{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:0f4b4d91-ac9c-518c-bc58-469813d7d872", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@react-router/dev", "purl": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.2", "type": "library", "bom-ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.2", "version": "7.5.1-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-43864", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.2" } ], "bom-ref": "urn:uuid:6a1a0b5b-8471-591d-9800-310810cdf991", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-43864 is fixed in version 7.5.1-tuxcare.2 of @react-router/dev." } }, { "id": "CVE-2025-43865", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.2" } ], "bom-ref": "urn:uuid:796e3e51-101e-5f9e-ad30-d913d46ea88d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-43865 is fixed in version 7.5.1-tuxcare.2 of @react-router/dev." } }, { "id": "CVE-2025-59057", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.2" } ], "bom-ref": "urn:uuid:e492f20d-e5f9-5078-95e9-e3a91dae374e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59057 is fixed in version 7.5.1-tuxcare.2 of @react-router/dev." } }, { "id": "CVE-2025-61686", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.2" } ], "bom-ref": "urn:uuid:7711c6aa-968a-5869-a980-89329ba3efeb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-61686 affects version 7.5.1-tuxcare.2 of @react-router/dev, and is fixed in 7.5.1-tuxcare.5." } }, { "id": "CVE-2025-68470", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.2" } ], "bom-ref": "urn:uuid:cfac79f6-6b7c-573d-9287-d06e8f958d93", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-68470 is fixed in version 7.5.1-tuxcare.2 of @react-router/dev." } }, { "id": "CVE-2026-21884", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.2" } ], "bom-ref": "urn:uuid:885df874-bad6-5aa6-80da-6bc5d6835804", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-21884 is fixed in version 7.5.1-tuxcare.2 of @react-router/dev." } }, { "id": "CVE-2026-22029", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.2" } ], "bom-ref": "urn:uuid:e2d4578d-ad41-5521-8109-c945dbb3ef85", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22029 is fixed in version 7.5.1-tuxcare.2 of @react-router/dev." } }, { "id": "CVE-2026-22030", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.2" } ], "bom-ref": "urn:uuid:0ea79f82-33cc-5a43-a642-8b7f5942771e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22030 is fixed in version 7.5.1-tuxcare.2 of @react-router/dev." } }, { "id": "CVE-2026-33244", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.2" } ], "bom-ref": "urn:uuid:362600d4-d9d9-54ab-af4a-d86b49b52101", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33244 affects version 7.5.1-tuxcare.2 of @react-router/dev." } }, { "id": "CVE-2026-34077", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.2" } ], "bom-ref": "urn:uuid:0cec8dfd-2760-54e3-a87d-e0623b76fa6d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34077 affects version 7.5.1-tuxcare.2 of @react-router/dev, and is fixed in 7.5.1-tuxcare.10." } }, { "id": "CVE-2026-40181", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.2" } ], "bom-ref": "urn:uuid:e5ef88fb-10a9-582f-9aa9-e3b27abe9695", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-40181 affects version 7.5.1-tuxcare.2 of @react-router/dev, and is fixed in 7.5.1-tuxcare.9." } }, { "id": "CVE-2026-42211", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.2" } ], "bom-ref": "urn:uuid:4ba4600a-fbf7-5a2c-9625-5fe9f240c071", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42211 affects version 7.5.1-tuxcare.2 of @react-router/dev, and is fixed in 7.5.1-tuxcare.6." } }, { "id": "CVE-2026-42342", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.2" } ], "bom-ref": "urn:uuid:e4ba2fac-260c-593c-98e6-dcc5d0777e6f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42342 affects version 7.5.1-tuxcare.2 of @react-router/dev, and is fixed in 7.5.1-tuxcare.8." } }, { "id": "CVE-2026-53666", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.2" } ], "bom-ref": "urn:uuid:e1e30a91-0dd9-5c62-b6b9-dcd91328c42b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53666 affects version 7.5.1-tuxcare.2 of @react-router/dev, and is fixed in 7.5.1-tuxcare.5." } }, { "id": "CVE-2026-53669", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.2" } ], "bom-ref": "urn:uuid:9df2d687-5386-59a9-843d-276b562034ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53669 affects version 7.5.1-tuxcare.2 of @react-router/dev, and is fixed in 7.5.1-tuxcare.5." } }, { "id": "CVE-2026-55685", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.2" } ], "bom-ref": "urn:uuid:d78d592c-af04-56e2-b300-41fdc62fed0b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55685 affects version 7.5.1-tuxcare.2 of @react-router/dev, and is fixed in 7.5.1-tuxcare.7." } }, { "id": "GHSA-8v8x-cx79-35w7", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.2" } ], "bom-ref": "urn:uuid:0bbdfa34-1ea6-5c39-b12a-7e488d1efc83", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-8v8x-cx79-35w7 affects version 7.5.1-tuxcare.2 of @react-router/dev, and is fixed in 7.5.1-tuxcare.10." } } ], "dependencies": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.2" } ] }