{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:4867d688-ea8b-5bd4-81de-347c4320ef02", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.2", "type": "library", "name": "@nuxt/schema", "version": "3.2.0-tuxcare.2", "purl": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.2" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:ab07e96e-3237-5257-903a-01e60fc1490f", "id": "CVE-2016-10735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2016-10735 is fixed in version 3.2.0-tuxcare.2 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5d0f1291-7a8d-52e1-8eb5-400d935e9e61", "id": "CVE-2018-14040", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-14040 is fixed in version 3.2.0-tuxcare.2 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4d5ecf78-170b-51c8-9abd-0e38d977f257", "id": "CVE-2018-14042", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-14042 is fixed in version 3.2.0-tuxcare.2 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e8ab97e2-2850-59e8-af0f-ce2539ba2b00", "id": "CVE-2018-16487", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-16487 is fixed in version 3.2.0-tuxcare.2 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9155af87-6297-5f6e-a8f8-b7ce62857fe3", "id": "CVE-2018-20676", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-20676 is fixed in version 3.2.0-tuxcare.2 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:05711ff6-b1a9-5899-8089-c6f50a6fe2bb", "id": "CVE-2018-20677", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-20677 is fixed in version 3.2.0-tuxcare.2 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ff678ffa-73eb-5397-9822-7dc1166248ca", "id": "CVE-2018-3721", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-3721 is fixed in version 3.2.0-tuxcare.2 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9b9a18bc-2665-558b-abc9-3b5cc1e309b6", "id": "CVE-2019-10744", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2019-10744 is fixed in version 3.2.0-tuxcare.2 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:fe55153f-879c-53c6-be7a-6c24199335f8", "id": "CVE-2019-14862", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2019-14862 is fixed in version 3.2.0-tuxcare.2 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7a7b4604-fba8-54dd-bd7b-bce26a4a7b8b", "id": "CVE-2019-8331", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2019-8331 is fixed in version 3.2.0-tuxcare.2 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:bd0abfc3-a0cb-52de-90c2-4d0ac1588331", "id": "CVE-2020-36049", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-36049 is fixed in version 3.2.0-tuxcare.2 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:06960f53-106d-56cc-a95a-c61ff8663fd4", "id": "CVE-2020-8203", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-8203 is fixed in version 3.2.0-tuxcare.2 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d43787ee-e240-5d75-afdf-d2c6ba18f96b", "id": "CVE-2021-23337", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-23337 is fixed in version 3.2.0-tuxcare.2 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d1a8e9c8-53c8-528d-ae3d-d983efe3c3bb", "id": "CVE-2022-2421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-2421 is fixed in version 3.2.0-tuxcare.2 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e4223949-ff0a-5269-8163-6abf60c1426b", "id": "CVE-2022-25852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-25852 affects version 3.2.0-tuxcare.2 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ed9cb1a5-84ed-55d3-a2ae-8a314a8377fd", "id": "CVE-2023-32695", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-32695 is fixed in version 3.2.0-tuxcare.2 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b8fa6db5-574e-5453-9557-3c0aa553a12a", "id": "CVE-2024-34343", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-34343 affects version 3.2.0-tuxcare.2 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f5a6dab2-aa18-5d2a-bcfc-ae5dd6a53df2", "id": "CVE-2024-6484", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-6484 is fixed in version 3.2.0-tuxcare.2 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:86b449c1-6b7a-5f83-9651-fa795b8e52f9", "id": "CVE-2024-6485", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-6485 is fixed in version 3.2.0-tuxcare.2 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:defc3233-9e4a-5090-9c9a-47079d35576b", "id": "CVE-2025-24361", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-24361 affects version 3.2.0-tuxcare.2 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d3c14869-8e04-5c32-a7c6-4eac88f357a5", "id": "CVE-2025-27415", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27415 affects version 3.2.0-tuxcare.2 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d325546a-f5c5-534a-8862-2bb63188b37f", "id": "CVE-2026-33151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33151 is fixed in version 3.2.0-tuxcare.2 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:90c1a2ba-e5e2-51b4-9767-b8d9f2d401cc", "id": "CVE-2026-41305", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41305 affects version 3.2.0-tuxcare.2 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1a196e3c-e96e-501b-981a-0a102a22f3f9", "id": "CVE-2026-42338", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2026-42338 is a false positive for @nuxt/schema 3.2.0-tuxcare.2. false_positive \u2014 CVE-2026-42338 concerns the 'ip-address' npm library (IPv6/IPv4 address parsing), but this repository is Nuxt v3.2.0-tuxcare.1 (a Vue.js meta-framework). The affected component is not present in this repository as a vendored copy, dependency, or in any other form. This is a wrong-project match." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0cbd34dd-8c3c-579d-98b0-d677fb1d6127", "id": "CVE-2026-45669", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45669 affects version 3.2.0-tuxcare.2 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:04cd8ee2-cc13-5946-ade3-aebf850495d1", "id": "CVE-2026-46342", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46342 affects version 3.2.0-tuxcare.2 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:21ff5081-a80e-5b79-9a7c-3a3d58cf63ac", "id": "CVE-2026-47200", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-47200 does not affect version 3.2.0-tuxcare.2 of @nuxt/schema. not_affected \u2014 Nuxt version 3.2.0 does not contain the server-only pages feature that is the prerequisite for CVE-2026-47200. The vulnerable code pattern (`.server.vue` pages rendered as islands via `/__nuxt_island/page_*` endpoint) was introduced in Nuxt v3.11.0, which is 2,059 commits after v3.2.0. The target version predates the feature by multiple major versions." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:fe7688a7-418b-51e8-b971-bb08a4dd4668", "id": "CVE-2026-4800", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-4800 is fixed in version 3.2.0-tuxcare.2 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0d2f3d9a-f40f-5cd8-814e-2677d6cedda4", "id": "CVE-2026-53722", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53722 affects version 3.2.0-tuxcare.2 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:50e52256-21a1-5037-9a5d-1b5c73000231", "id": "CVE-2026-56326", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-56326 does not affect version 3.2.0-tuxcare.2 of @nuxt/schema. not_affected \u2014 Version 3.2.0 does not contain the vulnerable code pattern. The vulnerability exists in the encodeURL() function which was introduced on June 26, 2024, over a year after version 3.2.0 (released February 9, 2023). The target uses a simpler redirect architecture without the vulnerable encodeURL() function." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8c9015c7-1796-56ed-971a-7295cdbcc187", "id": "GHSA-c9cv-mq2m-ppp3", "analysis": { "state": "not_affected", "detail": "Vulnerability GHSA-c9cv-mq2m-ppp3 does not affect version 3.2.0-tuxcare.2 of @nuxt/schema. not_affected \u2014 Target repository Nuxt version 3.2.0 is NOT affected by GHSA-c9cv-mq2m-ppp3. All three vulnerability sinks described in the CVE (SSR open redirect via path-normalization, script execution via navigateTo open option, and protocol-relative bypass in reloadNuxtApp) require code features that were introduced AFTER version 3.2.0. The vulnerable encodeURL function with WHATWG URL parsing was added in..." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5bdbd928-d995-51fb-b1cf-b86c9da9864a", "id": "GHSA-m3q2-p4fw-w38m", "analysis": { "state": "not_affected", "detail": "Vulnerability GHSA-m3q2-p4fw-w38m does not affect version 3.2.0-tuxcare.2 of @nuxt/schema. not_affected \u2014 Version 3.2.0 is NOT affected by GHSA-m3q2-p4fw-w38m. The vulnerable innerHTML pattern was introduced in v3.16.0 (March 2025), two years after this version. The target uses noscript.children instead of the vulnerable noscript.innerHTML assignment." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.2" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.2" } ] }