{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:f4ea1808-75dd-5029-b78b-68f1fbac513d", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "axios", "purl": "pkg:npm/axios@1.7.7-tuxcare.8", "type": "library", "bom-ref": "pkg:npm/axios@1.7.7-tuxcare.8", "version": "1.7.7-tuxcare.8", "pedigree": { "ancestors": [ { "name": "axios", "purl": "pkg:npm/axios@1.7.7", "type": "library", "version": "1.7.7" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-27152", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:2919e07a-7471-5c92-bb63-623a3e121015", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-27152 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2025-58754", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:d5c7b95b-965a-509f-93ed-6f98b0b32658", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58754 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2025-62718", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:afe5a124-da1c-55b4-93cb-727c6b23763c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-62718 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-101902", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:9d3eee8a-e38a-56f2-a6bf-3afdd736f5ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101902 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-101904", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:ce92d375-dbfc-528d-ace9-4b80466ed1c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101904 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-101908", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:876df23c-c605-57a3-960a-8d0265b5da25", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-101908 does not affect version 1.7.7-tuxcare.8 of axios. not_affected \u2014 Target version 1.7.7-tuxcare.1 is NOT AFFECTED by CVE-2026-101908. The vulnerable code pattern (passing fetchOptions as the second argument to fetch()) does not exist in this version. The target code at lib/adapters/fetch.js:272 calls `fetch(request)` with no second argument, preventing inherited prototype-polluted properties from overriding the Request's safe headers. The vulnerability was int...", "justification": "code_not_reachable" } }, { "id": "CVE-2026-25639", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:8eec02b7-c691-5a4a-9d6c-4ca240835d4c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25639 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-40175", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:ff30b3cc-b476-5c34-a18a-f0f27f0167ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40175 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-42033", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:5548d2bf-dac6-5ac3-ba77-65179de0ec2d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42033 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-42034", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:f1956d94-955b-59fc-aa13-e3b54807f614", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42034 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-42035", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:e58f55c8-af07-56f9-b087-fb92ee88e993", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42035 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-42036", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:9d33d2da-a132-5a36-93ac-022d00485aa1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42036 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-42037", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:04c37975-e3dd-5c83-a4a6-c601385e8aaa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42037 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-42038", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:e766b6ef-10da-5c87-a017-26f41bd7f678", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42038 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-42039", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:7319ade4-3ad0-5950-8f1e-f2f0fc92abf4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42039 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-42040", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:0fa38672-7eb1-5a52-9295-eedabedb6232", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42040 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-42041", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:1ac2fbbf-8d3f-51da-93fc-f14a1cd23474", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42041 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-42042", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:73a3dbb3-59c9-5232-91d7-4aa3a0ea3011", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42042 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-42043", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:d52eca3c-0072-5108-84b5-ee4bd4e765ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42043 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-42044", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:9c417ae2-ccfa-58a5-9a16-c71c74f13971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42044 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-42264", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:7451263d-d58a-5e2b-a4ab-246cb4b4bf95", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42264 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-44486", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:0899fa04-84ac-5119-85f7-f12da2581411", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44486 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-44487", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:1ceae2a1-8ae6-5284-84c8-c3aeb5077363", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44487 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-44488", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:62d3feb0-117c-594d-934a-75d56b7b702d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44488 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-44490", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:e49b3bd7-e48a-5aa4-9e5a-6171a2050b39", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44490 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-44492", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:11b10c8c-6590-5ab1-bb7b-ec8da633725c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44492 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-44494", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:bf5419c3-ad1e-5131-9986-02fd9719ae4b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44494 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-44495", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:671c76c1-1994-5258-8408-4a30156819bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44495 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-44496", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:8596221c-144e-5432-9134-20fe07d8ea28", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44496 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-67312", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:412b65f8-aa78-5c30-9b77-6beddec66e54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67312 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-67313", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:c5627ca5-48dd-5f86-91ba-1cf217c70d69", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67313 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-67316", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:cc9b443d-d036-57d6-a431-8f43533671af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67316 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-67317", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:03ae6ac2-8257-5bd6-8b41-2459f2f93af0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67317 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "CVE-2026-67319", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:ca089696-7e1d-5fe6-aa4c-91a8d1980d1d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67319 is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "GHSA-39j5-w47m-2gmv", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:0081836f-d000-5fcb-9451-9dd828d2d418", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-39j5-w47m-2gmv is a false positive for axios 1.7.7-tuxcare.8." } }, { "id": "GHSA-42h9-826w-cgv3", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:75afdac9-7f11-5f3b-9461-32a999a6c488", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-42h9-826w-cgv3 affects version 1.7.7-tuxcare.8 of axios." } }, { "id": "GHSA-4ww2-rjh2-xpv9", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:53b585cb-a0b7-577a-aeaf-7a33a879abc3", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-4ww2-rjh2-xpv9 is a false positive for axios 1.7.7-tuxcare.8." } }, { "id": "GHSA-6hqm-hm2v-3p2p", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:2227d791-6efa-52bb-aa07-ffaf4fd402be", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-6hqm-hm2v-3p2p is a false positive for axios 1.7.7-tuxcare.8." } }, { "id": "GHSA-7q8q-rj6j-mhjq", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:dbc4b575-639f-5f9a-a9e1-a20b576be5f3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-7q8q-rj6j-mhjq affects version 1.7.7-tuxcare.8 of axios." } }, { "id": "GHSA-9wx3-p993-35vp", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:9003c4a6-969c-5d9f-b291-b5bb2390779e", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-9wx3-p993-35vp is a false positive for axios 1.7.7-tuxcare.8." } }, { "id": "GHSA-fq2j-3j99-rx65", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:ecfd8685-1c9c-583c-816b-9a46fdcafd42", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-fq2j-3j99-rx65 is a false positive for axios 1.7.7-tuxcare.8." } }, { "id": "GHSA-jqh4-m9w3-8hp9", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:6bac3acc-3b3c-52d0-90c8-3c01b3603662", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-jqh4-m9w3-8hp9 affects version 1.7.7-tuxcare.8 of axios." } }, { "id": "GHSA-mmx7-hfxf-jppx", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:fe84b52f-f140-52a9-a51a-7284f1de0333", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mmx7-hfxf-jppx is fixed in version 1.7.7-tuxcare.8 of axios." } }, { "id": "GHSA-pmv8-rq9r-6j72", "affects": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ], "bom-ref": "urn:uuid:7d4f5c95-22c0-5cd1-9df0-b3469671b023", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-pmv8-rq9r-6j72 affects version 1.7.7-tuxcare.8 of axios." } } ], "dependencies": [ { "ref": "pkg:npm/axios@1.7.7-tuxcare.8" } ] }