{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a71e27a8-8b81-502e-b29e-cee3d360df27", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "axios", "purl": "pkg:npm/axios@1.13.2-tuxcare.3", "type": "library", "bom-ref": "pkg:npm/axios@1.13.2-tuxcare.3", "version": "1.13.2-tuxcare.3", "pedigree": { "ancestors": [ { "name": "axios", "purl": "pkg:npm/axios@1.13.2", "type": "library", "version": "1.13.2" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2019-10742", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:2b81d8e3-ece1-5957-8b36-f9cdc922b86d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10742 affects version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2020-28168", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:ec39bed1-fa2c-5d31-88fa-29613d39e5aa", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2020-28168 does not affect version 1.13.2-tuxcare.3 of axios. not_affected \u2014 CVE-2020-28168 affects Axios 0.21.0 where an attacker can bypass proxy configuration by providing a URL that redirects to a restricted host. The target version (1.13.2-tuxcare.3) is NOT AFFECTED because the upstream fix (commit 495d5fb1 by Maxime Bargiel, merged 2022-05-11) was already present in the release. The fix adds a beforeRedirects.proxy callback that re-applies proxy configuration to a...", "justification": "code_not_present" } }, { "id": "CVE-2021-3749", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:05488cc2-107a-54a9-baa2-82b60ecb4ec2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3749 affects version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2023-45857", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:7d035b83-5b6d-5b35-86ec-dc3922df4524", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2023-45857 does not affect version 1.13.2-tuxcare.3 of axios. not_affected \u2014 CVE-2023-45857 describes a vulnerability where axios inadvertently sends XSRF-TOKEN cookies to cross-origin hosts when withCredentials is enabled. The upstream fix (commit 96ee232b, Oct 2023) removed the vulnerable `withCredentials || isURLSameOrigin` condition and introduced the `withXSRFToken` configuration option with same-origin-only default behavior. This fix was already present in upstrea...", "justification": "code_not_present" } }, { "id": "CVE-2024-39338", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:ec4844d3-c275-596e-9d16-061f8e508f86", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39338 affects version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2025-27152", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:df35eba6-5e90-51b2-8593-2e96fda7bd6d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27152 affects version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2025-54371", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:259928e8-e4b1-5f21-8b0b-b7618b97eff2", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-54371 is a false positive for axios 1.13.2-tuxcare.3." } }, { "id": "CVE-2025-58754", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:d0db3b4c-fbe1-5320-8bfe-5838b608ab3f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58754 affects version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2025-62718", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:121e3824-7c11-563b-b341-0316bea67696", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-62718 is fixed in version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-101898", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:84a2c474-9ba1-5c2f-9922-4479c0f1f1d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101898 is fixed in version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-101899", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:aec52336-ed8a-5d86-9c07-37edec404e0d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101899 affects version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-101900", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:48de00cd-e76f-5b05-b9da-2e9a5efd192a", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-101900 does not affect version 1.13.2-tuxcare.3 of axios. not_affected \u2014 Target version 1.13.2 is not affected by CVE-2026-101900. While the code calls data.getHeaders() without using getSafeProp (the vulnerable pattern), it includes an upstream-provided allowlist defense in resolveConfig.js (lines 33-38) that filters headers to only allow 'content-type' and 'content-length', preventing arbitrary header injection. This defense was introduced in upstream commit a9f47...", "justification": "code_not_present" } }, { "id": "CVE-2026-101901", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:372c3149-90cf-581e-8553-4ce3e95e9e16", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101901 is fixed in version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-101902", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:61a98e17-2da6-52f4-ad67-a879e1c9f333", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101902 is fixed in version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-101903", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:40d4b14f-23ea-5676-a3a5-e84402e88fbb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101903 affects version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-101904", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:a532de3e-795a-5b78-903c-09970db36ac9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101904 is fixed in version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-101905", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:1d72aa24-b097-59ab-9d25-12d5efe273c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101905 affects version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-101906", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:880c1e08-daa2-52fb-97a8-22675df188aa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101906 affects version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-101907", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:8a5df987-7288-56a2-aecf-33d96fa1d557", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101907 affects version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-101908", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:8d5f37e4-4bd1-52c6-82fb-86cbcd214e97", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101908 is fixed in version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-101909", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:3db2ba51-b6de-547b-99e3-06bd3e507350", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101909 affects version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-25639", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:38f4cf29-c433-5cd6-a360-bbad7bd9d5f3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25639 is fixed in version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-39865", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:5e514a8e-8216-5de9-ba61-515f37568bee", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-39865 does not affect version 1.13.2-tuxcare.3 of axios. not_affected \u2014 CVE-2026-39865: Target is not affected. The vulnerable HTTP/2 session cleanup pattern (splice-then-continue-iteration) is absent. An upstream fix (commit 12c314b60, PR #7202 by Dmitriy Mozgovoy) restructured the control flow to return immediately after removing a session, preventing iteration over the modified array. This fix shipped in axios 1.13.2 upstream release before TuxCare's first modif...", "justification": "code_not_present" } }, { "id": "CVE-2026-40175", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:e744ad03-ec6d-58bf-a5ac-87d0cd648a22", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40175 is fixed in version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-42033", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:f8043879-7d8c-54b2-95d4-b6c3e0beff7a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42033 is fixed in version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-42034", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:cc4f8ba4-538a-5a0c-a387-e96d8cf50a22", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42034 is fixed in version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-42035", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:b36f6b6b-7f17-5f0d-8c21-59e7810dde10", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42035 is fixed in version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-42036", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:fdb23306-f026-5412-8aac-5d0d62dba66b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42036 is fixed in version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-42037", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:df65980f-ee43-5085-af01-b1ccfe72e539", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42037 is fixed in version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-42038", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:f96b9f43-953c-539f-8e8d-fc4507c3fd67", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42038 is fixed in version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-42039", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:a1465c28-82af-5197-809c-126ccc4ed6de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42039 is fixed in version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-42040", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:e30a01a6-7194-5e2b-b2c6-fed0764b8d63", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42040 is fixed in version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-42041", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:b05fed60-6f57-5029-adb9-6e1e1c4b6f77", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42041 is fixed in version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-42042", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:7a6cee07-389b-5663-8ff3-4f4169354394", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42042 is fixed in version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-42043", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:86a74c5d-5828-53ce-b69e-bd0879fa8fe4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42043 is fixed in version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-42044", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:73238d2e-1209-5c61-81f8-c3abccee92df", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42044 is fixed in version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-42264", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:4f240057-b5c6-54c5-aafc-c09ac5197845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42264 is fixed in version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-44486", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:82b12e63-406b-574d-82e0-1472affe1ca0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44486 is fixed in version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-44487", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:b5316de5-db57-5369-a2ca-19ca1041a54f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44487 is fixed in version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-44488", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:5fa54204-17f4-582b-a879-4f1218cc7767", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44488 is fixed in version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-44489", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:35c6bbdd-7c26-58b5-9509-04b4e326207b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44489 affects version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-44490", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:8ed4f0ec-5e61-5f06-b819-b7055908efbc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44490 is fixed in version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-44492", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:c43c0aa0-72ff-54c0-a73f-f659b622eacd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44492 affects version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-44494", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:82884a06-7f57-58fa-a84f-3faa5c970d64", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44494 is fixed in version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-44495", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:b4803962-a9ed-5429-9154-224978c25e09", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44495 is fixed in version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-44496", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:2104c612-3a4f-5592-bcc5-2a5578802acc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44496 is fixed in version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-67312", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:be56c257-088a-53db-8135-f796d1f04bff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67312 is fixed in version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-67313", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:c1588b47-f2d3-5a4f-a614-664f8ea0a438", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67313 is fixed in version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-67314", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:8ca88ed3-15ef-57dc-a367-ca60f917db49", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67314 affects version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-67315", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:42789aa7-a405-5e40-921f-a393088bb9dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67315 affects version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-67316", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:6b0698db-03c8-5771-9312-6ad74cff5237", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67316 is fixed in version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-67317", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:dfebd5b9-39a6-5346-876b-9740d364f2b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67317 is fixed in version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-67318", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:791fbb8d-7aa2-5022-9cf8-ab41e5f6290f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67318 is fixed in version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-67319", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:015be362-c7fc-522e-ae55-8f848a346107", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67319 is fixed in version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-67320", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:06670016-3102-5e56-9287-a8e23034ce2f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67320 affects version 1.13.2-tuxcare.3 of axios." } }, { "id": "CVE-2026-67321", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:125c87e4-e3fb-52af-93fa-6cc6ea973daf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67321 affects version 1.13.2-tuxcare.3 of axios." } }, { "id": "GHSA-38gx-cfqf-f652", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:5f61167d-4082-51eb-ad92-b7a586bb9da2", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-38gx-cfqf-f652 is a false positive for axios 1.13.2-tuxcare.3." } }, { "id": "GHSA-39j5-w47m-2gmv", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:69e6a412-ec15-5183-ac2c-86a481270036", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-39j5-w47m-2gmv is a false positive for axios 1.13.2-tuxcare.3." } }, { "id": "GHSA-3mcp-22mf-vrw3", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:b40896fd-d74a-5820-a8c3-5be3c0c3a4df", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-3mcp-22mf-vrw3 is a false positive for axios 1.13.2-tuxcare.3." } }, { "id": "GHSA-4ww2-rjh2-xpv9", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:d3bf538d-507b-565f-b740-76b38a5fe061", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-4ww2-rjh2-xpv9 is a false positive for axios 1.13.2-tuxcare.3." } }, { "id": "GHSA-68jp-44vc-2x5h", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:e039b0bc-6bd6-589b-92f7-345d0992e0a5", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-68jp-44vc-2x5h is a false positive for axios 1.13.2-tuxcare.3." } }, { "id": "GHSA-6hqm-hm2v-3p2p", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:59f50bcc-1be9-58f9-b1a0-5ae7b219561c", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-6hqm-hm2v-3p2p is a false positive for axios 1.13.2-tuxcare.3." } }, { "id": "GHSA-9wx3-p993-35vp", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:8567f0e7-d9bb-5046-a166-f5bd8e7ad936", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-9wx3-p993-35vp is a false positive for axios 1.13.2-tuxcare.3." } }, { "id": "GHSA-f2r5-pqh9-r8f8", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:34f15fd9-e270-5bc0-a510-531d75326f96", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-f2r5-pqh9-r8f8 is a false positive for axios 1.13.2-tuxcare.3." } }, { "id": "GHSA-fq2j-3j99-rx65", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:0fa4aca8-c983-5aa2-8285-144d792eefbe", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-fq2j-3j99-rx65 is a false positive for axios 1.13.2-tuxcare.3." } }, { "id": "GHSA-fqj3-h9pc-443h", "affects": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ], "bom-ref": "urn:uuid:eb5f04ad-9957-5f79-8b5a-4be13daa868f", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-fqj3-h9pc-443h is a false positive for axios 1.13.2-tuxcare.3." } } ], "dependencies": [ { "ref": "pkg:npm/axios@1.13.2-tuxcare.3" } ] }