{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:04168861-f229-55d8-b41b-45feb1895725", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@next/eslint-plugin-next", "purl": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7", "type": "library", "bom-ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7", "version": "13.5.11-tuxcare.7", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "AIKIDO-2024-10173", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:96413ffa-0b3a-52d8-8d90-594d334d53aa", "analysis": { "state": "exploitable", "detail": "Vulnerability AIKIDO-2024-10173 affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "AIKIDO-2025-10936", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:513fcd9a-6e78-5ab4-af6d-6b8c627aa8cb", "analysis": { "state": "exploitable", "detail": "Vulnerability AIKIDO-2025-10936 affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2024-34351", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:f9bc1dd5-5e56-5d17-95b0-becabcbc9e6c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-34351 affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2024-47831", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:81974a0e-3f9c-5f66-9463-5457e23beb19", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-47831 affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2024-51479", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:448eb8a4-cf2d-56af-9a84-cd4d1f43b5c0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-51479 affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2025-32421", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:dc952101-36b1-5762-a97f-a2619842f256", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32421 affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2025-48068", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:cfad4717-1e8a-5d01-905a-effdd35ff959", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-48068 affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2025-55173", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:9904450e-2aee-53b8-9fab-1250530c74b5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55173 affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2025-55183", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:95917e5c-5f2e-5922-a816-94aad0748af9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55183 affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.16." } }, { "id": "CVE-2025-55184", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:92db2065-48f0-5a84-b008-a996d96a0a09", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55184 affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2025-57752", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:e88e87f4-dbe7-5ade-a98e-f25bfd29f10f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-57752 affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2025-57822", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:12caa35b-79bc-597c-a874-3716dd8a4531", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-57822 affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2025-59471", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:9eafd1ff-6811-5f32-b442-7cf28fb833f7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59471 affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2025-59472", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:09f37262-e332-5c32-8ab7-530c58cc1f88", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.7 of @next/eslint-plugin-next. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat...", "justification": "code_not_present" } }, { "id": "CVE-2025-67779", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:05e042aa-9399-5e79-b3db-aeda9c60cccb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67779 affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2026-27980", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:7899529c-dd4d-50dc-b100-23801e3a4ce4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27980 affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2026-29057", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:398dfe7b-0683-5ead-97dc-6e17a83e01c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-29057 affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2026-44572", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:84e22e36-c960-5091-8a98-f63d0d215724", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44572 affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2026-44573", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:aba22c8e-4096-5a00-b601-1070f2b86817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44573 affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2026-44577", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:65db316d-3d47-57dd-86da-2acd3c6a293a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44577 affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-44578", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:af63169d-a275-51e9-987f-7167f9b68531", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44578 affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-44580", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:57c76d53-24ce-5be2-92f5-cb6bff3e2700", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44580 affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-44581", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:5406852b-2143-5993-8378-c018f24e19c6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44581 affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-44582", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:ef232a73-a38b-5879-bd61-5fe7c521a4b2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44582 affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-64641", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:56570cc5-105e-59b3-872c-909af23817c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64641 affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-64643", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:0bae0904-0929-59e5-ab4a-704e75839aa3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64643 affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-64645", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:3a86b17d-c163-59c8-a4b2-de738bb1f015", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64645 affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-64646", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:92422627-804f-5e70-97a3-94844b5d88f9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64646 affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-64647", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:1bc0afbf-1eb2-54dc-bbe9-cd394c534be6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64647 affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-64648", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:1e8a1d3a-584d-5700-aff2-4d472f65b036", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64648 affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.16." } }, { "id": "CVE-2026-75604", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:b058848a-3064-5ca4-8fa7-e3651cff7932", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-75604 affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next." } }, { "id": "GHSA-2xp9-vwfh-vxw4", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:9050b69c-990d-53b3-9326-79479c3a0045", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-2xp9-vwfh-vxw4 affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next." } }, { "id": "GHSA-5j59-xgg2-r9c4", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:4b85a6d9-1950-5e6b-932a-7ec0679a8dd9", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "GHSA-8h8q-6873-q5fj", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:3106539a-1062-5200-95ac-d388e8f30b55", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-8h8q-6873-q5fj affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "GHSA-h25m-26qc-wcjf", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:493dff92-1166-5f0b-b553-5cb88fcf53e2", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-h25m-26qc-wcjf affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "GHSA-mwv6-3258-q52c", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:d3cf128f-ee39-5a8d-8ab6-f2b4e613b81b", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mwv6-3258-q52c affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "GHSA-q4gf-8mx6-v5v3", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ], "bom-ref": "urn:uuid:c4a7eda0-8a00-5354-8c25-944792a1bd14", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 affects version 13.5.11-tuxcare.7 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } } ], "dependencies": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.7" } ] }