{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:030c8bb0-bfb1-5246-8f33-d9f19bdfa646", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@astrojs/internal-helpers", "purl": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.9", "type": "library", "bom-ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.9", "version": "2.10.15-tuxcare.9", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-56140", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:f752f2c3-7144-59ad-805e-2a1e0ad1944d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 2.10.15-tuxcare.9 of @astrojs/internal-helpers." } }, { "id": "CVE-2024-56159", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:0aab349d-fd5c-51b3-8616-54efd7033f33", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 2.10.15-tuxcare.9 of @astrojs/internal-helpers." } }, { "id": "CVE-2025-55303", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:4af36abb-b2da-519f-a02f-afd6d6000cee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55303 is fixed in version 2.10.15-tuxcare.9 of @astrojs/internal-helpers." } }, { "id": "CVE-2025-61925", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:5e7f2c78-0edb-5fc6-8459-79d47015b1e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 2.10.15-tuxcare.9 of @astrojs/internal-helpers." } }, { "id": "CVE-2025-64757", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:a37ce0ef-e728-536c-bb2f-e67e50b3c4fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 2.10.15-tuxcare.9 of @astrojs/internal-helpers." } }, { "id": "CVE-2025-64764", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:5393bb7c-9702-5e76-a273-f5ec88978b8c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 2.10.15-tuxcare.9 of @astrojs/internal-helpers." } }, { "id": "CVE-2025-64765", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:6b1434ac-d1a1-5ec4-9534-fd2aa122633a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 2.10.15-tuxcare.9 of @astrojs/internal-helpers." } }, { "id": "CVE-2025-65019", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:9e2784e9-5422-5ef3-9d31-4dd0e31e0ac5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 2.10.15-tuxcare.9 of @astrojs/internal-helpers." } }, { "id": "CVE-2025-66202", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:e3f83130-2bab-530e-aae5-27ec383c431d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 2.10.15-tuxcare.9 of @astrojs/internal-helpers." } }, { "id": "CVE-2026-33769", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:5dc1414b-1ec2-576c-bce6-64b608fd60c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 2.10.15-tuxcare.9 of @astrojs/internal-helpers." } }, { "id": "CVE-2026-41067", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:3c4c9c23-7c7e-575f-a534-c4c40c1c6811", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 2.10.15-tuxcare.9 of @astrojs/internal-helpers." } }, { "id": "CVE-2026-45028", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:89f5b059-c632-5344-b16f-7e8a7c521e61", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 2.10.15-tuxcare.9 of @astrojs/internal-helpers. not_affected \u2014 Astro version 2.10.14 is not affected by CVE-2026-45028. The server islands feature with encrypted parameter handling does not exist in this version. The vulnerability requires server islands (introduced in later versions) to be present, specifically the encryption/decryption of props and slots parameters via AES-GCM. Version 2.10.14 predates this feature entirely. While the repository contains...", "justification": "code_not_present" } }, { "id": "CVE-2026-50146", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:3ec884ca-fb8e-59de-845d-bea12fb5146d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 2.10.15-tuxcare.9 of @astrojs/internal-helpers." } }, { "id": "CVE-2026-54298", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:cd856711-a7e1-5089-99f0-3243139c4c10", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 2.10.15-tuxcare.9 of @astrojs/internal-helpers." } }, { "id": "CVE-2026-54299", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:1671fe7a-8c5e-575a-aa08-dceae0e27203", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 2.10.15-tuxcare.9 of @astrojs/internal-helpers." } }, { "id": "CVE-2026-59728", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:1c653c15-e435-5797-a47f-3c07749c553d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 2.10.15-tuxcare.9 of @astrojs/internal-helpers." } }, { "id": "CVE-2026-59729", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:0eb2a527-1290-57fa-8083-871a7c490a8e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59729 is fixed in version 2.10.15-tuxcare.9 of @astrojs/internal-helpers." } }, { "id": "CVE-2026-73422", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:90c1605b-0484-5d88-9925-62c9a0767429", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73422 is fixed in version 2.10.15-tuxcare.9 of @astrojs/internal-helpers." } }, { "id": "CVE-2026-84376", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:232333a4-915d-5634-9f3a-a236c75481e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-84376 is fixed in version 2.10.15-tuxcare.9 of @astrojs/internal-helpers." } }, { "id": "GHSA-26w7-cxv4-gfx2", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:8b58dbb5-f583-59ab-9474-48bb512a972d", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 is fixed in version 2.10.15-tuxcare.9 of @astrojs/internal-helpers." } }, { "id": "GHSA-4g3v-8h47-v7g6", "affects": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:87868a07-54df-5160-bf28-ca4e0e7c2eea", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 2.10.15-tuxcare.9 of @astrojs/internal-helpers." } } ], "dependencies": [ { "ref": "pkg:npm/%40astrojs/internal-helpers@2.10.15-tuxcare.9" } ] }