{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:ea041c73-77e0-5cb2-868a-04e421dbc758", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.4", "type": "library", "name": "@nuxt/test-utils", "version": "3.2.0-tuxcare.4", "purl": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.4" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:6b7e38db-ae7e-5f3d-8bfe-08844ff529f4", "id": "CVE-2016-10735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2016-10735 is fixed in version 3.2.0-tuxcare.4 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d6a5db12-f976-50a7-b1f1-b6fe4d4c28ec", "id": "CVE-2018-14040", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-14040 is fixed in version 3.2.0-tuxcare.4 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3a689680-671b-5b3d-956e-1b6e295cda95", "id": "CVE-2018-14042", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-14042 is fixed in version 3.2.0-tuxcare.4 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:95698d42-1a7a-5164-8f75-12c50fd468bb", "id": "CVE-2018-16487", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-16487 is fixed in version 3.2.0-tuxcare.4 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f6c2b36f-df69-5583-aafe-d6b04106cf6b", "id": "CVE-2018-20676", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-20676 is fixed in version 3.2.0-tuxcare.4 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9d44d473-4a81-53ea-b181-30d8eae3a99f", "id": "CVE-2018-20677", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-20677 is fixed in version 3.2.0-tuxcare.4 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7ac18d82-c1c5-5500-8f26-d668b2f8fdf1", "id": "CVE-2018-3721", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-3721 is fixed in version 3.2.0-tuxcare.4 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f8b005d4-0b5b-55d8-ad70-a8e348d0a388", "id": "CVE-2019-10744", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2019-10744 is fixed in version 3.2.0-tuxcare.4 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1d89107b-7317-5106-ae0b-73bad9a634f4", "id": "CVE-2019-14862", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2019-14862 is fixed in version 3.2.0-tuxcare.4 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:206e82d8-a7bc-5657-8e18-92793fb350e3", "id": "CVE-2019-8331", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2019-8331 is fixed in version 3.2.0-tuxcare.4 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c3bf9f48-c0f5-5619-aa11-76731620e70a", "id": "CVE-2020-36049", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-36049 is fixed in version 3.2.0-tuxcare.4 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:539e908b-e4e4-5866-8f9b-b8d003cbdb78", "id": "CVE-2020-8203", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-8203 is fixed in version 3.2.0-tuxcare.4 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1ddff1da-3a48-5b28-9a29-a06a20b5fa3b", "id": "CVE-2021-23337", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-23337 is fixed in version 3.2.0-tuxcare.4 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:16497629-d6a0-5bb3-a2a5-40addf4adfa0", "id": "CVE-2022-2421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-2421 is fixed in version 3.2.0-tuxcare.4 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e6dc78b3-24df-5d38-9a96-359c08011084", "id": "CVE-2022-25852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-25852 affects version 3.2.0-tuxcare.4 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1998dc9c-afe1-5004-b808-89d973ad0f4d", "id": "CVE-2023-32695", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-32695 is fixed in version 3.2.0-tuxcare.4 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1003be17-e874-5ae8-9d8b-b035f907d001", "id": "CVE-2024-34343", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-34343 affects version 3.2.0-tuxcare.4 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e6f653db-20c7-5a45-81ce-13b39ed2c42a", "id": "CVE-2024-6484", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-6484 is fixed in version 3.2.0-tuxcare.4 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:632b17ce-4658-5512-bf55-5243acb709a5", "id": "CVE-2024-6485", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-6485 is fixed in version 3.2.0-tuxcare.4 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1059b2ea-9a66-5fde-b239-d00f334476c4", "id": "CVE-2025-24361", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24361 is fixed in version 3.2.0-tuxcare.4 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6c3c1e0c-457b-531a-a105-682438f44228", "id": "CVE-2025-27415", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27415 affects version 3.2.0-tuxcare.4 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8de55d89-75d5-5054-8476-858ed9f48536", "id": "CVE-2026-33151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33151 is fixed in version 3.2.0-tuxcare.4 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:97ed4868-4342-50b6-92e9-22a92dd32e97", "id": "CVE-2026-41305", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41305 affects version 3.2.0-tuxcare.4 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1d2d0338-a61f-54d8-9408-54e4d0816afe", "id": "CVE-2026-42338", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2026-42338 is a false positive for @nuxt/test-utils 3.2.0-tuxcare.4. false_positive \u2014 CVE-2026-42338 concerns the 'ip-address' npm library (IPv6/IPv4 address parsing), but this repository is Nuxt v3.2.0-tuxcare.1 (a Vue.js meta-framework). The affected component is not present in this repository as a vendored copy, dependency, or in any other form. This is a wrong-project match." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b582e784-a2d8-572c-9729-8f28f26ec7e8", "id": "CVE-2026-45669", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45669 affects version 3.2.0-tuxcare.4 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:241cdd30-5013-5252-bf85-cb1d697ce513", "id": "CVE-2026-46342", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46342 affects version 3.2.0-tuxcare.4 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b46583bc-5c6a-5650-91fa-6393cd763e6f", "id": "CVE-2026-47200", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-47200 does not affect version 3.2.0-tuxcare.4 of @nuxt/test-utils. not_affected \u2014 Nuxt version 3.2.0 does not contain the server-only pages feature that is the prerequisite for CVE-2026-47200. The vulnerable code pattern (`.server.vue` pages rendered as islands via `/__nuxt_island/page_*` endpoint) was introduced in Nuxt v3.11.0, which is 2,059 commits after v3.2.0. The target version predates the feature by multiple major versions." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:fb7a170a-d4f4-561e-ab5b-017c17695e78", "id": "CVE-2026-4800", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-4800 is fixed in version 3.2.0-tuxcare.4 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:baf32aa8-7203-503e-bd6d-28124ad8c813", "id": "CVE-2026-53722", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53722 is fixed in version 3.2.0-tuxcare.4 of @nuxt/test-utils." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:cb2e3834-efaa-561a-822c-9ec2808b3114", "id": "CVE-2026-56326", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-56326 does not affect version 3.2.0-tuxcare.4 of @nuxt/test-utils. not_affected \u2014 Version 3.2.0 does not contain the vulnerable code pattern. The vulnerability exists in the encodeURL() function which was introduced on June 26, 2024, over a year after version 3.2.0 (released February 9, 2023). The target uses a simpler redirect architecture without the vulnerable encodeURL() function." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:25439bc8-b68e-5371-9510-b5da62a6ccee", "id": "GHSA-c9cv-mq2m-ppp3", "analysis": { "state": "not_affected", "detail": "Vulnerability GHSA-c9cv-mq2m-ppp3 does not affect version 3.2.0-tuxcare.4 of @nuxt/test-utils. not_affected \u2014 Target repository Nuxt version 3.2.0 is NOT affected by GHSA-c9cv-mq2m-ppp3. All three vulnerability sinks described in the CVE (SSR open redirect via path-normalization, script execution via navigateTo open option, and protocol-relative bypass in reloadNuxtApp) require code features that were introduced AFTER version 3.2.0. The vulnerable encodeURL function with WHATWG URL parsing was added in..." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3ab0e52a-4c9c-5051-b42a-3f99f7ce03ce", "id": "GHSA-m3q2-p4fw-w38m", "analysis": { "state": "not_affected", "detail": "Vulnerability GHSA-m3q2-p4fw-w38m does not affect version 3.2.0-tuxcare.4 of @nuxt/test-utils. not_affected \u2014 Version 3.2.0 is NOT affected by GHSA-m3q2-p4fw-w38m. The vulnerable innerHTML pattern was introduced in v3.16.0 (March 2025), two years after this version. The target uses noscript.children instead of the vulnerable noscript.innerHTML assignment." }, "affects": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.4" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40nuxt/test-utils@3.2.0-tuxcare.4" } ] }