{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:5dd286a8-7f97-5cf8-afd0-63bc9c6ca48a", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@react-router/serve", "purl": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.2", "type": "library", "bom-ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.2", "version": "7.5.1-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-43864", "affects": [ { "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.2" } ], "bom-ref": "urn:uuid:d5f6089c-8525-574e-b170-b9cd2f771ff1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-43864 is fixed in version 7.5.1-tuxcare.2 of @react-router/serve." } }, { "id": "CVE-2025-43865", "affects": [ { "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.2" } ], "bom-ref": "urn:uuid:02ea1799-eb39-5e3c-be0b-267c01b737b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-43865 is fixed in version 7.5.1-tuxcare.2 of @react-router/serve." } }, { "id": "CVE-2025-59057", "affects": [ { "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.2" } ], "bom-ref": "urn:uuid:82c9b8b9-e9db-56bc-af5a-f6e42e59477a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59057 is fixed in version 7.5.1-tuxcare.2 of @react-router/serve." } }, { "id": "CVE-2025-61686", "affects": [ { "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.2" } ], "bom-ref": "urn:uuid:04987a61-2d38-56b3-8ee6-b2276dd809e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-61686 affects version 7.5.1-tuxcare.2 of @react-router/serve, and is fixed in 7.5.1-tuxcare.5." } }, { "id": "CVE-2025-68470", "affects": [ { "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.2" } ], "bom-ref": "urn:uuid:d09c94fc-43ac-5b6f-9c9b-36ece7a065c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-68470 is fixed in version 7.5.1-tuxcare.2 of @react-router/serve." } }, { "id": "CVE-2026-21884", "affects": [ { "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.2" } ], "bom-ref": "urn:uuid:200710b4-6c01-56db-ad68-584f70a2c5ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-21884 is fixed in version 7.5.1-tuxcare.2 of @react-router/serve." } }, { "id": "CVE-2026-22029", "affects": [ { "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.2" } ], "bom-ref": "urn:uuid:778b2576-34eb-50d9-94bb-0387550e7a92", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22029 is fixed in version 7.5.1-tuxcare.2 of @react-router/serve." } }, { "id": "CVE-2026-22030", "affects": [ { "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.2" } ], "bom-ref": "urn:uuid:576d47ad-222e-5b2a-aea1-6790433829eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22030 is fixed in version 7.5.1-tuxcare.2 of @react-router/serve." } }, { "id": "CVE-2026-33244", "affects": [ { "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.2" } ], "bom-ref": "urn:uuid:d26df36c-73c4-5c3e-9286-d797db8e4055", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33244 affects version 7.5.1-tuxcare.2 of @react-router/serve." } }, { "id": "CVE-2026-34077", "affects": [ { "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.2" } ], "bom-ref": "urn:uuid:82985b43-46b4-53ed-b297-d740b8787785", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34077 affects version 7.5.1-tuxcare.2 of @react-router/serve, and is fixed in 7.5.1-tuxcare.10." } }, { "id": "CVE-2026-40181", "affects": [ { "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.2" } ], "bom-ref": "urn:uuid:47f0e165-04e3-50c6-b1ed-c6afa59fa3a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-40181 affects version 7.5.1-tuxcare.2 of @react-router/serve, and is fixed in 7.5.1-tuxcare.9." } }, { "id": "CVE-2026-42211", "affects": [ { "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.2" } ], "bom-ref": "urn:uuid:f9b24fbf-e308-57ed-a28b-2cfe1659c337", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42211 affects version 7.5.1-tuxcare.2 of @react-router/serve, and is fixed in 7.5.1-tuxcare.6." } }, { "id": "CVE-2026-42342", "affects": [ { "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.2" } ], "bom-ref": "urn:uuid:2f60f433-e088-5d0e-ac78-07edb0f25558", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42342 affects version 7.5.1-tuxcare.2 of @react-router/serve, and is fixed in 7.5.1-tuxcare.8." } }, { "id": "CVE-2026-53666", "affects": [ { "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.2" } ], "bom-ref": "urn:uuid:fdc6e19c-e37e-579b-b4d3-b72ba0dbe52a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53666 affects version 7.5.1-tuxcare.2 of @react-router/serve, and is fixed in 7.5.1-tuxcare.5." } }, { "id": "CVE-2026-53669", "affects": [ { "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.2" } ], "bom-ref": "urn:uuid:20d747f0-cac2-5ad3-8d7d-50d09e4ffdfe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53669 affects version 7.5.1-tuxcare.2 of @react-router/serve, and is fixed in 7.5.1-tuxcare.5." } }, { "id": "CVE-2026-55685", "affects": [ { "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.2" } ], "bom-ref": "urn:uuid:1ca33635-de93-56b6-b1c2-473bc4eb7f89", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-55685 affects version 7.5.1-tuxcare.2 of @react-router/serve, and is fixed in 7.5.1-tuxcare.7." } }, { "id": "GHSA-8v8x-cx79-35w7", "affects": [ { "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.2" } ], "bom-ref": "urn:uuid:bc3d259a-dde6-5edf-b0db-bf09db8aaaaf", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-8v8x-cx79-35w7 affects version 7.5.1-tuxcare.2 of @react-router/serve, and is fixed in 7.5.1-tuxcare.10." } } ], "dependencies": [ { "ref": "pkg:npm/%40react-router/serve@7.5.1-tuxcare.2" } ] }