{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a5d62b35-42f7-5afb-912f-0c06b293aff4", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@react-router/dev", "purl": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.6", "type": "library", "bom-ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.6", "version": "7.5.1-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-43864", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.6" } ], "bom-ref": "urn:uuid:e04a4c42-ef84-5fc0-a04d-4b78aacce356", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-43864 is fixed in version 7.5.1-tuxcare.6 of @react-router/dev." } }, { "id": "CVE-2025-43865", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.6" } ], "bom-ref": "urn:uuid:511b0bd6-2cc5-531f-9592-04bb411e3d86", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-43865 is fixed in version 7.5.1-tuxcare.6 of @react-router/dev." } }, { "id": "CVE-2025-59057", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.6" } ], "bom-ref": "urn:uuid:4227d329-0aa8-57fe-9549-3575ae88deb3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59057 is fixed in version 7.5.1-tuxcare.6 of @react-router/dev." } }, { "id": "CVE-2025-61686", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.6" } ], "bom-ref": "urn:uuid:c6f01393-9217-50a2-adc5-bfff950b4c7d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61686 is fixed in version 7.5.1-tuxcare.6 of @react-router/dev." } }, { "id": "CVE-2025-68470", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.6" } ], "bom-ref": "urn:uuid:da6b366d-bacf-5f6d-a71f-0277f8d49861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-68470 is fixed in version 7.5.1-tuxcare.6 of @react-router/dev." } }, { "id": "CVE-2026-21884", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.6" } ], "bom-ref": "urn:uuid:fce5ebb1-aadd-5fc9-a714-cc8cdffd963a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-21884 is fixed in version 7.5.1-tuxcare.6 of @react-router/dev." } }, { "id": "CVE-2026-22029", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.6" } ], "bom-ref": "urn:uuid:aed72086-5673-5e59-9af6-86ee3fdcf632", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22029 is fixed in version 7.5.1-tuxcare.6 of @react-router/dev." } }, { "id": "CVE-2026-22030", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.6" } ], "bom-ref": "urn:uuid:f2dfca44-76dc-54a3-aeb3-ed47a9aea26c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22030 is fixed in version 7.5.1-tuxcare.6 of @react-router/dev." } }, { "id": "CVE-2026-33244", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.6" } ], "bom-ref": "urn:uuid:e7dbc368-d369-59bd-b53c-f4da1cd4a01a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33244 affects version 7.5.1-tuxcare.6 of @react-router/dev." } }, { "id": "CVE-2026-34077", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.6" } ], "bom-ref": "urn:uuid:df97f434-3708-5048-a606-8d5c83b3833c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34077 affects version 7.5.1-tuxcare.6 of @react-router/dev, and is fixed in 7.5.1-tuxcare.10." } }, { "id": "CVE-2026-40181", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.6" } ], "bom-ref": "urn:uuid:9150d086-a761-5b7a-8fec-2c38f6765a10", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-40181 affects version 7.5.1-tuxcare.6 of @react-router/dev, and is fixed in 7.5.1-tuxcare.9." } }, { "id": "CVE-2026-42211", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.6" } ], "bom-ref": "urn:uuid:e3efc414-55a6-5a13-805f-1b3d1717ab6e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42211 is fixed in version 7.5.1-tuxcare.6 of @react-router/dev." } }, { "id": "CVE-2026-42342", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.6" } ], "bom-ref": "urn:uuid:5acb6d06-2f0f-596c-84fc-a5ef1752ce27", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42342 affects version 7.5.1-tuxcare.6 of @react-router/dev, and is fixed in 7.5.1-tuxcare.8." } }, { "id": "CVE-2026-53666", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.6" } ], "bom-ref": "urn:uuid:09e55f59-6399-584d-84fa-fbc086650c41", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53666 is fixed in version 7.5.1-tuxcare.6 of @react-router/dev." } }, { "id": "CVE-2026-53669", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.6" } ], "bom-ref": "urn:uuid:49e8d3ca-16ef-52af-88f5-81f8a8bdea90", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53669 is fixed in version 7.5.1-tuxcare.6 of @react-router/dev." } }, { "id": "CVE-2026-55685", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.6" } ], "bom-ref": "urn:uuid:bbb76fa8-421f-53f6-8172-d5b0e869f276", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55685 affects version 7.5.1-tuxcare.6 of @react-router/dev, and is fixed in 7.5.1-tuxcare.7." } }, { "id": "GHSA-8v8x-cx79-35w7", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.6" } ], "bom-ref": "urn:uuid:be440d62-a61d-5b70-9683-dd3452af9ef9", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-8v8x-cx79-35w7 affects version 7.5.1-tuxcare.6 of @react-router/dev, and is fixed in 7.5.1-tuxcare.10." } } ], "dependencies": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.6" } ] }