{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:c52a1484-24b3-56c5-9e7b-c0723aad8315", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "axios", "purl": "pkg:npm/axios@1.15.2-tuxcare.1", "type": "library", "bom-ref": "pkg:npm/axios@1.15.2-tuxcare.1", "version": "1.15.2-tuxcare.1", "pedigree": { "ancestors": [ { "name": "axios", "purl": "pkg:npm/axios@1.15.2", "type": "library", "version": "1.15.2" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2019-10742", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:41a00aac-1e66-5e24-a428-856c29730378", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10742 affects version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2020-28168", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:134ff654-2cb8-53f8-a422-a2958dc4e0e8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-28168 affects version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2021-3749", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:c0137afc-5408-5d60-83ae-18bf90c5fcce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3749 affects version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2023-45857", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:d6ba2875-2071-5aa9-a97e-95f2642db662", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-45857 affects version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2024-39338", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:29e64ed8-fb95-5bc6-b9cc-d7eda845f024", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39338 affects version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2025-27152", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:64703c92-9789-5463-964d-3582344961de", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27152 affects version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2025-54371", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:8fbe617a-4c8a-5108-b045-19a05b66d550", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-54371 is a false positive for axios 1.15.2-tuxcare.1." } }, { "id": "CVE-2025-58754", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:363ad329-249b-51ea-9e29-8683f1ca73db", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58754 affects version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2025-62718", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:5c66ebd9-4f40-5947-8af4-7a1ec3450922", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-62718 affects version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-101898", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:b8d95d30-6167-5b32-8a0f-a060237d1c14", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101898 affects version 1.15.2-tuxcare.1 of axios, and is fixed in 1.15.2-tuxcare.3." } }, { "id": "CVE-2026-101899", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:23c38ae3-c147-5f53-8d32-3f84b2c95ef8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101899 affects version 1.15.2-tuxcare.1 of axios, and is fixed in 1.15.2-tuxcare.2." } }, { "id": "CVE-2026-101900", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:1ba5e73a-ec4f-5048-b819-016280538d87", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101900 affects version 1.15.2-tuxcare.1 of axios, and is fixed in 1.15.2-tuxcare.2." } }, { "id": "CVE-2026-101901", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:512c1265-4af3-53db-b0ed-e685b814191b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101901 affects version 1.15.2-tuxcare.1 of axios, and is fixed in 1.15.2-tuxcare.3." } }, { "id": "CVE-2026-101902", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:13df608d-8c5a-5e39-8da8-042d1e89df9c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101902 affects version 1.15.2-tuxcare.1 of axios, and is fixed in 1.15.2-tuxcare.2." } }, { "id": "CVE-2026-101903", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:48927daf-f9c8-5195-ab92-2418c13e7659", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101903 affects version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-101904", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:1466d643-ba10-5ff3-8dba-e7255b055478", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101904 affects version 1.15.2-tuxcare.1 of axios, and is fixed in 1.15.2-tuxcare.2." } }, { "id": "CVE-2026-101905", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:47592793-7b4d-5d13-bccd-e8bb82697c5c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101905 is fixed in version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-101906", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:0b421234-d536-5980-ad64-643c5d1d82ab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101906 affects version 1.15.2-tuxcare.1 of axios, and is fixed in 1.15.2-tuxcare.3." } }, { "id": "CVE-2026-101907", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:6bce4177-7df5-5385-8ec7-0f63bd4fd3f3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101907 affects version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-101908", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:f3f5cf67-bc4c-5a17-ace3-6376f05c8080", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101908 affects version 1.15.2-tuxcare.1 of axios, and is fixed in 1.15.2-tuxcare.2." } }, { "id": "CVE-2026-101909", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:1648b62e-f2cd-50bd-abea-71fdc4a0befe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101909 affects version 1.15.2-tuxcare.1 of axios, and is fixed in 1.15.2-tuxcare.3." } }, { "id": "CVE-2026-25639", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:7c64748e-09f5-510a-a3bb-4ed242c8634b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-25639 affects version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-39865", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:51971540-a6fb-5a19-9490-18b24e316b2a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-39865 affects version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-40175", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:909d550c-4aab-5a86-90b4-663b54e9338b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-40175 affects version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-42033", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:5fe2795c-765f-5862-b109-d7656dbc3de9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42033 affects version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-42034", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:06067406-4215-5267-a548-2aca9e0bbfa4", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42034 does not affect version 1.15.2-tuxcare.1 of axios. not_affected \u2014 Target axios 1.15.2 already contains the upstream fix for CVE-2026-42034 (upstream commit 1c7f6d76, \"enforce max body length when max redirects is 0\"). The streamed-upload path with maxRedirects===0 now pipes the body through a byte-counting Transform that errors once maxBodyLength is exceeded. The fix shipped in the upstream 1.15.2 release, before any TuxCare commit, so this is an upstream fix...", "justification": "code_not_present" } }, { "id": "CVE-2026-42035", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:55618bd7-9374-5752-a4dd-4304f2263767", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42035 affects version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-42036", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:c6a9f02d-e694-598e-a741-e48da7cbf6c0", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42036 does not affect version 1.15.2-tuxcare.1 of axios. not_affected \u2014 Axios 1.15.2 already contains the upstream fix for CVE-2026-42036 (upstream commit e8904af0, \"fix: stream response bypassed max content length\"). In lib/adapters/http.js, the responseType 'stream' branch now wraps the response stream in a byte-counting generator that throws AxiosError once maxContentLength is exceeded. The fix shipped in the upstream release, and the only TuxCare-side commits a...", "justification": "code_not_present" } }, { "id": "CVE-2026-42037", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:52615bdd-dc67-5d97-97f2-c76029f0ed3d", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42037 does not affect version 1.15.2-tuxcare.1 of axios. not_affected \u2014 The target (axios 1.15.2) already contains the upstream fix. FormDataPart strips CR and LF from value.type before it goes into the per-part Content-Type header. The fix, upstream commit 75873270 \"fix: strip crlf correctly\", shipped in the 1.15.2 release that TuxCare onboarded, so this is an upstream fix and not a TuxCare backport.", "justification": "code_not_present" } }, { "id": "CVE-2026-42038", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:ce2c6b58-ab3c-51b8-90ef-3f8511b3ad4e", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42038 does not affect version 1.15.2-tuxcare.1 of axios. not_affected \u2014 Axios 1.15.2 already contains the loopback-equivalence fix for CVE-2026-42038. shouldBypassProxy() treats localhost, any 127.x.x.x address and the IPv6 loopback forms as equivalent when matching against no_proxy. The fix is upstream commit e033f243 (author jasonsaayman@gmail.com, committer noreply@github.com). It is part of the upstream 1.15.2 release, and HEAD has no TuxCare-domain commits.", "justification": "code_not_present" } }, { "id": "CVE-2026-42039", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:9873d6fb-755a-5c44-ac7e-4dccef9f3617", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42039 does not affect version 1.15.2-tuxcare.1 of axios. not_affected \u2014 The target (axios 1.15.2) already has the upstream depth-limit fix in lib/helpers/toFormData.js. The fix is upstream commit 85132ff (\"fix: form data recursion\", #10726), which is part of the 1.15.2 release. build() now takes a depth argument and throws AxiosError ERR_FORM_DATA_DEPTH_EXCEEDED once depth exceeds maxDepth (default 100). The unbounded recursion no longer exists.", "justification": "code_not_present" } }, { "id": "CVE-2026-42040", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:a9c544a7-0b2d-59b4-966d-3404a01c20a8", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42040 does not affect version 1.15.2-tuxcare.1 of axios. not_affected \u2014 The target (axios 1.15.2) already contains the upstream fix. The `'%00': '\\x00'` charMap entry and the `|%00` regex alternative are gone from lib/helpers/AxiosURLSearchParams.js. A NUL character therefore stays percent-encoded as `%00` in the serialized output. The fix, upstream commit 5266af94 (\"fix: improve regex in AxiosURLSearchParams (#10736)\"), shipped in the upstream 1.15.2 release.", "justification": "code_not_present" } }, { "id": "CVE-2026-42041", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:89151631-87bb-5474-80f6-52fd78190bc5", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42041 does not affect version 1.15.2-tuxcare.1 of axios. not_affected \u2014 Axios 1.15.2 already contains the upstream fix (commit 42eb721e, \"replace in with has own prop util\"). mergeDirectKeys uses own-property checks instead of the `in` operator. The merged config is also a null-prototype object. The fix shipped in the upstream release, and HEAD has no TuxCare-domain commits, so this is an upstream fix.", "justification": "code_not_present" } }, { "id": "CVE-2026-42042", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:3ee29a7b-1b54-5520-9fb6-361369580a98", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42042 does not affect version 1.15.2-tuxcare.1 of axios. not_affected \u2014 axios 1.15.2 already contains the upstream fix for CVE-2026-42042. resolveConfig.js decides XSRF header forwarding with a strict check: `withXSRFToken === true || (withXSRFToken == null && isURLSameOrigin(url))`. The fix is upstream commit 1728aa1b, which is part of the upstream 1.15.2 release. Truthy non-boolean values such as 1, \"false\" or {} no longer skip the same-origin check.", "justification": "code_not_present" } }, { "id": "CVE-2026-42043", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:22b9a4f4-69f8-5cf3-85b3-9cfdb68dffb0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42043 affects version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-42044", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:53a3c6ea-b35d-54ea-b0ed-e8e0bb19144a", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42044 does not affect version 1.15.2-tuxcare.1 of axios. not_affected \u2014 Target axios 1.15.2 already contains an upstream fix. The default transformResponse reads parseReviver through an own-property helper, so a polluted Object.prototype.parseReviver is ignored. The fix shipped in the upstream release, so the verdict is not_affected, not already_fixed.", "justification": "code_not_present" } }, { "id": "CVE-2026-42264", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:3ff9c421-80b4-52e8-abac-23a461ae2bc8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42264 affects version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-44486", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:7e77deb6-f1ea-5caa-9720-7e5b75aefd50", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44486 is fixed in version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-44487", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:3e654e53-e784-5032-a473-e76b39710a22", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44487 affects version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-44488", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:ff373bbe-7c1a-55af-9cf6-44d6eea6ff48", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44488 affects version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-44489", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:7fa48a9b-8139-54bf-89cb-c23854271d2d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44489 is fixed in version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-44490", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:965f0949-f7d0-5df9-b35c-a4f3a5bb9081", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44490 is fixed in version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-44492", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:b6dc4756-43eb-5a1f-a2b2-2a1e70876822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44492 is fixed in version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-44494", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:386ec560-4c7a-5b75-9e34-b0bb4db7f71f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44494 affects version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-44495", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:10cfb46c-e213-564e-86bd-d811a130608e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44495 affects version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-44496", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:30024784-460a-5c13-9b35-50c792b8439f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44496 is fixed in version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-67312", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:be9ab85f-ff42-57fe-adb6-42fea8cefd93", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67312 affects version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-67313", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:4acc6bd7-aa3b-5063-8e92-2ec1aea654a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67313 affects version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-67314", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:bc45f35c-c9df-58b2-bd0a-5d3b7243c34a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67314 affects version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-67315", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:6c1949b9-41e3-5ca6-b6f9-e1ad53956762", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67315 affects version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-67316", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:f9586f8c-a676-5eae-8036-6360ec0a1c2e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67316 affects version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-67317", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:0283894f-1286-54ae-858d-a0d959b4318d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67317 affects version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-67318", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:5231d829-3154-523a-8671-a10de5b76a58", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67318 affects version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-67319", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:cfe17058-2549-5452-a81b-992ecfac57d1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67319 affects version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-67320", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:848be98f-f3a9-5ae2-b63a-5bb86b1efef9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67320 affects version 1.15.2-tuxcare.1 of axios." } }, { "id": "CVE-2026-67321", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:3ba89187-0640-5d5a-942b-bfb71df83d29", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67321 affects version 1.15.2-tuxcare.1 of axios." } }, { "id": "GHSA-38gx-cfqf-f652", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:5b7de970-7de1-5159-a0c3-6e2dc3e85390", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-38gx-cfqf-f652 is a false positive for axios 1.15.2-tuxcare.1." } }, { "id": "GHSA-39j5-w47m-2gmv", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:cbed8224-f7a1-5618-827c-875ead3a2be6", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-39j5-w47m-2gmv is a false positive for axios 1.15.2-tuxcare.1." } }, { "id": "GHSA-3mcp-22mf-vrw3", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:ba6eadc2-bda6-57ad-9f98-7fc481accdbf", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-3mcp-22mf-vrw3 is a false positive for axios 1.15.2-tuxcare.1." } }, { "id": "GHSA-4ww2-rjh2-xpv9", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:7ab6c88d-1eb1-5bfc-acc9-9a58c9a51267", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-4ww2-rjh2-xpv9 is a false positive for axios 1.15.2-tuxcare.1." } }, { "id": "GHSA-68jp-44vc-2x5h", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:abc1bbb4-6753-5e9c-837c-8b08dab1f4bb", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-68jp-44vc-2x5h is a false positive for axios 1.15.2-tuxcare.1." } }, { "id": "GHSA-6hqm-hm2v-3p2p", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:186c1bb5-5207-5684-9020-24215eeaeae4", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-6hqm-hm2v-3p2p is a false positive for axios 1.15.2-tuxcare.1." } }, { "id": "GHSA-9wx3-p993-35vp", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:38dc08e4-1028-54b8-b1fc-fb14d6f7979d", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-9wx3-p993-35vp is a false positive for axios 1.15.2-tuxcare.1." } }, { "id": "GHSA-f2r5-pqh9-r8f8", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:a0c4c6a2-8781-5069-9459-65c3e2935a24", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-f2r5-pqh9-r8f8 is a false positive for axios 1.15.2-tuxcare.1." } }, { "id": "GHSA-fq2j-3j99-rx65", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:ebf7bd81-7a11-53bc-a4f1-0f502fc88150", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-fq2j-3j99-rx65 is a false positive for axios 1.15.2-tuxcare.1." } }, { "id": "GHSA-fqj3-h9pc-443h", "affects": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ], "bom-ref": "urn:uuid:fd59543f-c510-5f33-b82d-568c396d8fd9", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-fqj3-h9pc-443h is a false positive for axios 1.15.2-tuxcare.1." } } ], "dependencies": [ { "ref": "pkg:npm/axios@1.15.2-tuxcare.1" } ] }