{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:91976b22-2c27-51dd-8db0-7cd6858f9e7a", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@react-router/dev", "purl": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.8", "type": "library", "bom-ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.8", "version": "7.5.1-tuxcare.8", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-43864", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.8" } ], "bom-ref": "urn:uuid:8485dbf3-9aa6-5cce-9303-3f44da5476bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-43864 is fixed in version 7.5.1-tuxcare.8 of @react-router/dev." } }, { "id": "CVE-2025-43865", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.8" } ], "bom-ref": "urn:uuid:754504f6-bb73-51bc-8cb6-3788117b3da5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-43865 is fixed in version 7.5.1-tuxcare.8 of @react-router/dev." } }, { "id": "CVE-2025-59057", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.8" } ], "bom-ref": "urn:uuid:2a3f8b9f-9710-518e-b0e9-cfc80a2784fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59057 is fixed in version 7.5.1-tuxcare.8 of @react-router/dev." } }, { "id": "CVE-2025-61686", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.8" } ], "bom-ref": "urn:uuid:c5fd2481-21d5-5b1f-a092-917554152a1a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61686 is fixed in version 7.5.1-tuxcare.8 of @react-router/dev." } }, { "id": "CVE-2025-68470", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.8" } ], "bom-ref": "urn:uuid:5f776338-bb51-53e2-8460-0f652221e064", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-68470 is fixed in version 7.5.1-tuxcare.8 of @react-router/dev." } }, { "id": "CVE-2026-21884", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.8" } ], "bom-ref": "urn:uuid:ee8b4a2c-747f-5da8-9167-7e737c1d0c85", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-21884 is fixed in version 7.5.1-tuxcare.8 of @react-router/dev." } }, { "id": "CVE-2026-22029", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.8" } ], "bom-ref": "urn:uuid:91c5ea7f-a275-50a1-8e39-9f2395c20608", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22029 is fixed in version 7.5.1-tuxcare.8 of @react-router/dev." } }, { "id": "CVE-2026-22030", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.8" } ], "bom-ref": "urn:uuid:bb002d0e-0eaf-53fb-bf7c-fbf85d697d99", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22030 is fixed in version 7.5.1-tuxcare.8 of @react-router/dev." } }, { "id": "CVE-2026-33244", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.8" } ], "bom-ref": "urn:uuid:8291e2a6-b959-5045-adb5-6b6fc6139e0c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33244 affects version 7.5.1-tuxcare.8 of @react-router/dev." } }, { "id": "CVE-2026-34077", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.8" } ], "bom-ref": "urn:uuid:b8e4e30f-b3d3-586b-a16e-063e61337889", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34077 affects version 7.5.1-tuxcare.8 of @react-router/dev, and is fixed in 7.5.1-tuxcare.10." } }, { "id": "CVE-2026-40181", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.8" } ], "bom-ref": "urn:uuid:fd5d08c4-5b76-5765-96d2-7576289147e7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-40181 affects version 7.5.1-tuxcare.8 of @react-router/dev, and is fixed in 7.5.1-tuxcare.9." } }, { "id": "CVE-2026-42211", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.8" } ], "bom-ref": "urn:uuid:6f23d04f-2629-5263-b5e7-5017964d819c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42211 is fixed in version 7.5.1-tuxcare.8 of @react-router/dev." } }, { "id": "CVE-2026-42342", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.8" } ], "bom-ref": "urn:uuid:0beb3224-58d3-53fc-b236-1003791c800b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42342 is fixed in version 7.5.1-tuxcare.8 of @react-router/dev." } }, { "id": "CVE-2026-53666", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.8" } ], "bom-ref": "urn:uuid:5739d513-fa70-5444-b0ea-9efe4a3c1c36", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53666 is fixed in version 7.5.1-tuxcare.8 of @react-router/dev." } }, { "id": "CVE-2026-53669", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.8" } ], "bom-ref": "urn:uuid:5e7353de-a074-5d89-bbd7-d35e2a345325", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53669 is fixed in version 7.5.1-tuxcare.8 of @react-router/dev." } }, { "id": "CVE-2026-55685", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.8" } ], "bom-ref": "urn:uuid:47f016f1-b781-5d32-8e87-188641bc2462", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55685 is fixed in version 7.5.1-tuxcare.8 of @react-router/dev." } }, { "id": "GHSA-8v8x-cx79-35w7", "affects": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.8" } ], "bom-ref": "urn:uuid:77d806b1-533a-55ca-9be0-8dd2839c72e2", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-8v8x-cx79-35w7 affects version 7.5.1-tuxcare.8 of @react-router/dev, and is fixed in 7.5.1-tuxcare.10." } } ], "dependencies": [ { "ref": "pkg:npm/%40react-router/dev@7.5.1-tuxcare.8" } ] }