16." } }, { "id": "CVE-2025-55184", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:3454a207-02b8-5f0d-ace3-f9bc76f52382", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55184 affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2025-57752", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:36f088d8-db3f-5fbc-8d7a-3732e70afd1a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-57752 affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2025-57822", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:515ddbe0-65e2-5bc0-bf3f-3fd8c7fef90d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-57822 affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2025-59471", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:4b879c27-5432-5f59-9009-2558d9cd0119", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59471 affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2025-59472", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:da494ddc-5f47-5d39-bc56-2d48ebc9e54c", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.6 of @next/eslint-plugin-next. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat...", "justification": "code_not_present" } }, { "id": "CVE-2025-67779", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:bb01f45b-b30c-5e81-a869-d9d8ad020c72", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67779 affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2026-27980", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:9f5c9a40-7e6d-5a91-b97a-793b8fd61b83", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27980 affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2026-29057", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:b5cd5109-31a4-5e9f-b300-6456a28e6da3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-29057 affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2026-44572", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:33600605-bdc7-5dd2-9fc9-c95dfb980503", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44572 affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2026-44573", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:1f939999-a749-5816-bd17-aa2c128671a1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44573 affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2026-44577", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:420a45e1-b446-5dcd-bf64-3b1d91b0e6c5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44577 affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-44578", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:8bf0779b-1db0-5c07-9857-3b14b9619ab1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44578 affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-44580", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:907d99b7-54c6-5d29-a253-c15e595b469c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44580 affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-44581", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:58f7759c-d5a6-5f47-8e5e-5424478c10ab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44581 affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-44582", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:d929623a-864f-5fbe-8f3a-caa6f72472be", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44582 affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-64641", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:9bcd1bbb-5f00-552f-8555-778e298f1ed1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64641 affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-64643", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:b5c0732a-2aa0-5664-a5e5-249612eeb2ad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64643 affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-64645", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:51740ec5-021e-5182-a015-708ba33beeed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64645 affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-64646", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:e044f605-6f8f-5e4d-9d78-7b6ea3125c7c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64646 affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-64647", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:852d8356-f11f-52b8-88f4-10aa16980950", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64647 affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-64648", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:89fb64d9-7169-51a3-87ae-19406d1ba3ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64648 affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.16." } }, { "id": "CVE-2026-75604", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:44ddef4d-6bea-5bdd-8d0c-8f64cfa03dd0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-75604 affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next." } }, { "id": "GHSA-2xp9-vwfh-vxw4", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:59a2dd03-b45f-591a-8722-f74fe6a47231", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-2xp9-vwfh-vxw4 affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next." } }, { "id": "GHSA-5j59-xgg2-r9c4", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:e5c596ba-c5fe-5257-b5b7-d2d8542245bb", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "GHSA-8h8q-6873-q5fj", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:588739ed-436c-5512-a065-d539f047863b", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-8h8q-6873-q5fj affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "GHSA-h25m-26qc-wcjf", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:0d77350e-8209-5818-8912-d16901d1d82b", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-h25m-26qc-wcjf affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "GHSA-mwv6-3258-q52c", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:c41f5909-072f-5fba-aeac-fb537e019c9b", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mwv6-3258-q52c affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "GHSA-q4gf-8mx6-v5v3", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ], "bom-ref": "urn:uuid:4794f5de-ea27-5093-a14f-064fc60bba3a", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 affects version 13.5.11-tuxcare.6 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } } ], "dependencies": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.6" } ] }