{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:97d6b6cd-923c-5de6-afbe-10f39af31a16", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "axios", "purl": "pkg:npm/axios@1.13.2", "type": "library", "bom-ref": "pkg:npm/axios@1.13.2", "version": "1.13.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2019-10742", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:4128b6bf-5cbd-58d2-9e3a-4c85e9c6caf2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10742 affects version 1.13.2 of axios." } }, { "id": "CVE-2020-28168", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:9c07deae-3b8f-54ce-82ed-adeb11bc2a73", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2020-28168 does not affect version 1.13.2 of axios. not_affected \u2014 CVE-2020-28168 affects Axios 0.21.0 where an attacker can bypass proxy configuration by providing a URL that redirects to a restricted host. The target version (1.13.2-tuxcare.3) is NOT AFFECTED because the upstream fix (commit 495d5fb1 by Maxime Bargiel, merged 2022-05-11) was already present in the release. The fix adds a beforeRedirects.proxy callback that re-applies proxy configuration to a...", "justification": "code_not_present" } }, { "id": "CVE-2021-3749", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:84ee84c3-fae3-57f1-8c35-e87e7af7ed7a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3749 affects version 1.13.2 of axios." } }, { "id": "CVE-2023-45857", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:7618763d-e505-58b9-9039-a9e815b61ac2", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2023-45857 does not affect version 1.13.2 of axios. not_affected \u2014 CVE-2023-45857 describes a vulnerability where axios inadvertently sends XSRF-TOKEN cookies to cross-origin hosts when withCredentials is enabled. The upstream fix (commit 96ee232b, Oct 2023) removed the vulnerable `withCredentials || isURLSameOrigin` condition and introduced the `withXSRFToken` configuration option with same-origin-only default behavior. This fix was already present in upstrea...", "justification": "code_not_present" } }, { "id": "CVE-2024-39338", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:0f54cd82-691b-50c8-90d4-0c2897950fb1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39338 affects version 1.13.2 of axios." } }, { "id": "CVE-2025-27152", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:2135d7e0-d4c9-51ba-a9c8-8b4f08d58de1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27152 affects version 1.13.2 of axios." } }, { "id": "CVE-2025-54371", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:12ddf5d3-3a45-5528-a9a3-663730308311", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-54371 is a false positive for axios 1.13.2." } }, { "id": "CVE-2025-58754", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:3657c7dd-db30-50b1-bc17-85969947b034", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58754 affects version 1.13.2 of axios." } }, { "id": "CVE-2025-62718", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:0caa05dc-c50e-5c43-b22e-c27628ca21f8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-62718 affects version 1.13.2 of axios, and is fixed in 1.13.2-tuxcare.2." } }, { "id": "CVE-2026-101898", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:13b2371f-66c4-5084-9333-67201461aa85", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101898 affects version 1.13.2 of axios, and is fixed in 1.13.2-tuxcare.2." } }, { "id": "CVE-2026-101899", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:daf6eef9-a63d-546f-9b0e-77dfe3ed46fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101899 affects version 1.13.2 of axios." } }, { "id": "CVE-2026-101900", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:ffa3e4af-4787-5643-9b6b-a1eeec363215", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-101900 does not affect version 1.13.2 of axios. not_affected \u2014 Target version 1.13.2 is not affected by CVE-2026-101900. While the code calls data.getHeaders() without using getSafeProp (the vulnerable pattern), it includes an upstream-provided allowlist defense in resolveConfig.js (lines 33-38) that filters headers to only allow 'content-type' and 'content-length', preventing arbitrary header injection. This defense was introduced in upstream commit a9f47...", "justification": "code_not_present" } }, { "id": "CVE-2026-101901", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:dae57e7c-0b2e-5c32-b3df-da44c58ee78c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101901 affects version 1.13.2 of axios, and is fixed in 1.13.2-tuxcare.2." } }, { "id": "CVE-2026-101902", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:3c9a4497-48c9-5972-97e2-9ff2928bf5fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101902 affects version 1.13.2 of axios, and is fixed in 1.13.2-tuxcare.2." } }, { "id": "CVE-2026-101903", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:c382784a-f499-540d-8ed9-ea78772ef071", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101903 affects version 1.13.2 of axios." } }, { "id": "CVE-2026-101904", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:1f657d98-cd7e-5254-aedd-823db947a82a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101904 affects version 1.13.2 of axios, and is fixed in 1.13.2-tuxcare.2." } }, { "id": "CVE-2026-101905", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:b4dbe230-039d-5c32-96e0-87cfc3ded932", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101905 affects version 1.13.2 of axios." } }, { "id": "CVE-2026-101906", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:b0f1c753-fe2a-5b1e-b8db-5905d908c3c6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101906 affects version 1.13.2 of axios." } }, { "id": "CVE-2026-101907", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:29f9858e-933c-5c16-a1a2-fea603adbc5e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101907 affects version 1.13.2 of axios." } }, { "id": "CVE-2026-101908", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:292da36a-02b0-5bb2-9ed5-3b649f03a0ab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101908 affects version 1.13.2 of axios, and is fixed in 1.13.2-tuxcare.2." } }, { "id": "CVE-2026-101909", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:a67b75cf-f22c-53c4-af6f-d71388370415", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101909 affects version 1.13.2 of axios." } }, { "id": "CVE-2026-25639", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:75db8124-f247-5330-bc0b-dab41a6d5c3e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25639 affects version 1.13.2 of axios, and is fixed in 1.13.2-tuxcare.1." } }, { "id": "CVE-2026-39865", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:1bd934b4-02eb-5c69-bdb0-2a36e4d3246c", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-39865 does not affect version 1.13.2 of axios. not_affected \u2014 CVE-2026-39865: Target is not affected. The vulnerable HTTP/2 session cleanup pattern (splice-then-continue-iteration) is absent. An upstream fix (commit 12c314b60, PR #7202 by Dmitriy Mozgovoy) restructured the control flow to return immediately after removing a session, preventing iteration over the modified array. This fix shipped in axios 1.13.2 upstream release before TuxCare's first modif...", "justification": "code_not_present" } }, { "id": "CVE-2026-40175", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:b2e88578-5d12-59c4-bddb-24803b9beecf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-40175 affects version 1.13.2 of axios, and is fixed in 1.13.2-tuxcare.2." } }, { "id": "CVE-2026-42033", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:8c595bfb-b9fa-51dd-8cb8-7d19f63e3c15", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42033 affects version 1.13.2 of axios, and is fixed in 1.13.2-tuxcare.2." } }, { "id": "CVE-2026-42034", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:948f6f08-84bc-560a-9098-25163070bbff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42034 affects version 1.13.2 of axios, and is fixed in 1.13.2-tuxcare.2." } }, { "id": "CVE-2026-42035", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:3527501c-aa56-5f43-b9b2-06c41548d8dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42035 affects version 1.13.2 of axios, and is fixed in 1.13.2-tuxcare.3." } }, { "id": "CVE-2026-42036", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:b1369e1b-2450-53ca-871c-6541e1ea3586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42036 affects version 1.13.2 of axios, and is fixed in 1.13.2-tuxcare.2." } }, { "id": "CVE-2026-42037", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:1879ddc4-c2f3-575b-aa81-2826d8988536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42037 affects version 1.13.2 of axios, and is fixed in 1.13.2-tuxcare.2." } }, { "id": "CVE-2026-42038", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:efdd57be-ca35-56a7-8a19-02ad2ee27501", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42038 affects version 1.13.2 of axios, and is fixed in 1.13.2-tuxcare.2." } }, { "id": "CVE-2026-42039", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:7a60da34-9945-592c-8f05-eccc582e849b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42039 affects version 1.13.2 of axios, and is fixed in 1.13.2-tuxcare.2." } }, { "id": "CVE-2026-42040", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:72f95f32-aa72-5bf3-b6ec-88ad138bc18f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42040 affects version 1.13.2 of axios, and is fixed in 1.13.2-tuxcare.2." } }, { "id": "CVE-2026-42041", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:2d946716-e030-522e-a235-005111cd1f4a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42041 affects version 1.13.2 of axios, and is fixed in 1.13.2-tuxcare.2." } }, { "id": "CVE-2026-42042", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:a3f15429-1f5f-5bcb-a99f-805263ed9953", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42042 affects version 1.13.2 of axios, and is fixed in 1.13.2-tuxcare.2." } }, { "id": "CVE-2026-42043", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:0c521c84-fbb4-560d-bdf5-2c2f50af8331", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42043 affects version 1.13.2 of axios, and is fixed in 1.13.2-tuxcare.2." } }, { "id": "CVE-2026-42044", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:1f6918d8-0da0-5c83-8862-fa75682a10f2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42044 affects version 1.13.2 of axios, and is fixed in 1.13.2-tuxcare.2." } }, { "id": "CVE-2026-42264", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:b2a34612-b322-5e4d-a614-4139f1f08340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42264 affects version 1.13.2 of axios, and is fixed in 1.13.2-tuxcare.2." } }, { "id": "CVE-2026-44486", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:e9f793ed-35f1-5bb3-9055-d023ed023d1b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44486 affects version 1.13.2 of axios, and is fixed in 1.13.2-tuxcare.2." } }, { "id": "CVE-2026-44487", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:428131bf-75bc-5bd0-afe9-c5c8beccd2e6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44487 affects version 1.13.2 of axios, and is fixed in 1.13.2-tuxcare.2." } }, { "id": "CVE-2026-44488", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:a7168582-c66f-59ed-bce1-d909ee358369", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44488 affects version 1.13.2 of axios, and is fixed in 1.13.2-tuxcare.2." } }, { "id": "CVE-2026-44489", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:724506e7-0a53-5136-921e-55d1ef129131", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44489 affects version 1.13.2 of axios." } }, { "id": "CVE-2026-44490", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:0ed18205-c6f7-5b2b-ad9f-f5fca2b06d3a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44490 affects version 1.13.2 of axios, and is fixed in 1.13.2-tuxcare.2." } }, { "id": "CVE-2026-44492", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:7409b12d-f87e-5eeb-8a34-47f36f308d97", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44492 affects version 1.13.2 of axios." } }, { "id": "CVE-2026-44494", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:5f7923b2-6e5f-57b4-8f06-0acfcbf0c8fc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44494 affects version 1.13.2 of axios, and is fixed in 1.13.2-tuxcare.2." } }, { "id": "CVE-2026-44495", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:ecb9e3ea-b486-58ec-b5be-33e1c76fbc60", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44495 affects version 1.13.2 of axios, and is fixed in 1.13.2-tuxcare.2." } }, { "id": "CVE-2026-44496", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:f084bf6b-6816-5319-88c2-416c2cfa8d90", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44496 affects version 1.13.2 of axios, and is fixed in 1.13.2-tuxcare.2." } }, { "id": "CVE-2026-67312", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:d1599d54-8648-5a2f-8574-799769951f81", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67312 affects version 1.13.2 of axios, and is fixed in 1.13.2-tuxcare.2." } }, { "id": "CVE-2026-67313", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:5439ac5e-a9e0-5dc0-a2e6-540e21240c5c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67313 affects version 1.13.2 of axios, and is fixed in 1.13.2-tuxcare.2." } }, { "id": "CVE-2026-67314", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:3c41c476-7e13-5763-ac66-64839e9e76c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67314 affects version 1.13.2 of axios." } }, { "id": "CVE-2026-67315", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:224a7fa4-edcc-5bdd-93cc-e6b0b303044c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67315 affects version 1.13.2 of axios." } }, { "id": "CVE-2026-67316", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:624ca088-06b9-55ae-adad-961783df3a8e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67316 affects version 1.13.2 of axios, and is fixed in 1.13.2-tuxcare.2." } }, { "id": "CVE-2026-67317", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:c1cd0b53-14cc-52e8-8418-2e192a5ab81c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67317 affects version 1.13.2 of axios, and is fixed in 1.13.2-tuxcare.2." } }, { "id": "CVE-2026-67318", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:8bc71bd4-49d4-57c7-8b6d-0aef39c65ce0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67318 affects version 1.13.2 of axios, and is fixed in 1.13.2-tuxcare.2." } }, { "id": "CVE-2026-67319", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:92d2a167-ae33-567d-8ee6-ef4ec827adc4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67319 affects version 1.13.2 of axios, and is fixed in 1.13.2-tuxcare.2." } }, { "id": "CVE-2026-67320", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:6d81fbdc-6a9d-5ce2-a0dc-7e688aa1a5d4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67320 affects version 1.13.2 of axios." } }, { "id": "CVE-2026-67321", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:5e313c1e-5c7a-56cb-9662-052d5a08083f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67321 affects version 1.13.2 of axios." } }, { "id": "GHSA-38gx-cfqf-f652", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:718a5ea6-8323-57f9-91c5-0a02857c499e", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-38gx-cfqf-f652 is a false positive for axios 1.13.2." } }, { "id": "GHSA-39j5-w47m-2gmv", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:309286d6-638b-5096-84e2-da5be6b7d700", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-39j5-w47m-2gmv is a false positive for axios 1.13.2." } }, { "id": "GHSA-3mcp-22mf-vrw3", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:89f4370d-babb-57d8-83ba-a9640c8b68b9", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-3mcp-22mf-vrw3 is a false positive for axios 1.13.2." } }, { "id": "GHSA-4ww2-rjh2-xpv9", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:596e86de-4a00-5efa-93ab-229705435a21", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-4ww2-rjh2-xpv9 is a false positive for axios 1.13.2." } }, { "id": "GHSA-68jp-44vc-2x5h", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:26c71bfe-eb3f-527d-9879-c9576d34452c", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-68jp-44vc-2x5h is a false positive for axios 1.13.2." } }, { "id": "GHSA-6hqm-hm2v-3p2p", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:64547a2f-7625-51a0-a8ca-121e498ea3c3", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-6hqm-hm2v-3p2p is a false positive for axios 1.13.2." } }, { "id": "GHSA-9wx3-p993-35vp", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:4129998a-867a-579d-8ce0-2837f576ee5c", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-9wx3-p993-35vp is a false positive for axios 1.13.2." } }, { "id": "GHSA-f2r5-pqh9-r8f8", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:c5bdf2cb-a088-5a3a-987e-4ff35c7739dc", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-f2r5-pqh9-r8f8 is a false positive for axios 1.13.2." } }, { "id": "GHSA-fq2j-3j99-rx65", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:8f54d211-3b63-5552-8e96-4775ca6719e8", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-fq2j-3j99-rx65 is a false positive for axios 1.13.2." } }, { "id": "GHSA-fqj3-h9pc-443h", "affects": [ { "ref": "pkg:npm/axios@1.13.2" } ], "bom-ref": "urn:uuid:1ca34724-875c-539e-9fe6-172786b4316e", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-fqj3-h9pc-443h is a false positive for axios 1.13.2." } } ], "dependencies": [ { "ref": "pkg:npm/axios@1.13.2" } ] }