{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:32f0b2ec-d52e-590e-b040-c2cd4799da2d", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.2", "type": "library", "name": "@nuxt/test-utils", "version": "3.2.0-tuxcare.2", "purl": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.2" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:ba83e50c-19b8-5891-b654-d8781dd2a130", "id": "CVE-2016-10735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2016-10735 is fixed in version 3.2.0-tuxcare.2 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:35bf9b8c-a890-544b-8324-4e04011fcdc2", "id": "CVE-2018-14040", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-14040 is fixed in version 3.2.0-tuxcare.2 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1a1a48db-3b77-57ab-95c2-3cf33029844f", "id": "CVE-2018-14042", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-14042 is fixed in version 3.2.0-tuxcare.2 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6519e31f-d1cd-5816-9d3b-1be121c5552e", "id": "CVE-2018-16487", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-16487 is fixed in version 3.2.0-tuxcare.2 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7c8f72a4-ef74-52d3-b551-d71a675234a0", "id": "CVE-2018-20676", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-20676 is fixed in version 3.2.0-tuxcare.2 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c1b17922-f359-5154-a850-680c29c58da0", "id": "CVE-2018-20677", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-20677 is fixed in version 3.2.0-tuxcare.2 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8baf5960-dd10-5ce1-a691-d7bf40275173", "id": "CVE-2018-3721", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-3721 is fixed in version 3.2.0-tuxcare.2 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f2c85141-bd8a-53d3-b187-dc4984189f78", "id": "CVE-2019-10744", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2019-10744 is fixed in version 3.2.0-tuxcare.2 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:49f78e04-ee39-5639-ac4b-ac802b96ac65", "id": "CVE-2019-14862", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2019-14862 is fixed in version 3.2.0-tuxcare.2 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:65e4a9cb-f954-5179-827a-a466d652faa2", "id": "CVE-2019-8331", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2019-8331 is fixed in version 3.2.0-tuxcare.2 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:326d089a-33b4-5188-bbf6-20fc1928f811", "id": "CVE-2020-36049", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-36049 is fixed in version 3.2.0-tuxcare.2 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ec4cff06-d5e4-5e35-88b6-d5f2a8206c00", "id": "CVE-2020-8203", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-8203 is fixed in version 3.2.0-tuxcare.2 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:638a1f64-8f52-501e-a7f4-e638a18cf9be", "id": "CVE-2021-23337", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-23337 is fixed in version 3.2.0-tuxcare.2 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9c40e92e-d3f6-5f6b-9683-8b3d1a34f942", "id": "CVE-2022-2421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-2421 is fixed in version 3.2.0-tuxcare.2 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:160136ee-06b7-58e1-81d1-1b9529b5b20e", "id": "CVE-2022-25852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-25852 affects version 3.2.0-tuxcare.2 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2fa985ed-26ad-594c-9c2f-b9a5a52bb292", "id": "CVE-2023-32695", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-32695 is fixed in version 3.2.0-tuxcare.2 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:91aa7b3d-aaf8-58bb-ba6f-a16d359bad90", "id": "CVE-2024-34343", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-34343 affects version 3.2.0-tuxcare.2 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2248f58f-8fbf-58ed-b7dd-5f5eca00ec97", "id": "CVE-2024-6484", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-6484 is fixed in version 3.2.0-tuxcare.2 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3a797986-dfd6-5487-9987-037338709da4", "id": "CVE-2024-6485", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-6485 is fixed in version 3.2.0-tuxcare.2 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:625cc54c-29d4-5de1-be84-3d799c5e8a09", "id": "CVE-2025-24361", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-24361 affects version 3.2.0-tuxcare.2 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ce362462-a89a-54ff-bbcb-7b2d3d0a7851", "id": "CVE-2025-27415", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27415 affects version 3.2.0-tuxcare.2 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a897aab4-faf2-5863-a0bf-53f1901103e0", "id": "CVE-2026-33151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33151 is fixed in version 3.2.0-tuxcare.2 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0a1b0fbc-c294-5623-a175-b4649e5b39d2", "id": "CVE-2026-41305", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41305 affects version 3.2.0-tuxcare.2 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b30219e7-09f5-505c-8126-a19763ec8764", "id": "CVE-2026-42338", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2026-42338 is a false positive for @nuxt/test-utils 3.2.0-tuxcare.2. false_positive \u2014 CVE-2026-42338 concerns the 'ip-address' npm library (IPv6/IPv4 address parsing), but this repository is Nuxt v3.2.0-tuxcare.1 (a Vue.js meta-framework). The affected component is not present in this repository as a vendored copy, dependency, or in any other form. This is a wrong-project match." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:df97a931-8fae-57b1-9062-35ccbe6834b5", "id": "CVE-2026-45669", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45669 affects version 3.2.0-tuxcare.2 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1ee0188d-78c0-5b27-9a97-0183df43024e", "id": "CVE-2026-46342", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46342 affects version 3.2.0-tuxcare.2 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c29c2872-8f3d-5e1f-b1aa-b51b377459a1", "id": "CVE-2026-47200", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-47200 does not affect version 3.2.0-tuxcare.2 of @nuxt/test-utils. not_affected \u2014 Nuxt version 3.2.0 does not contain the server-only pages feature that is the prerequisite for CVE-2026-47200. The vulnerable code pattern (`.server.vue` pages rendered as islands via `/__nuxt_island/page_*` endpoint) was introduced in Nuxt v3.11.0, which is 2,059 commits after v3.2.0. The target version predates the feature by multiple major versions." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d4282ef5-dd6d-52d0-bf00-b1a6216bd99f", "id": "CVE-2026-4800", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-4800 is fixed in version 3.2.0-tuxcare.2 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f0caf88e-d9d1-555b-acb2-a20d4a2c27f8", "id": "CVE-2026-53722", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53722 affects version 3.2.0-tuxcare.2 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:574f3720-5558-5b2f-bc44-cbc25b43d60f", "id": "CVE-2026-56326", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-56326 does not affect version 3.2.0-tuxcare.2 of @nuxt/test-utils. not_affected \u2014 Version 3.2.0 does not contain the vulnerable code pattern. The vulnerability exists in the encodeURL() function which was introduced on June 26, 2024, over a year after version 3.2.0 (released February 9, 2023). The target uses a simpler redirect architecture without the vulnerable encodeURL() function." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:942514c0-969a-5384-8781-8ad0689b1667", "id": "GHSA-c9cv-mq2m-ppp3", "analysis": { "state": "not_affected", "detail": "Vulnerability GHSA-c9cv-mq2m-ppp3 does not affect version 3.2.0-tuxcare.2 of @nuxt/test-utils. not_affected \u2014 Target repository Nuxt version 3.2.0 is NOT affected by GHSA-c9cv-mq2m-ppp3. All three vulnerability sinks described in the CVE (SSR open redirect via path-normalization, script execution via navigateTo open option, and protocol-relative bypass in reloadNuxtApp) require code features that were introduced AFTER version 3.2.0. The vulnerable encodeURL function with WHATWG URL parsing was added in..." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6b51e1c3-50d5-55ca-a25e-67ca67b35320", "id": "GHSA-m3q2-p4fw-w38m", "analysis": { "state": "not_affected", "detail": "Vulnerability GHSA-m3q2-p4fw-w38m does not affect version 3.2.0-tuxcare.2 of @nuxt/test-utils. not_affected \u2014 Version 3.2.0 is NOT affected by GHSA-m3q2-p4fw-w38m. The vulnerable innerHTML pattern was introduced in v3.16.0 (March 2025), two years after this version. The target uses noscript.children instead of the vulnerable noscript.innerHTML assignment." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.2" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.2" } ] }