{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:f2b36b8d-82fd-59ee-8cc5-dfff99d51d43", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@react-router/node", "purl": "pkg:npm/%40react-router/node@7.5.1-tuxcare.4", "type": "library", "bom-ref": "pkg:npm/%40react-router/node@7.5.1-tuxcare.4", "version": "7.5.1-tuxcare.4", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-43864", "affects": [ { "ref": "pkg:npm/%40react-router/node@7.5.1-tuxcare.4" } ], "bom-ref": "urn:uuid:bc5ea34a-0fcb-5bdf-9a81-28a00cac7f36", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-43864 is fixed in version 7.5.1-tuxcare.4 of @react-router/node." } }, { "id": "CVE-2025-43865", "affects": [ { "ref": "pkg:npm/%40react-router/node@7.5.1-tuxcare.4" } ], "bom-ref": "urn:uuid:0c289192-891f-5f2d-9b9c-0c251f5811a2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-43865 is fixed in version 7.5.1-tuxcare.4 of @react-router/node." } }, { "id": "CVE-2025-59057", "affects": [ { "ref": "pkg:npm/%40react-router/node@7.5.1-tuxcare.4" } ], "bom-ref": "urn:uuid:0371f404-5246-5352-808f-3ab7fa8ce7b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59057 is fixed in version 7.5.1-tuxcare.4 of @react-router/node." } }, { "id": "CVE-2025-61686", "affects": [ { "ref": "pkg:npm/%40react-router/node@7.5.1-tuxcare.4" } ], "bom-ref": "urn:uuid:cfebf35b-df46-559c-9b69-3d81bf67bab9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-61686 affects version 7.5.1-tuxcare.4 of @react-router/node, and is fixed in 7.5.1-tuxcare.5." } }, { "id": "CVE-2025-68470", "affects": [ { "ref": "pkg:npm/%40react-router/node@7.5.1-tuxcare.4" } ], "bom-ref": "urn:uuid:aae9a2d3-f9f0-5cc2-a443-e5673c1912bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-68470 is fixed in version 7.5.1-tuxcare.4 of @react-router/node." } }, { "id": "CVE-2026-21884", "affects": [ { "ref": "pkg:npm/%40react-router/node@7.5.1-tuxcare.4" } ], "bom-ref": "urn:uuid:9ca0e42e-069c-584b-85e4-e0bbabfd839b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-21884 is fixed in version 7.5.1-tuxcare.4 of @react-router/node." } }, { "id": "CVE-2026-22029", "affects": [ { "ref": "pkg:npm/%40react-router/node@7.5.1-tuxcare.4" } ], "bom-ref": "urn:uuid:d5074f61-a3c6-5b9f-8914-854f85501ec8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22029 is fixed in version 7.5.1-tuxcare.4 of @react-router/node." } }, { "id": "CVE-2026-22030", "affects": [ { "ref": "pkg:npm/%40react-router/node@7.5.1-tuxcare.4" } ], "bom-ref": "urn:uuid:451ea0a0-454e-56ab-803c-7331b509fe53", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22030 is fixed in version 7.5.1-tuxcare.4 of @react-router/node." } }, { "id": "CVE-2026-33244", "affects": [ { "ref": "pkg:npm/%40react-router/node@7.5.1-tuxcare.4" } ], "bom-ref": "urn:uuid:a7a3be4e-bc75-5010-b9f7-9f81f0d7cea4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33244 affects version 7.5.1-tuxcare.4 of @react-router/node." } }, { "id": "CVE-2026-34077", "affects": [ { "ref": "pkg:npm/%40react-router/node@7.5.1-tuxcare.4" } ], "bom-ref": "urn:uuid:abaeb836-1ec2-545f-9590-e9e20f6bf186", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34077 affects version 7.5.1-tuxcare.4 of @react-router/node, and is fixed in 7.5.1-tuxcare.10." } }, { "id": "CVE-2026-40181", "affects": [ { "ref": "pkg:npm/%40react-router/node@7.5.1-tuxcare.4" } ], "bom-ref": "urn:uuid:ee84c946-da89-5e13-aee6-33e5db512766", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-40181 affects version 7.5.1-tuxcare.4 of @react-router/node, and is fixed in 7.5.1-tuxcare.9." } }, { "id": "CVE-2026-42211", "affects": [ { "ref": "pkg:npm/%40react-router/node@7.5.1-tuxcare.4" } ], "bom-ref": "urn:uuid:7f7c8ade-ef8f-5e76-b502-6f2e98501334", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42211 affects version 7.5.1-tuxcare.4 of @react-router/node, and is fixed in 7.5.1-tuxcare.6." } }, { "id": "CVE-2026-42342", "affects": [ { "ref": "pkg:npm/%40react-router/node@7.5.1-tuxcare.4" } ], "bom-ref": "urn:uuid:40665891-69fe-5d88-9aa0-a3df5c6627db", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42342 affects version 7.5.1-tuxcare.4 of @react-router/node, and is fixed in 7.5.1-tuxcare.8." } }, { "id": "CVE-2026-53666", "affects": [ { "ref": "pkg:npm/%40react-router/node@7.5.1-tuxcare.4" } ], "bom-ref": "urn:uuid:9538de2c-f19a-579d-987f-fe4f0220cdd6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53666 affects version 7.5.1-tuxcare.4 of @react-router/node, and is fixed in 7.5.1-tuxcare.5." } }, { "id": "CVE-2026-53669", "affects": [ { "ref": "pkg:npm/%40react-router/node@7.5.1-tuxcare.4" } ], "bom-ref": "urn:uuid:400b15e8-c6fc-5874-9fc1-b80dff8d8cc8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53669 affects version 7.5.1-tuxcare.4 of @react-router/node, and is fixed in 7.5.1-tuxcare.5." } }, { "id": "CVE-2026-55685", "affects": [ { "ref": "pkg:npm/%40react-router/node@7.5.1-tuxcare.4" } ], "bom-ref": "urn:uuid:e308fa28-38a0-5fdd-af8f-3e4f6690ccb5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55685 affects version 7.5.1-tuxcare.4 of @react-router/node, and is fixed in 7.5.1-tuxcare.7." } }, { "id": "GHSA-8v8x-cx79-35w7", "affects": [ { "ref": "pkg:npm/%40react-router/node@7.5.1-tuxcare.4" } ], "bom-ref": "urn:uuid:e88bf59f-674c-5ac8-bd6c-6de0d866108f", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-8v8x-cx79-35w7 affects version 7.5.1-tuxcare.4 of @react-router/node, and is fixed in 7.5.1-tuxcare.10." } } ], "dependencies": [ { "ref": "pkg:npm/%40react-router/node@7.5.1-tuxcare.4" } ] }