{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:025a3618-7aa0-52b5-b60c-b791099baf3f", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:composer/laravel/framework@5.7.29-p1+tuxcare", "type": "library", "group": "laravel", "name": "framework", "version": "5.7.29-p1+tuxcare", "purl": "pkg:composer/laravel/framework@5.7.29-p1+tuxcare" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:f40ed1b1-322c-5570-a5dd-f14b42e6a0f2", "id": "CVE-2019-9081", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2019-9081 is fixed in version 5.7.29-p1+tuxcare of laravel/framework." }, "affects": [ { "ref": "pkg:composer/laravel/framework@5.7.29-p1+tuxcare" } ] }, { "bom-ref": "urn:uuid:e51d9de9-2fcb-5dda-8f6b-3267080c1d73", "id": "CVE-2020-19316", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-19316 is fixed in version 5.7.29-p1+tuxcare of laravel/framework." }, "affects": [ { "ref": "pkg:composer/laravel/framework@5.7.29-p1+tuxcare" } ] }, { "bom-ref": "urn:uuid:66784f1a-8e6e-5c9c-a46a-f5ca92df2600", "id": "CVE-2020-24941", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-24941 is fixed in version 5.7.29-p1+tuxcare of laravel/framework." }, "affects": [ { "ref": "pkg:composer/laravel/framework@5.7.29-p1+tuxcare" } ] }, { "bom-ref": "urn:uuid:d5947621-3a8e-53a0-8b72-ecb3eaa79a88", "id": "CVE-2021-21263", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-21263 is fixed in version 5.7.29-p1+tuxcare of laravel/framework." }, "affects": [ { "ref": "pkg:composer/laravel/framework@5.7.29-p1+tuxcare" } ] }, { "bom-ref": "urn:uuid:8c2e3c85-0538-5ca7-bcb0-93c94880c4a6", "id": "CVE-2021-43503", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-43503 is fixed in version 5.7.29-p1+tuxcare of laravel/framework." }, "affects": [ { "ref": "pkg:composer/laravel/framework@5.7.29-p1+tuxcare" } ] }, { "bom-ref": "urn:uuid:a3fd698e-df23-5a46-94ff-50103f43ac9c", "id": "CVE-2021-43617", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2021-43617 is a false positive for laravel/framework 5.7.29-p1+tuxcare. GitHub advisory GHSA-364w-9g92-3grq is withdrawn \u2014 https://github.com/advisories/GHSA-364w-9g92-3grq" }, "affects": [ { "ref": "pkg:composer/laravel/framework@5.7.29-p1+tuxcare" } ] }, { "bom-ref": "urn:uuid:a6e393e0-a395-5a90-b60e-d0a3b3e316fc", "id": "CVE-2021-43808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-43808 is fixed in version 5.7.29-p1+tuxcare of laravel/framework." }, "affects": [ { "ref": "pkg:composer/laravel/framework@5.7.29-p1+tuxcare" } ] }, { "bom-ref": "urn:uuid:ee6fddaf-6840-5734-a038-8f2e76708e44", "id": "CVE-2022-31279", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2022-31279 is a false positive for laravel/framework 5.7.29-p1+tuxcare. CVE-2022-31279 was REJECTED/withdrawn by its CNA per NVD: \"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue.\"" }, "affects": [ { "ref": "pkg:composer/laravel/framework@5.7.29-p1+tuxcare" } ] }, { "bom-ref": "urn:uuid:b0ba9c8d-4aa3-55c9-a30d-9ff49de2d668", "id": "CVE-2024-52301", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-52301 is fixed in version 5.7.29-p1+tuxcare of laravel/framework." }, "affects": [ { "ref": "pkg:composer/laravel/framework@5.7.29-p1+tuxcare" } ] }, { "bom-ref": "urn:uuid:70b08011-711f-5ab5-a229-095a37a27f78", "id": "CVE-2025-27515", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-27515 is fixed in version 5.7.29-p1+tuxcare of laravel/framework." }, "affects": [ { "ref": "pkg:composer/laravel/framework@5.7.29-p1+tuxcare" } ] }, { "bom-ref": "urn:uuid:0605fc7d-38e3-5908-9435-b35f5d2ce817", "id": "GHSA-4mg9-vhxq-vm7j", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-4mg9-vhxq-vm7j is fixed in version 5.7.29-p1+tuxcare of laravel/framework." }, "affects": [ { "ref": "pkg:composer/laravel/framework@5.7.29-p1+tuxcare" } ] }, { "bom-ref": "urn:uuid:dfa9782d-27fc-5d75-8714-6aa277b26d32", "id": "GHSA-5vg9-5847-vvmq", "analysis": { "state": "not_affected", "detail": "Vulnerability GHSA-5vg9-5847-vvmq does not affect version 5.7.29-p1+tuxcare of laravel/framework. not_affected \u2014 Laravel 5.7.29 uses SwiftMailer, not Symfony Mailer. The GHSA-5vg9-5847-vvmq vulnerability specifically requires Symfony Mailer's handling of CRLF sequences. SwiftMailer employs EmailValidator which rejects CRLF in email addresses, breaking the attack chain." }, "affects": [ { "ref": "pkg:composer/laravel/framework@5.7.29-p1+tuxcare" } ] }, { "bom-ref": "urn:uuid:781e46ba-e0bc-5887-ae4d-a9f45edc0bdc", "id": "GHSA-crmm-hgp2-wgrp", "analysis": { "state": "not_affected", "detail": "Vulnerability GHSA-crmm-hgp2-wgrp does not affect version 5.7.29-p1+tuxcare of laravel/framework. not_affected \u2014 Laravel 5.7.29 does not support temporary signed URLs for local filesystem storage. The vulnerable feature (LocalFilesystemAdapter with temporaryUrl/temporaryUploadUrl methods) does not exist in this version. The FilesystemAdapter::temporaryUrl() method explicitly throws RuntimeException when used with LocalAdapter." }, "affects": [ { "ref": "pkg:composer/laravel/framework@5.7.29-p1+tuxcare" } ] }, { "bom-ref": "urn:uuid:8cb87620-e30e-5b9f-ac7f-6ac5e289c4da", "id": "GHSA-qm5c-m76r-2hfr", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-qm5c-m76r-2hfr is fixed in version 5.7.29-p1+tuxcare of laravel/framework." }, "affects": [ { "ref": "pkg:composer/laravel/framework@5.7.29-p1+tuxcare" } ] }, { "bom-ref": "urn:uuid:26960429-2feb-5305-8b3f-a7fe5759b5ef", "id": "GHSA-x7p5-p2c9-phvg", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-x7p5-p2c9-phvg is fixed in version 5.7.29-p1+tuxcare of laravel/framework." }, "affects": [ { "ref": "pkg:composer/laravel/framework@5.7.29-p1+tuxcare" } ] } ], "dependencies": [ { "ref": "pkg:composer/laravel/framework@5.7.29-p1+tuxcare" } ] }