{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:bb6514d5-6f1c-5604-bd36-6ba43caa1e9d", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.3", "type": "library", "name": "@nuxt/schema", "version": "3.2.0-tuxcare.3", "purl": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.3" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:f1f9deb5-cd99-5c20-afba-1f113e9b5211", "id": "CVE-2016-10735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2016-10735 is fixed in version 3.2.0-tuxcare.3 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:c6973be5-e543-5b03-b349-e9f5a609c28e", "id": "CVE-2018-14040", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-14040 is fixed in version 3.2.0-tuxcare.3 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:abc78299-022f-5775-88cf-cff87a2482d0", "id": "CVE-2018-14042", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-14042 is fixed in version 3.2.0-tuxcare.3 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:1b9c2f89-6cf8-5216-91cf-50f0027dc3de", "id": "CVE-2018-16487", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-16487 is fixed in version 3.2.0-tuxcare.3 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:493e5d80-5c3f-5833-b3b4-fe830932a265", "id": "CVE-2018-20676", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-20676 is fixed in version 3.2.0-tuxcare.3 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:40c3622d-b0e3-5692-87b1-cfacbdcc9ce1", "id": "CVE-2018-20677", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-20677 is fixed in version 3.2.0-tuxcare.3 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:ca9d5e21-3b0f-5c14-a772-4e82da97b9ab", "id": "CVE-2018-3721", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-3721 is fixed in version 3.2.0-tuxcare.3 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:6eeb7b26-8259-5cca-837f-7378a4d6e156", "id": "CVE-2019-10744", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2019-10744 is fixed in version 3.2.0-tuxcare.3 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:a91ea80d-8b41-5541-a239-f6c378927fbf", "id": "CVE-2019-14862", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2019-14862 is fixed in version 3.2.0-tuxcare.3 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:fd431e23-464f-561b-a0b5-2edc7b09dcd9", "id": "CVE-2019-8331", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2019-8331 is fixed in version 3.2.0-tuxcare.3 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:d966d73d-5920-5e5b-8a55-3c39bf3fb757", "id": "CVE-2020-36049", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-36049 is fixed in version 3.2.0-tuxcare.3 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:79ab624a-51d5-5bb3-9a1e-0264ac1bd248", "id": "CVE-2020-8203", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-8203 is fixed in version 3.2.0-tuxcare.3 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:7fa71550-8cb9-5276-8255-fe0b2096f30c", "id": "CVE-2021-23337", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-23337 is fixed in version 3.2.0-tuxcare.3 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:61b78495-0843-5571-84ee-694060d9d893", "id": "CVE-2022-2421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-2421 is fixed in version 3.2.0-tuxcare.3 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:d65cb44e-9b41-5e26-9128-6cec92323732", "id": "CVE-2022-25852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-25852 affects version 3.2.0-tuxcare.3 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:c7434242-4882-5c2d-9129-d355760c94a9", "id": "CVE-2023-32695", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-32695 is fixed in version 3.2.0-tuxcare.3 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:b5cbd31f-9716-5f8d-bb6e-b03235fc9ebc", "id": "CVE-2024-34343", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-34343 affects version 3.2.0-tuxcare.3 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:a39c451c-d73c-5171-a123-b2cd6cf1579d", "id": "CVE-2024-6484", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-6484 is fixed in version 3.2.0-tuxcare.3 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:14e3362b-c282-5ece-ba33-6ec464a0810e", "id": "CVE-2024-6485", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-6485 is fixed in version 3.2.0-tuxcare.3 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:2e2333c9-7803-54c0-8fd1-62080837cff9", "id": "CVE-2025-24361", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-24361 affects version 3.2.0-tuxcare.3 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:aeab8e0d-a886-541f-913f-dd9efa1a4c94", "id": "CVE-2025-27415", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27415 affects version 3.2.0-tuxcare.3 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:e66406bf-ad70-5116-a5c4-13c2740ebb30", "id": "CVE-2026-33151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33151 is fixed in version 3.2.0-tuxcare.3 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:a3099e5c-d522-5d81-9b1b-8c506528b038", "id": "CVE-2026-41305", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41305 affects version 3.2.0-tuxcare.3 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:9f88fd57-e37d-5cb9-8aa0-8fa0d3a20734", "id": "CVE-2026-42338", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2026-42338 is a false positive for @nuxt/schema 3.2.0-tuxcare.3. false_positive \u2014 CVE-2026-42338 concerns the 'ip-address' npm library (IPv6/IPv4 address parsing), but this repository is Nuxt v3.2.0-tuxcare.1 (a Vue.js meta-framework). The affected component is not present in this repository as a vendored copy, dependency, or in any other form. This is a wrong-project match." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:e6eb3e4d-fda3-58f5-9e09-22d78bc871ec", "id": "CVE-2026-45669", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45669 affects version 3.2.0-tuxcare.3 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:c8699fc1-79d0-5d42-a5ac-33b2b5d698bc", "id": "CVE-2026-46342", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46342 affects version 3.2.0-tuxcare.3 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:a5a8162a-8f9b-50b7-a99b-548315c05cf2", "id": "CVE-2026-47200", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-47200 does not affect version 3.2.0-tuxcare.3 of @nuxt/schema. not_affected \u2014 Nuxt version 3.2.0 does not contain the server-only pages feature that is the prerequisite for CVE-2026-47200. The vulnerable code pattern (`.server.vue` pages rendered as islands via `/__nuxt_island/page_*` endpoint) was introduced in Nuxt v3.11.0, which is 2,059 commits after v3.2.0. The target version predates the feature by multiple major versions." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:798fdcbc-1816-5b29-a909-8a78c7932012", "id": "CVE-2026-4800", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-4800 is fixed in version 3.2.0-tuxcare.3 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:78b7cca7-b65b-5938-b670-1b2d7b9f86bb", "id": "CVE-2026-53722", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53722 affects version 3.2.0-tuxcare.3 of @nuxt/schema." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:95e5c702-5e6f-52d1-b51d-41333517d9ea", "id": "CVE-2026-56326", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-56326 does not affect version 3.2.0-tuxcare.3 of @nuxt/schema. not_affected \u2014 Version 3.2.0 does not contain the vulnerable code pattern. The vulnerability exists in the encodeURL() function which was introduced on June 26, 2024, over a year after version 3.2.0 (released February 9, 2023). The target uses a simpler redirect architecture without the vulnerable encodeURL() function." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:7cbd886f-5278-586e-ab9c-d92e8f466052", "id": "GHSA-c9cv-mq2m-ppp3", "analysis": { "state": "not_affected", "detail": "Vulnerability GHSA-c9cv-mq2m-ppp3 does not affect version 3.2.0-tuxcare.3 of @nuxt/schema. not_affected \u2014 Target repository Nuxt version 3.2.0 is NOT affected by GHSA-c9cv-mq2m-ppp3. All three vulnerability sinks described in the CVE (SSR open redirect via path-normalization, script execution via navigateTo open option, and protocol-relative bypass in reloadNuxtApp) require code features that were introduced AFTER version 3.2.0. The vulnerable encodeURL function with WHATWG URL parsing was added in..." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.3" } ] }, { "bom-ref": "urn:uuid:2dde89ed-12d5-53d1-bc82-7e0a9ff9f79b", "id": "GHSA-m3q2-p4fw-w38m", "analysis": { "state": "not_affected", "detail": "Vulnerability GHSA-m3q2-p4fw-w38m does not affect version 3.2.0-tuxcare.3 of @nuxt/schema. not_affected \u2014 Version 3.2.0 is NOT affected by GHSA-m3q2-p4fw-w38m. The vulnerable innerHTML pattern was introduced in v3.16.0 (March 2025), two years after this version. The target uses noscript.children instead of the vulnerable noscript.innerHTML assignment." }, "affects": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.3" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40nuxt/schema@3.2.0-tuxcare.3" } ] }