{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:7a857f03-cb0a-5657-8198-e18c0bbb09ac", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.1", "type": "library", "name": "@nuxt/test-utils", "version": "3.2.0-tuxcare.1", "purl": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:dfa9175c-e0f7-5490-a317-b9f05f93dc90", "id": "CVE-2016-10735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2016-10735 is fixed in version 3.2.0-tuxcare.1 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9889dd4e-ef73-5e30-be83-73b0c0923370", "id": "CVE-2018-14040", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-14040 is fixed in version 3.2.0-tuxcare.1 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6403f673-f9f0-5c7a-837f-23576c1d0275", "id": "CVE-2018-14042", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-14042 is fixed in version 3.2.0-tuxcare.1 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5902be9f-37bb-528a-8a79-51e9614fe377", "id": "CVE-2018-16487", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-16487 is fixed in version 3.2.0-tuxcare.1 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9dd3f704-e42e-5cad-934f-93a72969b79e", "id": "CVE-2018-20676", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-20676 is fixed in version 3.2.0-tuxcare.1 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:aac16815-266d-5401-a130-7dc36884195c", "id": "CVE-2018-20677", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-20677 is fixed in version 3.2.0-tuxcare.1 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:dfe0d7e0-39fa-5966-8af4-6470f1f6a104", "id": "CVE-2018-3721", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-3721 is fixed in version 3.2.0-tuxcare.1 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a01ab6ff-a933-542c-a98e-0ee5d70633ba", "id": "CVE-2019-10744", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2019-10744 is fixed in version 3.2.0-tuxcare.1 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c8d14a15-c12e-54de-81bb-09b7f83380f4", "id": "CVE-2019-14862", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2019-14862 is fixed in version 3.2.0-tuxcare.1 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e1be41b4-e60d-53f6-93e6-fbdc748394a6", "id": "CVE-2019-8331", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2019-8331 is fixed in version 3.2.0-tuxcare.1 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c14c7faf-501d-5215-b9fe-73f9d595a6f4", "id": "CVE-2020-36049", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-36049 is fixed in version 3.2.0-tuxcare.1 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:89c97260-3fa5-54bf-89ea-f95598f4240f", "id": "CVE-2020-8203", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-8203 affects version 3.2.0-tuxcare.1 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2f98e5bb-e509-5209-82d8-d02362d26d71", "id": "CVE-2021-23337", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-23337 is fixed in version 3.2.0-tuxcare.1 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ce487ba0-2793-5335-88eb-cbee8ec2ec64", "id": "CVE-2022-2421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-2421 is fixed in version 3.2.0-tuxcare.1 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ac9b6488-e19e-5bac-9f10-ed2bbe833644", "id": "CVE-2022-25852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-25852 affects version 3.2.0-tuxcare.1 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8781bd27-1253-5a08-8b88-b4ace7d947b5", "id": "CVE-2023-32695", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-32695 is fixed in version 3.2.0-tuxcare.1 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b2645571-9ddf-546e-9dca-63c40a03c4c7", "id": "CVE-2024-34343", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-34343 affects version 3.2.0-tuxcare.1 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:397e32cd-2baa-5957-be27-419ef48fd4af", "id": "CVE-2024-6484", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-6484 is fixed in version 3.2.0-tuxcare.1 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:12738134-3019-530f-8673-4546dc6a7db2", "id": "CVE-2024-6485", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-6485 is fixed in version 3.2.0-tuxcare.1 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4dabdbf4-67ba-5043-8e56-d3615768a55f", "id": "CVE-2025-24361", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-24361 affects version 3.2.0-tuxcare.1 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c0a8dbef-65b0-54d9-b88d-29f3b4a3e9df", "id": "CVE-2025-27415", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27415 affects version 3.2.0-tuxcare.1 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5d61529d-aea9-5e3b-bcf1-7632521ab417", "id": "CVE-2026-33151", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33151 affects version 3.2.0-tuxcare.1 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:48cb7799-5f00-5793-96c5-96e43c18e4ec", "id": "CVE-2026-41305", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41305 affects version 3.2.0-tuxcare.1 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:db9812a9-c9d3-54d1-8e94-f0c32dcc48be", "id": "CVE-2026-42338", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2026-42338 is a false positive for @nuxt/test-utils 3.2.0-tuxcare.1. false_positive \u2014 CVE-2026-42338 concerns the 'ip-address' npm library (IPv6/IPv4 address parsing), but this repository is Nuxt v3.2.0-tuxcare.1 (a Vue.js meta-framework). The affected component is not present in this repository as a vendored copy, dependency, or in any other form. This is a wrong-project match." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:50501df2-fcef-516a-aa59-0b20d7f70cd2", "id": "CVE-2026-45669", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45669 affects version 3.2.0-tuxcare.1 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f6efb382-6a3c-5d14-82ca-9577a38479e4", "id": "CVE-2026-46342", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46342 affects version 3.2.0-tuxcare.1 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3dd8dcb9-53fd-5e3c-9c50-d0a860205d55", "id": "CVE-2026-47200", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-47200 does not affect version 3.2.0-tuxcare.1 of @nuxt/test-utils. not_affected \u2014 Nuxt version 3.2.0 does not contain the server-only pages feature that is the prerequisite for CVE-2026-47200. The vulnerable code pattern (`.server.vue` pages rendered as islands via `/__nuxt_island/page_*` endpoint) was introduced in Nuxt v3.11.0, which is 2,059 commits after v3.2.0. The target version predates the feature by multiple major versions." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:07661756-20d0-56e0-933a-12ab0f864286", "id": "CVE-2026-4800", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-4800 affects version 3.2.0-tuxcare.1 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bd38f00e-c332-59b1-bda1-dd1cb5bf339b", "id": "CVE-2026-53722", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53722 affects version 3.2.0-tuxcare.1 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:94d391da-ba12-544b-a283-bff8219e0e7c", "id": "CVE-2026-56326", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-56326 does not affect version 3.2.0-tuxcare.1 of @nuxt/test-utils. not_affected \u2014 Version 3.2.0 does not contain the vulnerable code pattern. The vulnerability exists in the encodeURL() function which was introduced on June 26, 2024, over a year after version 3.2.0 (released February 9, 2023). The target uses a simpler redirect architecture without the vulnerable encodeURL() function." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ea9d1d96-6f3b-5a98-9d3f-dd4b5b82b829", "id": "GHSA-c9cv-mq2m-ppp3", "analysis": { "state": "not_affected", "detail": "Vulnerability GHSA-c9cv-mq2m-ppp3 does not affect version 3.2.0-tuxcare.1 of @nuxt/test-utils. not_affected \u2014 Target repository Nuxt version 3.2.0 is NOT affected by GHSA-c9cv-mq2m-ppp3. All three vulnerability sinks described in the CVE (SSR open redirect via path-normalization, script execution via navigateTo open option, and protocol-relative bypass in reloadNuxtApp) require code features that were introduced AFTER version 3.2.0. The vulnerable encodeURL function with WHATWG URL parsing was added in..." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d124b290-ce02-5235-b5b2-986aa31644cd", "id": "GHSA-m3q2-p4fw-w38m", "analysis": { "state": "not_affected", "detail": "Vulnerability GHSA-m3q2-p4fw-w38m does not affect version 3.2.0-tuxcare.1 of @nuxt/test-utils. not_affected \u2014 Version 3.2.0 is NOT affected by GHSA-m3q2-p4fw-w38m. The vulnerable innerHTML pattern was introduced in v3.16.0 (March 2025), two years after this version. The target uses noscript.children instead of the vulnerable noscript.innerHTML assignment." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.1" } ] }