{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:017c6771-ef1c-5bd5-81f7-cd267bb30793", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@next/eslint-plugin-next", "purl": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9", "type": "library", "bom-ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9", "version": "13.5.11-tuxcare.9", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "AIKIDO-2024-10173", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:37aa5bcd-1da5-50d5-a650-f3e0ea3874b1", "analysis": { "state": "exploitable", "detail": "Vulnerability AIKIDO-2024-10173 affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "AIKIDO-2025-10936", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:209b7128-f440-5e49-9b54-aa6033918961", "analysis": { "state": "exploitable", "detail": "Vulnerability AIKIDO-2025-10936 affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2024-34351", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:804c6cbd-d860-5348-aaab-7811ec1ad0fd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-34351 affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2024-47831", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:7800a9a4-a18d-5721-b9cf-31ddcf2ffee5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-47831 affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2024-51479", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:81edbb9c-52fc-560f-8d8e-42c01c922e72", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-51479 affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2025-32421", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:81a67894-eaa7-5f6b-bc99-b92353c202e5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-32421 affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2025-48068", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:237b7544-c016-576d-b350-2fbcf5ba4668", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-48068 affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2025-55173", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:273304a6-a267-5fe3-98c9-25b6dc290523", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55173 affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2025-55183", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:93bc8512-2719-5357-8dfb-d7b3281e0eb4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55183 affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.16." } }, { "id": "CVE-2025-55184", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:df3ae429-bcb8-502d-bceb-bbb41e176f6f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55184 affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2025-57752", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:2c3dbcd4-9b70-5aba-afc0-8967d810edf8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-57752 affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2025-57822", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:52bdaf0e-5b25-5df4-a69c-add2d3067cca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-57822 affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2025-59471", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:389ee2bb-3f7f-54c4-86a0-b226f57e1a02", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59471 affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2025-59472", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:e0b926f7-a1ea-5750-8d49-bb0625fa5eb9", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.9 of @next/eslint-plugin-next. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat...", "justification": "code_not_present" } }, { "id": "CVE-2025-67779", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:4e421477-9bec-5fbc-827e-670b01c6c18c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-67779 affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2026-27980", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:fdd4f2c9-3f90-580a-852e-126bf08f669c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27980 affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2026-29057", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:5e790ad2-4ad2-5fc1-8185-330dcaf5b759", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-29057 affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2026-44572", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:a1e0bcd0-5ed5-5a5b-99de-4d1202d05d11", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44572 affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2026-44573", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:3989b073-2da1-525e-b406-2b89d3a32a22", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44573 affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "CVE-2026-44577", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:6053a6d3-e6ba-5d04-8547-d5d355c38c84", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44577 affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-44578", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:bb30e9fc-8296-5e10-99dd-f2524b2ef333", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44578 affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-44580", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:8cb41c00-b615-5e9a-bf5c-3f2cf54e7470", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44580 affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-44581", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:ddae420a-17c8-5143-864e-eb618a39fc2e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44581 affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-44582", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:b43d054a-7023-5c24-9126-04ed066a784f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44582 affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-64641", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:92fe7f3e-5a0e-5998-871e-397de17b588c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64641 affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-64643", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:b82e6602-e887-570c-9cfd-14f45339d331", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64643 affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-64645", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:4fc2216e-d8fb-568b-b55a-b590fdf5f16b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64645 affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-64646", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:c0a8ae7f-2def-5d76-9e45-9416d55c782c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64646 affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-64647", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:7fd1c355-abc3-58a3-bae1-22303a93f0cb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64647 affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "CVE-2026-64648", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:5bdd4c6e-2519-56ad-9519-91b43b8a5dc9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-64648 affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.16." } }, { "id": "CVE-2026-75604", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:3b0b04e0-887f-507d-88ee-478d827af88f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-75604 affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next." } }, { "id": "GHSA-2xp9-vwfh-vxw4", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:0a5ec5a4-7d26-5f6c-b490-b023d7bcb7a1", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-2xp9-vwfh-vxw4 affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next." } }, { "id": "GHSA-5j59-xgg2-r9c4", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:87adfce5-378e-5fb5-8e47-9d930688fd82", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "GHSA-8h8q-6873-q5fj", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:2015c63f-e865-50a2-9b89-ac3f09855ea7", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-8h8q-6873-q5fj affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } }, { "id": "GHSA-h25m-26qc-wcjf", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:768a8ca4-ea10-5b61-bb08-c8d2577f21fc", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-h25m-26qc-wcjf affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "GHSA-mwv6-3258-q52c", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:a8772fdf-7826-5318-a605-6831d916375b", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mwv6-3258-q52c affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.13." } }, { "id": "GHSA-q4gf-8mx6-v5v3", "affects": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ], "bom-ref": "urn:uuid:9a89eb66-d62f-5b9a-9849-75f0dd0ecc0d", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 affects version 13.5.11-tuxcare.9 of @next/eslint-plugin-next, and is fixed in 13.5.11-tuxcare.14." } } ], "dependencies": [ { "ref": "pkg:npm/%40next/eslint-plugin-next@13.5.11-tuxcare.9" } ] }