{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:385412c8-4198-5c75-a7fb-54f9de61afcc", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "axios", "purl": "pkg:npm/axios@1.7.5-tuxcare.6", "type": "library", "bom-ref": "pkg:npm/axios@1.7.5-tuxcare.6", "version": "1.7.5-tuxcare.6", "pedigree": { "ancestors": [ { "name": "axios", "purl": "pkg:npm/axios@1.7.5", "type": "library", "version": "1.7.5" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2019-10742", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:5ac416ec-fd70-5a95-8529-4515fdb1ff7c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10742 affects version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2020-28168", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:01037b18-19ea-5844-a917-f533817a5a2f", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2020-28168 does not affect version 1.7.5-tuxcare.6 of axios. not_affected \u2014 CVE-2020-28168 (SSRF via redirect bypassing proxy) is NOT present in axios 1.7.5-tuxcare.6. The upstream fix (commit c7329fef) was already included in the upstream release before TuxCare onboarding. The target contains the defense mechanism: setProxy() installs a beforeRedirects.proxy callback (lib/adapters/http.js:172-176) that re-applies proxy configuration when following redirects, preventin...", "justification": "code_not_present" } }, { "id": "CVE-2021-3749", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:fa3f9e16-cf5b-57b3-87b2-ebe831654209", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3749 affects version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2023-45857", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:3c1edbd0-eaf8-5098-9510-a1871ed66543", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2023-45857 does not affect version 1.7.5-tuxcare.6 of axios. not_affected \u2014 CVE-2023-45857 describes a vulnerability where axios 0.8.1-1.5.1 inadvertently sends XSRF tokens to cross-origin hosts when withCredentials is true. The target version 1.7.5-tuxcare.6 is NOT affected because the upstream axios 1.7.x release (onboarded at commit 1e8ae7d5) already contained the fix. The vulnerable pattern (withCredentials bypassing same-origin checks) was removed in upstream comm...", "justification": "code_not_present" } }, { "id": "CVE-2024-39338", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:aa5b2102-a794-5f75-94cc-4ff8309e045e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-39338 affects version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2025-27152", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:11f7ae3b-b61d-56a8-98cb-ee10eaa918fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-27152 is fixed in version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2025-54371", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:e6921c77-30e7-5342-a079-0dfff1e60204", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-54371 is a false positive for axios 1.7.5-tuxcare.6." } }, { "id": "CVE-2025-58754", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:e1493be9-4f7f-56ba-a091-7f9f47e41497", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58754 is fixed in version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2025-62718", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:3a0d0707-a039-5887-9669-2bfd7a22181b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-62718 is fixed in version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-101898", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:278896bf-bac9-52a5-b1ce-b571f717d0d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101898 affects version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-101899", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:42afcda3-fdc4-5c8d-a41d-0b157cbd3f7b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101899 affects version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-101900", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:3126bd79-91f7-59f8-a42c-159c75015119", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101900 affects version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-101901", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:d4566937-4b5c-50dd-bf37-c87a7af886ac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101901 affects version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-101902", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:40766a76-f144-5abb-94af-0cc7965bdc6c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101902 is fixed in version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-101903", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:2962222c-5ddc-5e18-bbc0-8502a5384432", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101903 affects version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-101904", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:b05e09cb-7d17-5626-bf76-3795a0552758", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101904 is fixed in version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-101905", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:84ec3ffa-d73b-5034-801a-3413ab75dd18", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101905 affects version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-101906", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:4bd60c81-c4c5-5ad9-814c-c0db15fd6aa8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101906 affects version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-101907", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:6b20b1e4-d3b8-5611-aa35-72900aca19b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101907 affects version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-101908", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:4dc463dc-7fa8-58be-bc23-84cb4714f077", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-101908 does not affect version 1.7.5-tuxcare.6 of axios. not_affected \u2014 Version 1.7.5 is not affected by CVE-2026-101908. The vulnerability requires passing fetchOptions as the second argument to fetch(), creating a path for prototype-polluted properties to override the Request's headers. This pattern was introduced in commit 0f50af8e (June 2025), first appearing in v1.10.0. Version 1.7.5 predates this change and calls fetch(request) with only one argument, prevent...", "justification": "code_not_reachable" } }, { "id": "CVE-2026-101909", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:605f40bf-6686-58ca-9384-9234ae623763", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101909 affects version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-25639", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:ee134319-8083-5d4a-9ba8-686e859b4dcf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25639 is fixed in version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-39865", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:293a2872-0272-56bb-b7e9-93f969b5c79e", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-39865 does not affect version 1.7.5-tuxcare.6 of axios. not_affected \u2014 Target version 1.7.5 is not affected by CVE-2026-39865. The vulnerability exists in the HTTP/2 session cleanup logic (Http2Sessions class), which was introduced in axios v1.13.0 (October 2025). Target version 1.7.5 was released 14 months earlier (August 2024) and contains no HTTP/2 implementation. Exhaustive code search confirmed zero HTTP/2-related code across all 63 source files in lib/. Sinc...", "justification": "code_not_present" } }, { "id": "CVE-2026-40175", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:ee06db69-169d-52e8-bc8f-eae50243ba0b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40175 is fixed in version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-42033", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:cc1d4293-43cd-5ff0-980c-6f05df055ca9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42033 is fixed in version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-42034", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:7182ac75-b3f3-54cb-80e1-2e1737ff62f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42034 is fixed in version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-42035", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:e5e894fa-5d47-5855-abec-2f7bf8fd3ece", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42035 is fixed in version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-42036", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:793396a4-029e-5bfb-8f9e-a00cdd320100", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42036 is fixed in version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-42037", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:382d779b-869e-5f6d-926b-802940148ee2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42037 is fixed in version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-42038", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:19dee4f8-7fb4-5e09-8de1-082335b2cd1e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42038 is fixed in version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-42039", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:4ccc0502-2481-5334-bacf-7fe99df3be82", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42039 is fixed in version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-42040", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:10b570b3-7ac8-5080-969b-f1236b215eec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42040 is fixed in version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-42041", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:7b6fceda-e57e-58e4-9b27-caae784816a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42041 is fixed in version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-42042", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:53564e94-d094-53f0-946a-315c70f5074a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42042 is fixed in version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-42043", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:7a850ed4-6eec-590f-af39-8e31d5d38d19", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42043 is fixed in version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-42044", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:bb0e450d-8937-511d-85de-a1f9cb5c8c67", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42044 is fixed in version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-42264", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:ab5c2792-9c4d-5bc2-a5b3-10762e74ff3a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42264 is fixed in version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-44486", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:5015addf-8f82-5309-8fea-3c350b249f32", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44486 is fixed in version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-44487", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:c9dab4f4-94d9-572f-875c-5e283308149f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44487 is fixed in version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-44488", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:cd6ec325-728a-5a01-9ab3-b7911628d612", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44488 is fixed in version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-44489", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:40b3f266-5c2b-5f14-8ca4-20448943e826", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44489 affects version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-44490", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:d5420948-ee2e-5b72-912e-ee3e7e2ec3d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44490 is fixed in version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-44492", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:471b3fbe-d00b-54cc-9f3e-1f365b4c689a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-44492 affects version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-44494", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:39b99a52-ff67-570a-b61f-cfeb9bdb4d18", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44494 is fixed in version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-44495", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:4a1862d7-8963-5552-8c9d-06cc39b0be32", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44495 is fixed in version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-44496", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:a513e8c1-a9a5-5b0b-9d5f-2f7627ac072c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44496 is fixed in version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-67312", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:21ff612f-d14e-5e34-b733-82ab7350a839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67312 is fixed in version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-67313", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:4886bc7e-d41e-505a-a657-0f36297cfd6a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67313 is fixed in version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-67314", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:ef58a5e5-cf50-5ec1-a667-a37b194f1ce5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67314 affects version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-67315", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:f46e0c54-3a54-51e6-b426-3a05ab9cc2cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67315 affects version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-67316", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:f8f739a9-54ff-5fda-9965-06996d1a9a14", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67316 is fixed in version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-67317", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:29820b4c-67d1-576b-9206-ec36d20f917f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67317 is fixed in version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-67318", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:7c2a0ad5-014a-545b-b997-5ea2bd79a57c", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-67318 does not affect version 1.7.5-tuxcare.6 of axios. not_affected \u2014 axios 1.7.5 has no HTTP/2 support, so the vulnerable http2Transport path does not exist. Streamed bodies with a finite maxBodyLength go through follow-redirects, which enforces the cap, or through the byte-counting wrapper when maxRedirects is 0. No path sends an uncapped stream.", "justification": "protected_at_runtime" } }, { "id": "CVE-2026-67319", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:f3f166b3-9a26-59f9-8215-ba84b2ca943c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-67319 is fixed in version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-67320", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:2ccc9bce-5445-5422-baf6-6d0b5e3fa156", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67320 affects version 1.7.5-tuxcare.6 of axios." } }, { "id": "CVE-2026-67321", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:656a62fc-d5ab-54bc-872d-4b2e8868e0ae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-67321 affects version 1.7.5-tuxcare.6 of axios." } }, { "id": "GHSA-38gx-cfqf-f652", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:f8d1dfa1-afc9-5e7a-ba6b-afb725969f02", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-38gx-cfqf-f652 is a false positive for axios 1.7.5-tuxcare.6." } }, { "id": "GHSA-39j5-w47m-2gmv", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:3fdbbbdd-d34c-548a-b8e9-7969d5abbd0b", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-39j5-w47m-2gmv is a false positive for axios 1.7.5-tuxcare.6." } }, { "id": "GHSA-3mcp-22mf-vrw3", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:be9e5cda-b11f-56e2-8e5e-88a2cdb0d62c", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-3mcp-22mf-vrw3 is a false positive for axios 1.7.5-tuxcare.6." } }, { "id": "GHSA-42h9-826w-cgv3", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:97891b15-6e72-5952-92d9-b09ac733e51a", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-42h9-826w-cgv3 affects version 1.7.5-tuxcare.6 of axios." } }, { "id": "GHSA-4ww2-rjh2-xpv9", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:50a19eba-acf8-5298-a3cf-daf20d82e0fd", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-4ww2-rjh2-xpv9 is a false positive for axios 1.7.5-tuxcare.6." } }, { "id": "GHSA-68jp-44vc-2x5h", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:db2de4d0-6438-572f-87e3-b53bb108d743", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-68jp-44vc-2x5h is a false positive for axios 1.7.5-tuxcare.6." } }, { "id": "GHSA-6hqm-hm2v-3p2p", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:f2a0ddb1-c50c-5c3e-9001-8ee76af38b6c", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-6hqm-hm2v-3p2p is a false positive for axios 1.7.5-tuxcare.6." } }, { "id": "GHSA-7q8q-rj6j-mhjq", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:7231ffe0-0ee8-5ad4-922c-bd9f5ae08b36", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-7q8q-rj6j-mhjq affects version 1.7.5-tuxcare.6 of axios." } }, { "id": "GHSA-9wx3-p993-35vp", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:d7c43361-102a-5d95-97bb-78a7537be9aa", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-9wx3-p993-35vp is a false positive for axios 1.7.5-tuxcare.6." } }, { "id": "GHSA-f2r5-pqh9-r8f8", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:90db283c-6f21-5d04-bd55-db7e7ca0af02", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-f2r5-pqh9-r8f8 is a false positive for axios 1.7.5-tuxcare.6." } }, { "id": "GHSA-fq2j-3j99-rx65", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:df793e4f-abdb-5cd1-a1ab-76ba2e32c81c", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-fq2j-3j99-rx65 is a false positive for axios 1.7.5-tuxcare.6." } }, { "id": "GHSA-fqj3-h9pc-443h", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:b3562268-1fc7-57bf-be5e-37434886311d", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-fqj3-h9pc-443h is a false positive for axios 1.7.5-tuxcare.6." } }, { "id": "GHSA-jqh4-m9w3-8hp9", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:1894f979-6287-5b29-82bd-989006f263f9", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-jqh4-m9w3-8hp9 affects version 1.7.5-tuxcare.6 of axios." } }, { "id": "GHSA-mmx7-hfxf-jppx", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:a895b06f-c5e7-5e5c-abd9-96d397ebca2d", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mmx7-hfxf-jppx is fixed in version 1.7.5-tuxcare.6 of axios." } }, { "id": "GHSA-pmv8-rq9r-6j72", "affects": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ], "bom-ref": "urn:uuid:1e716d01-4c77-50ec-bf5b-07c342306b3b", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-pmv8-rq9r-6j72 affects version 1.7.5-tuxcare.6 of axios." } } ], "dependencies": [ { "ref": "pkg:npm/axios@1.7.5-tuxcare.6" } ] }