{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:acaccd9b-56a6-52bb-9e51-632375227216", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@react-router/dev", "purl": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.3", "type": "library", "bom-ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.3", "version": "7.5.1-tuxcare.3", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-43864", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.3" } ], "bom-ref": "urn:uuid:91d812bc-95e7-592a-a200-1927db30c4d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-43864 is fixed in version 7.5.1-tuxcare.3 of @react-router/dev." } }, { "id": "CVE-2025-43865", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.3" } ], "bom-ref": "urn:uuid:41f0de89-33e4-5550-9058-86f59bf2fb9e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-43865 is fixed in version 7.5.1-tuxcare.3 of @react-router/dev." } }, { "id": "CVE-2025-59057", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.3" } ], "bom-ref": "urn:uuid:2f175ce5-9930-545b-8e9d-668c063c5114", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59057 is fixed in version 7.5.1-tuxcare.3 of @react-router/dev." } }, { "id": "CVE-2025-61686", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.3" } ], "bom-ref": "urn:uuid:b3b25fe9-f196-5904-8a91-aaf34f4b937c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-61686 affects version 7.5.1-tuxcare.3 of @react-router/dev, and is fixed in 7.5.1-tuxcare.5." } }, { "id": "CVE-2025-68470", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.3" } ], "bom-ref": "urn:uuid:472089f0-f842-57e7-9390-40c7419d4212", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-68470 is fixed in version 7.5.1-tuxcare.3 of @react-router/dev." } }, { "id": "CVE-2026-21884", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.3" } ], "bom-ref": "urn:uuid:9afc8666-615d-506b-a5d4-faf4a07c9150", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-21884 is fixed in version 7.5.1-tuxcare.3 of @react-router/dev." } }, { "id": "CVE-2026-22029", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.3" } ], "bom-ref": "urn:uuid:3a38ac2b-01bc-58bc-9576-255ac0d5eac2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22029 is fixed in version 7.5.1-tuxcare.3 of @react-router/dev." } }, { "id": "CVE-2026-22030", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.3" } ], "bom-ref": "urn:uuid:d2818220-def1-5957-ab4f-908f4af59c74", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22030 is fixed in version 7.5.1-tuxcare.3 of @react-router/dev." } }, { "id": "CVE-2026-33244", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.3" } ], "bom-ref": "urn:uuid:0be95d9d-472b-5b35-986c-05b4b62acb42", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33244 affects version 7.5.1-tuxcare.3 of @react-router/dev." } }, { "id": "CVE-2026-34077", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.3" } ], "bom-ref": "urn:uuid:fb486ae8-667e-54bf-8342-f348ced3e394", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34077 affects version 7.5.1-tuxcare.3 of @react-router/dev, and is fixed in 7.5.1-tuxcare.10." } }, { "id": "CVE-2026-40181", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.3" } ], "bom-ref": "urn:uuid:4fd19562-17ab-517c-9842-2c87f3c07ea4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-40181 affects version 7.5.1-tuxcare.3 of @react-router/dev, and is fixed in 7.5.1-tuxcare.9." } }, { "id": "CVE-2026-42211", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.3" } ], "bom-ref": "urn:uuid:834a88a4-b952-5b2a-ba36-439909c0c5fd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42211 affects version 7.5.1-tuxcare.3 of @react-router/dev, and is fixed in 7.5.1-tuxcare.6." } }, { "id": "CVE-2026-42342", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.3" } ], "bom-ref": "urn:uuid:c7baafc6-33c7-5c86-9b3c-3f975060cc43", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42342 affects version 7.5.1-tuxcare.3 of @react-router/dev, and is fixed in 7.5.1-tuxcare.8." } }, { "id": "CVE-2026-53666", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.3" } ], "bom-ref": "urn:uuid:1e1b526f-baf8-51f3-af73-f98d6cb85531", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53666 affects version 7.5.1-tuxcare.3 of @react-router/dev, and is fixed in 7.5.1-tuxcare.5." } }, { "id": "CVE-2026-53669", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.3" } ], "bom-ref": "urn:uuid:6c43f450-ae67-59e1-ba5f-7e20d617210b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53669 affects version 7.5.1-tuxcare.3 of @react-router/dev, and is fixed in 7.5.1-tuxcare.5." } }, { "id": "CVE-2026-55685", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.3" } ], "bom-ref": "urn:uuid:36db1071-2c63-5ec7-87e2-82e1a2c6855b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55685 affects version 7.5.1-tuxcare.3 of @react-router/dev, and is fixed in 7.5.1-tuxcare.7." } }, { "id": "GHSA-8v8x-cx79-35w7", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.3" } ], "bom-ref": "urn:uuid:18d036d5-483c-5ae9-bbca-e2fffba6bef2", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-8v8x-cx79-35w7 affects version 7.5.1-tuxcare.3 of @react-router/dev, and is fixed in 7.5.1-tuxcare.10." } } ], "dependencies": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.3" } ] }