{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:7b8e3c8a-fda2-5ceb-95e3-d1745676b8ee", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@react-router/express", "purl": "pkg:npm/%40react-router/express@7.5.1-tuxcare.8", "type": "library", "bom-ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.8", "version": "7.5.1-tuxcare.8", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-43864", "affects": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.8" } ], "bom-ref": "urn:uuid:3ec6170e-d1f3-505e-8bdf-9d70bf0efa95", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-43864 is fixed in version 7.5.1-tuxcare.8 of @react-router/express." } }, { "id": "CVE-2025-43865", "affects": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.8" } ], "bom-ref": "urn:uuid:152f287c-8c3c-5e7e-ae21-e41e218392a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-43865 is fixed in version 7.5.1-tuxcare.8 of @react-router/express." } }, { "id": "CVE-2025-59057", "affects": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.8" } ], "bom-ref": "urn:uuid:48ed94a1-8ccd-5e65-8884-698c206e1a88", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59057 is fixed in version 7.5.1-tuxcare.8 of @react-router/express." } }, { "id": "CVE-2025-61686", "affects": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.8" } ], "bom-ref": "urn:uuid:2b9cc494-2322-586e-ab54-7a608012a041", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61686 is fixed in version 7.5.1-tuxcare.8 of @react-router/express." } }, { "id": "CVE-2025-68470", "affects": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.8" } ], "bom-ref": "urn:uuid:aa53fc27-f35e-5ced-a81f-f407e54178e5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-68470 is fixed in version 7.5.1-tuxcare.8 of @react-router/express." } }, { "id": "CVE-2026-21884", "affects": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.8" } ], "bom-ref": "urn:uuid:2c80ed30-6649-5710-84eb-b6bf597165cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-21884 is fixed in version 7.5.1-tuxcare.8 of @react-router/express." } }, { "id": "CVE-2026-22029", "affects": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.8" } ], "bom-ref": "urn:uuid:310fd71e-9a20-52c8-a9a9-7b715acb46f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22029 is fixed in version 7.5.1-tuxcare.8 of @react-router/express." } }, { "id": "CVE-2026-22030", "affects": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.8" } ], "bom-ref": "urn:uuid:0935674e-123d-5ac2-995b-5a2113657201", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22030 is fixed in version 7.5.1-tuxcare.8 of @react-router/express." } }, { "id": "CVE-2026-33244", "affects": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.8" } ], "bom-ref": "urn:uuid:7461d834-97ed-572e-9eef-84807ece003f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33244 affects version 7.5.1-tuxcare.8 of @react-router/express." } }, { "id": "CVE-2026-34077", "affects": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.8" } ], "bom-ref": "urn:uuid:f2450c00-9459-54db-afaa-e2928fc58184", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34077 affects version 7.5.1-tuxcare.8 of @react-router/express, and is fixed in 7.5.1-tuxcare.10." } }, { "id": "CVE-2026-40181", "affects": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.8" } ], "bom-ref": "urn:uuid:59e01e6a-f6f7-5c43-b7a8-9aec67db8985", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-40181 affects version 7.5.1-tuxcare.8 of @react-router/express, and is fixed in 7.5.1-tuxcare.9." } }, { "id": "CVE-2026-42211", "affects": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.8" } ], "bom-ref": "urn:uuid:617e0c5b-629b-5be2-9200-4f95826ebf7e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42211 is fixed in version 7.5.1-tuxcare.8 of @react-router/express." } }, { "id": "CVE-2026-42342", "affects": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.8" } ], "bom-ref": "urn:uuid:df7b8fdb-1c99-5e85-8d4e-1d6e05391b6c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42342 is fixed in version 7.5.1-tuxcare.8 of @react-router/express." } }, { "id": "CVE-2026-53666", "affects": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.8" } ], "bom-ref": "urn:uuid:0020c0c6-546e-59c6-93ad-8342a074e69a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53666 is fixed in version 7.5.1-tuxcare.8 of @react-router/express." } }, { "id": "CVE-2026-53669", "affects": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.8" } ], "bom-ref": "urn:uuid:75845c6e-4989-57cc-9e33-679070357127", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53669 is fixed in version 7.5.1-tuxcare.8 of @react-router/express." } }, { "id": "CVE-2026-55685", "affects": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.8" } ], "bom-ref": "urn:uuid:b3537c97-7914-5b44-b0de-56a6183a237a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55685 is fixed in version 7.5.1-tuxcare.8 of @react-router/express." } }, { "id": "GHSA-8v8x-cx79-35w7", "affects": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.8" } ], "bom-ref": "urn:uuid:4a487e67-cbe3-5dde-84a2-4d8f4a5a0a22", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-8v8x-cx79-35w7 affects version 7.5.1-tuxcare.8 of @react-router/express, and is fixed in 7.5.1-tuxcare.10." } } ], "dependencies": [ { "ref": "pkg:npm/%40react-router/express@7.5.1-tuxcare.8" } ] }