{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:618ac737-565d-5e40-8159-c733993d55ba",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@astrojs/internal-helpers",
      "purl": "pkg:npm/%40astrojs/internal-helpers@3.6.5-tuxcare.8",
      "type": "library",
      "bom-ref": "pkg:npm/%40astrojs/internal-helpers@3.6.5-tuxcare.8",
      "version": "3.6.5-tuxcare.8",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-47885",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/internal-helpers@3.6.5-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:fe0a75e2-5b05-5bc9-9363-83d41c382b97",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47885 is fixed in version 3.6.5-tuxcare.8 of @astrojs/internal-helpers."
      }
    },
    {
      "id": "CVE-2024-56140",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/internal-helpers@3.6.5-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:02db7357-0aa0-5b9f-bffa-107ab047811b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56140 is fixed in version 3.6.5-tuxcare.8 of @astrojs/internal-helpers."
      }
    },
    {
      "id": "CVE-2024-56159",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/internal-helpers@3.6.5-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:03925e37-a750-56df-93cd-3771ea2d0268",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56159 is fixed in version 3.6.5-tuxcare.8 of @astrojs/internal-helpers."
      }
    },
    {
      "id": "CVE-2025-55303",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/internal-helpers@3.6.5-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:66d98683-af5f-57eb-bb4c-3882354eeb24",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55303 is fixed in version 3.6.5-tuxcare.8 of @astrojs/internal-helpers."
      }
    },
    {
      "id": "CVE-2025-61925",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/internal-helpers@3.6.5-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:1da7f11d-4d01-5187-8dd5-0e73f7c0880b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61925 is fixed in version 3.6.5-tuxcare.8 of @astrojs/internal-helpers."
      }
    },
    {
      "id": "CVE-2025-64525",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/internal-helpers@3.6.5-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:16cfc670-a314-53a3-89a7-df3930a5e587",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64525 is fixed in version 3.6.5-tuxcare.8 of @astrojs/internal-helpers."
      }
    },
    {
      "id": "CVE-2025-64757",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/internal-helpers@3.6.5-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:e8a2e32f-8836-5fa8-8d54-5269cd6f8e97",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64757 is fixed in version 3.6.5-tuxcare.8 of @astrojs/internal-helpers."
      }
    },
    {
      "id": "CVE-2025-64764",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/internal-helpers@3.6.5-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:2ff5adac-e4f3-5ca5-a937-775659c09623",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64764 is fixed in version 3.6.5-tuxcare.8 of @astrojs/internal-helpers."
      }
    },
    {
      "id": "CVE-2025-64765",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/internal-helpers@3.6.5-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:780d2a9f-59a3-5610-85c9-e773ac3cdd82",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64765 is fixed in version 3.6.5-tuxcare.8 of @astrojs/internal-helpers."
      }
    },
    {
      "id": "CVE-2025-65019",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/internal-helpers@3.6.5-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:301c7258-ea8e-561e-a62f-ad0994474069",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-65019 is fixed in version 3.6.5-tuxcare.8 of @astrojs/internal-helpers."
      }
    },
    {
      "id": "CVE-2025-66202",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/internal-helpers@3.6.5-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:e87f4321-ca04-5420-a14f-941792d5ba05",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66202 is fixed in version 3.6.5-tuxcare.8 of @astrojs/internal-helpers."
      }
    },
    {
      "id": "CVE-2026-33769",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/internal-helpers@3.6.5-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:025eeff7-95ef-5664-a508-6286117bba02",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33769 is fixed in version 3.6.5-tuxcare.8 of @astrojs/internal-helpers."
      }
    },
    {
      "id": "CVE-2026-41067",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/internal-helpers@3.6.5-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:1f247bca-c1d4-5683-9105-7d52d0f11cd4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41067 is fixed in version 3.6.5-tuxcare.8 of @astrojs/internal-helpers."
      }
    },
    {
      "id": "CVE-2026-45028",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/internal-helpers@3.6.5-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:5aaa40a1-b753-555c-8407-358b57f5abe2",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-45028 does not affect version 3.6.5-tuxcare.8 of @astrojs/internal-helpers. not_affected \u2014 Astro version 3.6.5 is NOT AFFECTED by CVE-2026-45028. The vulnerability concerns server islands encryption (AES-GCM ciphertext replay between props and slots), but server islands functionality does not exist in version 3.6.5. The feature was introduced in later versions (~May 2025, v5.x/6.x), and the vulnerability was fixed in v6.1.10 (April 2026). Exhaustive search across 327 source files con...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-50146",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/internal-helpers@3.6.5-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:abc2b8c8-9244-5057-a40f-cd6e4f62bce3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50146 is fixed in version 3.6.5-tuxcare.8 of @astrojs/internal-helpers."
      }
    },
    {
      "id": "CVE-2026-54298",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/internal-helpers@3.6.5-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:7b547ddd-c423-5a94-a4d0-9211e927b539",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54298 is fixed in version 3.6.5-tuxcare.8 of @astrojs/internal-helpers."
      }
    },
    {
      "id": "CVE-2026-54299",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/internal-helpers@3.6.5-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:2c06bd79-510d-5c33-9a34-44e5a0201fb0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54299 is fixed in version 3.6.5-tuxcare.8 of @astrojs/internal-helpers."
      }
    },
    {
      "id": "CVE-2026-59728",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/internal-helpers@3.6.5-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:6f367157-2812-5e9b-a9e3-ea1fb9df9589",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59728 is fixed in version 3.6.5-tuxcare.8 of @astrojs/internal-helpers."
      }
    },
    {
      "id": "CVE-2026-59729",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/internal-helpers@3.6.5-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:cd745ac7-5b1e-5861-b09b-956e931e51fa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59729 is fixed in version 3.6.5-tuxcare.8 of @astrojs/internal-helpers."
      }
    },
    {
      "id": "CVE-2026-73422",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/internal-helpers@3.6.5-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:39210933-b5f9-50f0-9003-0ff1d19ea48a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73422 is fixed in version 3.6.5-tuxcare.8 of @astrojs/internal-helpers."
      }
    },
    {
      "id": "CVE-2026-84376",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/internal-helpers@3.6.5-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:52f9b41b-a05c-59de-bcd6-daef773aee60",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-84376 affects version 3.6.5-tuxcare.8 of @astrojs/internal-helpers, and is fixed in 3.6.5-tuxcare.9."
      }
    },
    {
      "id": "GHSA-26w7-cxv4-gfx2",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/internal-helpers@3.6.5-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:16ebdfa6-860c-501f-a9a7-1b897ec2ab09",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 affects version 3.6.5-tuxcare.8 of @astrojs/internal-helpers, and is fixed in 3.6.5-tuxcare.9."
      }
    },
    {
      "id": "GHSA-4g3v-8h47-v7g6",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/internal-helpers@3.6.5-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:e3552fad-0599-5d68-8890-b3a1fb3aa5a2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 3.6.5-tuxcare.8 of @astrojs/internal-helpers."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40astrojs/internal-helpers@3.6.5-tuxcare.8"
    }
  ]
}