{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:6ebacece-c56a-54aa-9820-2fe920056091", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@react-router/express", "purl": "pkg:npm/%40react-router/express@7.5.1-tuxcare.6", "type": "library", "bom-ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.6", "version": "7.5.1-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-43864", "affects": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.6" } ], "bom-ref": "urn:uuid:9456fe49-80ac-5a78-90c1-79c0a5c4d8eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-43864 is fixed in version 7.5.1-tuxcare.6 of @react-router/express." } }, { "id": "CVE-2025-43865", "affects": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.6" } ], "bom-ref": "urn:uuid:9bb00909-8093-56f3-9612-99cf902001d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-43865 is fixed in version 7.5.1-tuxcare.6 of @react-router/express." } }, { "id": "CVE-2025-59057", "affects": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.6" } ], "bom-ref": "urn:uuid:4c16bce3-9239-5deb-b822-a62ad80bec99", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59057 is fixed in version 7.5.1-tuxcare.6 of @react-router/express." } }, { "id": "CVE-2025-61686", "affects": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.6" } ], "bom-ref": "urn:uuid:991c38b6-e17b-5c76-9bde-43e222286ab0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61686 is fixed in version 7.5.1-tuxcare.6 of @react-router/express." } }, { "id": "CVE-2025-68470", "affects": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.6" } ], "bom-ref": "urn:uuid:db6e10eb-6d8b-54c8-b6cf-c2c4d514ad6d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-68470 is fixed in version 7.5.1-tuxcare.6 of @react-router/express." } }, { "id": "CVE-2026-21884", "affects": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.6" } ], "bom-ref": "urn:uuid:e6323484-9d9c-5559-a7fb-db1b6627498d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-21884 is fixed in version 7.5.1-tuxcare.6 of @react-router/express." } }, { "id": "CVE-2026-22029", "affects": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.6" } ], "bom-ref": "urn:uuid:0f275770-42de-5a13-ba41-b090ba4b989a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22029 is fixed in version 7.5.1-tuxcare.6 of @react-router/express." } }, { "id": "CVE-2026-22030", "affects": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.6" } ], "bom-ref": "urn:uuid:d306588d-1c6f-54f5-bbc5-5f63e16148ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22030 is fixed in version 7.5.1-tuxcare.6 of @react-router/express." } }, { "id": "CVE-2026-33244", "affects": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.6" } ], "bom-ref": "urn:uuid:f3ee6c03-1aec-5d28-85d3-b700dd744fc6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33244 affects version 7.5.1-tuxcare.6 of @react-router/express." } }, { "id": "CVE-2026-34077", "affects": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.6" } ], "bom-ref": "urn:uuid:6b518f41-7767-583d-b241-f2e448aff500", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34077 affects version 7.5.1-tuxcare.6 of @react-router/express, and is fixed in 7.5.1-tuxcare.10." } }, { "id": "CVE-2026-40181", "affects": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.6" } ], "bom-ref": "urn:uuid:69359dd9-811b-5dd0-b1ae-1f36499c676f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-40181 affects version 7.5.1-tuxcare.6 of @react-router/express, and is fixed in 7.5.1-tuxcare.9." } }, { "id": "CVE-2026-42211", "affects": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.6" } ], "bom-ref": "urn:uuid:50756d0c-a4c9-5183-bffa-d068d7b0bd75", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42211 is fixed in version 7.5.1-tuxcare.6 of @react-router/express." } }, { "id": "CVE-2026-42342", "affects": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.6" } ], "bom-ref": "urn:uuid:93dd982b-c0a6-5828-acd0-84b7a3e932d1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42342 affects version 7.5.1-tuxcare.6 of @react-router/express, and is fixed in 7.5.1-tuxcare.8." } }, { "id": "CVE-2026-53666", "affects": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.6" } ], "bom-ref": "urn:uuid:313a1917-8130-5c85-8121-16d8cd33f500", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53666 is fixed in version 7.5.1-tuxcare.6 of @react-router/express." } }, { "id": "CVE-2026-53669", "affects": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.6" } ], "bom-ref": "urn:uuid:6420f43c-1240-50c0-b906-b4185444e6cb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53669 is fixed in version 7.5.1-tuxcare.6 of @react-router/express." } }, { "id": "CVE-2026-55685", "affects": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.6" } ], "bom-ref": "urn:uuid:1390bd58-dd22-5560-b799-aa9f1f520f9b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55685 affects version 7.5.1-tuxcare.6 of @react-router/express, and is fixed in 7.5.1-tuxcare.7." } }, { "id": "GHSA-8v8x-cx79-35w7", "affects": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.6" } ], "bom-ref": "urn:uuid:e84b240a-dd09-5dfd-9617-7a5acd5c3135", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-8v8x-cx79-35w7 affects version 7.5.1-tuxcare.6 of @react-router/express, and is fixed in 7.5.1-tuxcare.10." } } ], "dependencies": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.6" } ] }