{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:1e5bc681-46a7-5892-be1f-9636d4356028",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@next/font",
      "purl": "pkg:npm/%40next/font@16.0.6-tuxcare.4",
      "type": "library",
      "bom-ref": "pkg:npm/%40next/font@16.0.6-tuxcare.4",
      "version": "16.0.6-tuxcare.4",
      "pedigree": {
        "ancestors": [
          {
            "name": "@next/font",
            "purl": "pkg:npm/%40next/font@16.0.6",
            "type": "library",
            "version": "16.0.6"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "@base-ui-components__react@1.0.0-beta.1",
      "affects": [
        {
          "ref": "pkg:npm/%40next/font@16.0.6-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:229f6317-6421-50f0-b71c-a154cb955ee3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability @base-ui-components__react@1.0.0-beta.1 affects version 16.0.6-tuxcare.4 of @next/font, and is fixed in 16.0.6-tuxcare.5."
      }
    },
    {
      "id": "CVE-2025-55182",
      "affects": [
        {
          "ref": "pkg:npm/%40next/font@16.0.6-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:aa36a865-d37e-534c-ab75-3eaf56a9b6af",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55182 is fixed in version 16.0.6-tuxcare.4 of @next/font."
      }
    },
    {
      "id": "stacktrace-parser@0.1.10",
      "affects": [
        {
          "ref": "pkg:npm/%40next/font@16.0.6-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:ca5df293-5dc5-5d1b-ad86-dceb4e220869",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability stacktrace-parser@0.1.10 affects version 16.0.6-tuxcare.4 of @next/font, and is fixed in 16.0.6-tuxcare.5."
      }
    },
    {
      "id": "taskr@1.1.0",
      "affects": [
        {
          "ref": "pkg:npm/%40next/font@16.0.6-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:8e280150-3340-547c-844c-fa229daf1749",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability taskr@1.1.0 affects version 16.0.6-tuxcare.4 of @next/font, and is fixed in 16.0.6-tuxcare.5."
      }
    },
    {
      "id": "@types__node@20.17.6",
      "affects": [
        {
          "ref": "pkg:npm/%40next/font@16.0.6-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:d20e47b9-afab-5118-97ec-8a0c4e21094f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability @types__node@20.17.6 affects version 16.0.6-tuxcare.4 of @next/font, and is fixed in 16.0.6-tuxcare.5."
      }
    },
    {
      "id": "webpack-sources@3.2.3",
      "affects": [
        {
          "ref": "pkg:npm/%40next/font@16.0.6-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:8eb448f8-51ee-5588-994e-b8e84559b950",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability webpack-sources@3.2.3 affects version 16.0.6-tuxcare.4 of @next/font, and is fixed in 16.0.6-tuxcare.5."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40next/font@16.0.6-tuxcare.4"
    }
  ]
}