{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:29426c2a-85de-531f-b9d5-4507f72d272c", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "axios", "purl": "pkg:npm/axios@1.7.7-tuxcare.8", "type": "library", "bom-ref": "pkg:npm/axios@1.7.7-tuxcare.8", "version": "1.7.7-tuxcare.8", "pedigree": { "ancestors": [ { "name": "axios", "purl": "pkg:npm/axios@1.7.7", "type": "library", "version": "1.7.7" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2019-10742", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:5723b473-9da5-5e3d-9ade-36d5627a7f83", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10742 affects version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2020-28168", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:5220abba-85de-52ef-aba1-a02db0726f42", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2020-28168 does not affect version 1.7.7-tuxcare.8 of axios. not_affected \u2014 CVE-2020-28168 (SSRF via proxy bypass on redirects) is not present in axios 1.7.7-tuxcare.8. The vulnerability was fixed in upstream commit c7329fef by Daniel Lopretto, which shipped in the upstream release before TuxCare onboarding (first TuxCare commit 8866c1fb). The fix adds a beforeRedirect callback that re-applies proxy configuration to redirect requests, preventing direct connections to r...", "justification": "code_not_present" } }, { "id": "CVE-2021-3749", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:dfa4fe01-8ad8-5e0c-9055-76f405531216", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3749 affects version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2023-45857", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:6334540b-9b1d-5f5c-a01f-2f6621f0b37f", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2023-45857 does not affect version 1.7.7-tuxcare.8 of axios. not_affected \u2014 CVE-2023-45857 is NOT present in axios 1.7.7-tuxcare.8. The vulnerability, which allowed XSRF tokens to leak to cross-origin hosts when withCredentials was set, was fixed in the upstream v1.7.7 release before TuxCare onboarding. The current code in lib/helpers/resolveConfig.js (lines 50-64) only sends XSRF tokens when withXSRFToken===true (explicit opt-in) or when withXSRFToken==null AND isURLS...", "justification": "code_not_present" } }, { "id": "CVE-2024-39338", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:d5d81bed-3d95-5ad3-9d5c-d1f4b513d198", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39338 affects version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2025-27152", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:2919e07a-7471-5c92-bb63-623a3e121015", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-27152 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2025-54371", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:332bfcbc-2bc3-5310-83a1-a3e998384138", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-54371 is a false positive for axios 1.7.7-tuxcare.8." } }, { "id": "CVE-2025-58754", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:d5c7b95b-965a-509f-93ed-6f98b0b32658", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58754 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2025-62718", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:afe5a124-da1c-55b4-93cb-727c6b23763c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-62718 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-101898", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:a1c2feaa-0378-5838-9778-a3506de91058", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101898 affects version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-101899", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:2275f004-21af-58ec-940a-be0be46b3db1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101899 affects version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-101900", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:681e6265-0cda-5c90-bb4c-9fd4afc0ea73", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101900 affects version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-101901", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:7deb1143-86b3-5d4c-9daa-3d7626d9fdd4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101901 affects version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-101902", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:9d3eee8a-e38a-56f2-a6bf-3afdd736f5ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101902 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-101903", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:fa38ea2f-787a-524a-b250-259a732bde0c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101903 affects version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-101904", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:ce92d375-dbfc-528d-ace9-4b80466ed1c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101904 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-101905", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:5ed4ddb8-69be-56de-9321-113fed55203d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101905 affects version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-101906", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:fc3c8056-dbed-55de-8147-c6725310243e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101906 affects version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-101907", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:7210f582-13b6-5181-b542-00dfd9d46d93", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101907 affects version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-101908", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:876df23c-c605-57a3-960a-8d0265b5da25", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-101908 does not affect version 1.7.7-tuxcare.8 of axios. not_affected \u2014 Target version 1.7.7-tuxcare.1 is NOT AFFECTED by CVE-2026-101908. The vulnerable code pattern (passing fetchOptions as the second argument to fetch()) does not exist in this version. The target code at lib/adapters/fetch.js:272 calls `fetch(request)` with no second argument, preventing inherited prototype-polluted properties from overriding the Request's safe headers. The vulnerability was int...", "justification": "code_not_reachable" } }, { "id": "CVE-2026-101909", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:8663e819-1393-5046-822d-27b6f01381ab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101909 affects version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-25639", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:8eec02b7-c691-5a4a-9d6c-4ca240835d4c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25639 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-39865", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:59ceb1de-3e0e-54fe-b350-d3caa1b3bd55", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-39865 does not affect version 1.7.7-tuxcare.8 of axios. not_affected \u2014 CVE-2026-39865 does not affect axios v1.7.7 because HTTP/2 support and the vulnerable Http2Sessions class do not exist in this version. HTTP/2 support was introduced in v1.13.0 (commit d676df77), which is 6 minor versions after v1.7.7. The vulnerable session cleanup code in Http2Sessions.getSession() that allows array iteration after modification via splice() was never present in v1.7.7, as the...", "justification": "code_not_present" } }, { "id": "CVE-2026-40175", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:ff30b3cc-b476-5c34-a18a-f0f27f0167ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40175 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-42033", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:5548d2bf-dac6-5ac3-ba77-65179de0ec2d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42033 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-42034", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:f1956d94-955b-59fc-aa13-e3b54807f614", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42034 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-42035", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:e58f55c8-af07-56f9-b087-fb92ee88e993", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42035 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-42036", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:9d33d2da-a132-5a36-93ac-022d00485aa1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42036 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-42037", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:04c37975-e3dd-5c83-a4a6-c601385e8aaa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42037 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-42038", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:e766b6ef-10da-5c87-a017-26f41bd7f678", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42038 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-42039", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:7319ade4-3ad0-5950-8f1e-f2f0fc92abf4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42039 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-42040", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:0fa38672-7eb1-5a52-9295-eedabedb6232", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42040 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-42041", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:1ac2fbbf-8d3f-51da-93fc-f14a1cd23474", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42041 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-42042", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:73a3dbb3-59c9-5232-91d7-4aa3a0ea3011", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42042 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-42043", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:d52eca3c-0072-5108-84b5-ee4bd4e765ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42043 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-42044", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:9c417ae2-ccfa-58a5-9a16-c71c74f13971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42044 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-42264", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:7451263d-d58a-5e2b-a4ab-246cb4b4bf95", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42264 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-44486", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:0899fa04-84ac-5119-85f7-f12da2581411", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44486 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-44487", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:1ceae2a1-8ae6-5284-84c8-c3aeb5077363", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44487 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-44488", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:62d3feb0-117c-594d-934a-75d56b7b702d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44488 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-44489", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:b44270e8-bd5e-5919-a502-35bd40f26083", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44489 affects version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-44490", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:e49b3bd7-e48a-5aa4-9e5a-6171a2050b39", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44490 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-44492", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:11b10c8c-6590-5ab1-bb7b-ec8da633725c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44492 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-44494", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:bf5419c3-ad1e-5131-9986-02fd9719ae4b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44494 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-44495", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:671c76c1-1994-5258-8408-4a30156819bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44495 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-44496", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:8596221c-144e-5432-9134-20fe07d8ea28", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44496 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-67312", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:412b65f8-aa78-5c30-9b77-6beddec66e54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67312 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-67313", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:c5627ca5-48dd-5f86-91ba-1cf217c70d69", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67313 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-67314", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:633033b7-4506-5717-a7e6-88dcc3e98c9e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67314 affects version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-67315", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:991670a9-7b68-597d-91c1-f97401093f47", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67315 affects version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-67316", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:cc9b443d-d036-57d6-a431-8f43533671af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67316 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-67317", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:03ae6ac2-8257-5bd6-8b41-2459f2f93af0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67317 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-67318", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:1717c849-d3b0-5b34-bd9c-ba47f2daf926", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-67318 does not affect version 1.7.7-tuxcare.8 of axios. not_affected \u2014 axios 1.7.7 (tuxcare.8) has no HTTP/2 support, so the CVE's bypass path does not exist. The only transports are native http/https and follow-redirects. Streamed uploads are limited on both: follow-redirects enforces options.maxBodyLength, and the byte-counting wrapper in lib/adapters/http.js covers the maxRedirects===0 native path.", "justification": "protected_at_runtime" } }, { "id": "CVE-2026-67319", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:ca089696-7e1d-5fe6-aa4c-91a8d1980d1d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67319 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-67320", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:0ba3caf1-383d-505c-a38d-6393a386a325", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67320 affects version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-67321", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:ef380dc7-d6c7-5e97-a686-8428b2adecbc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67321 affects version 1.7.7-tuxcare.8 of axios." } }, { "id": "GHSA-38gx-cfqf-f652", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:6c21896e-f4ef-51d1-aa99-ff8dcf3e357c", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-38gx-cfqf-f652 is a false positive for axios 1.7.7-tuxcare.8." } }, { "id": "GHSA-39j5-w47m-2gmv", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:0081836f-d000-5fcb-9451-9dd828d2d418", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-39j5-w47m-2gmv is a false positive for axios 1.7.7-tuxcare.8." } }, { "id": "GHSA-3mcp-22mf-vrw3", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:d4820996-fe28-5921-9f50-941c1522e5d5", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-3mcp-22mf-vrw3 is a false positive for axios 1.7.7-tuxcare.8." } }, { "id": "GHSA-42h9-826w-cgv3", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:75afdac9-7f11-5f3b-9461-32a999a6c488", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-42h9-826w-cgv3 affects version 1.7.7-tuxcare.8 of axios." } }, { "id": "GHSA-4ww2-rjh2-xpv9", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:53b585cb-a0b7-577a-aeaf-7a33a879abc3", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-4ww2-rjh2-xpv9 is a false positive for axios 1.7.7-tuxcare.8." } }, { "id": "GHSA-68jp-44vc-2x5h", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:da17376e-eafc-5b47-84c8-561a9c05966b", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-68jp-44vc-2x5h is a false positive for axios 1.7.7-tuxcare.8." } }, { "id": "GHSA-6hqm-hm2v-3p2p", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:2227d791-6efa-52bb-aa07-ffaf4fd402be", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-6hqm-hm2v-3p2p is a false positive for axios 1.7.7-tuxcare.8." } }, { "id": "GHSA-7q8q-rj6j-mhjq", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:dbc4b575-639f-5f9a-a9e1-a20b576be5f3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-7q8q-rj6j-mhjq affects version 1.7.7-tuxcare.8 of axios." } }, { "id": "GHSA-9wx3-p993-35vp", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:9003c4a6-969c-5d9f-b291-b5bb2390779e", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-9wx3-p993-35vp is a false positive for axios 1.7.7-tuxcare.8." } }, { "id": "GHSA-f2r5-pqh9-r8f8", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:0b066336-4988-5e22-acdd-14064c9bf354", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-f2r5-pqh9-r8f8 is a false positive for axios 1.7.7-tuxcare.8." } }, { "id": "GHSA-fq2j-3j99-rx65", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:ecfd8685-1c9c-583c-816b-9a46fdcafd42", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-fq2j-3j99-rx65 is a false positive for axios 1.7.7-tuxcare.8." } }, { "id": "GHSA-fqj3-h9pc-443h", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:339389fb-168e-54c9-a24f-4a8c6a4418f7", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-fqj3-h9pc-443h is a false positive for axios 1.7.7-tuxcare.8." } }, { "id": "GHSA-jqh4-m9w3-8hp9", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:6bac3acc-3b3c-52d0-90c8-3c01b3603662", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-jqh4-m9w3-8hp9 affects version 1.7.7-tuxcare.8 of axios." } }, { "id": "GHSA-mmx7-hfxf-jppx", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:fe84b52f-f140-52a9-a51a-7284f1de0333", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mmx7-hfxf-jppx is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "GHSA-pmv8-rq9r-6j72", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:7d4f5c95-22c0-5cd1-9df0-b3469671b023", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-pmv8-rq9r-6j72 affects version 1.7.7-tuxcare.8 of axios." } } ], "dependencies": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ] }