{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:ce61b240-65f4-5943-8b68-80056fe51128", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@astrojs/internal-helpers", "purl": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.8", "type": "library", "bom-ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.8", "version": "2.10.15-tuxcare.8", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-56140", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:b7d881c0-3ec8-50a2-a151-812553a49e75", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 2.10.15-tuxcare.8 of @astrojs/internal-helpers." } }, { "id": "CVE-2024-56159", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:d42111a1-fba5-5916-955e-f89a268076f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 2.10.15-tuxcare.8 of @astrojs/internal-helpers." } }, { "id": "CVE-2025-55303", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:ed5ec9f0-81db-50fb-b743-136051a3ea41", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55303 is fixed in version 2.10.15-tuxcare.8 of @astrojs/internal-helpers." } }, { "id": "CVE-2025-61925", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:fcf00da5-09f5-5372-9644-7438974e5337", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 2.10.15-tuxcare.8 of @astrojs/internal-helpers." } }, { "id": "CVE-2025-64757", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:e9ea8788-2133-5b0e-955c-35735cf79bee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 2.10.15-tuxcare.8 of @astrojs/internal-helpers." } }, { "id": "CVE-2025-64764", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:c595b356-0e1a-5757-a44c-db308084b305", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 2.10.15-tuxcare.8 of @astrojs/internal-helpers." } }, { "id": "CVE-2025-64765", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:004cf502-2e63-5f6e-9c92-4cf6b652d2ea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 2.10.15-tuxcare.8 of @astrojs/internal-helpers." } }, { "id": "CVE-2025-65019", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:6777fd4e-bbbd-5601-a8ab-3a697cced199", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 2.10.15-tuxcare.8 of @astrojs/internal-helpers." } }, { "id": "CVE-2025-66202", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:915c774d-c513-5f14-9fe8-c03949d3e0aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 2.10.15-tuxcare.8 of @astrojs/internal-helpers." } }, { "id": "CVE-2026-33769", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:86fcb120-8618-5ebd-80bc-4db721b21929", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 2.10.15-tuxcare.8 of @astrojs/internal-helpers." } }, { "id": "CVE-2026-41067", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:d7eb1412-2e66-52d5-b60e-fde0278dac44", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 2.10.15-tuxcare.8 of @astrojs/internal-helpers." } }, { "id": "CVE-2026-45028", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:7e8159bc-1dff-524b-82ff-40561e39d7ff", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 2.10.15-tuxcare.8 of @astrojs/internal-helpers. not_affected \u2014 Astro version 2.10.14 is not affected by CVE-2026-45028. The server islands feature with encrypted parameter handling does not exist in this version. The vulnerability requires server islands (introduced in later versions) to be present, specifically the encryption/decryption of props and slots parameters via AES-GCM. Version 2.10.14 predates this feature entirely. While the repository contains...", "justification": "code_not_present" } }, { "id": "CVE-2026-50146", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:4120d498-1720-5328-8e55-a331a34f5afa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 2.10.15-tuxcare.8 of @astrojs/internal-helpers." } }, { "id": "CVE-2026-54298", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:0f091c1e-afc7-5437-a722-58ae2faea668", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 2.10.15-tuxcare.8 of @astrojs/internal-helpers." } }, { "id": "CVE-2026-54299", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:1a36c8e6-430a-56d3-8b52-89029a1596ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 2.10.15-tuxcare.8 of @astrojs/internal-helpers." } }, { "id": "CVE-2026-59728", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:2961ebea-5542-513d-a7ae-0baf01701e50", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 2.10.15-tuxcare.8 of @astrojs/internal-helpers." } }, { "id": "CVE-2026-59729", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:c9b47b4f-4fd1-5373-8530-acb25530150b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59729 is fixed in version 2.10.15-tuxcare.8 of @astrojs/internal-helpers." } }, { "id": "CVE-2026-73422", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:61db1c73-d696-5364-bda1-3e0c1ab05852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73422 is fixed in version 2.10.15-tuxcare.8 of @astrojs/internal-helpers." } }, { "id": "CVE-2026-84376", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:323fab3a-a6c1-5de8-995a-f5f547dee96b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-84376 affects version 2.10.15-tuxcare.8 of @astrojs/internal-helpers, and is fixed in 2.10.15-tuxcare.9." } }, { "id": "GHSA-26w7-cxv4-gfx2", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:55972d0a-7f86-5ef8-9d93-8345cbd369e6", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 affects version 2.10.15-tuxcare.8 of @astrojs/internal-helpers, and is fixed in 2.10.15-tuxcare.9." } }, { "id": "GHSA-4g3v-8h47-v7g6", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:c27c69d6-ec07-5796-be0d-d2dc74cbcfed", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 2.10.15-tuxcare.8 of @astrojs/internal-helpers." } } ], "dependencies": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.8" } ] }