{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:272fc67c-c7f2-58dd-bc1a-f1690b7a749a", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@astrojs/prism", "purl": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.9", "type": "library", "bom-ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.9", "version": "2.10.15-tuxcare.9", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-56140", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:1a305584-5b7b-5d06-bd24-4f712ded98b5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 2.10.15-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2024-56159", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:4c6a184b-4a94-5f3c-a1ca-8c5384fd505d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 2.10.15-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2025-55303", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:6d9ce036-ae3a-54f8-9e01-36d5549f3187", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55303 is fixed in version 2.10.15-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2025-61925", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:f41ae059-06c2-536a-a315-2800c44344dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 2.10.15-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2025-64757", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:97a4c4a5-add3-5aa4-975d-b234ec55de95", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 2.10.15-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2025-64764", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:955f6304-3148-515a-805c-40a0f2f36d33", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 2.10.15-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2025-64765", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:a01b6dec-c267-581f-a4de-519e9cf9732c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 2.10.15-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2025-65019", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:edf0f21f-2ba9-5522-acdd-58eea84ce9d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 2.10.15-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2025-66202", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:cf64ac9b-b94d-5ca5-ad91-8e0764ad6af4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 2.10.15-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2026-33769", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:980fd2b2-57ff-5560-a427-97cb7e7a7874", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 2.10.15-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2026-41067", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:6b4c535a-bc9c-599c-ad02-e7a1fb047d00", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 2.10.15-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2026-45028", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:9c850fe4-d628-5314-8b1b-c0f72f09e227", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 2.10.15-tuxcare.9 of @astrojs/prism. not_affected \u2014 Astro version 2.10.14 is not affected by CVE-2026-45028. The server islands feature with encrypted parameter handling does not exist in this version. The vulnerability requires server islands (introduced in later versions) to be present, specifically the encryption/decryption of props and slots parameters via AES-GCM. Version 2.10.14 predates this feature entirely. While the repository contains...", "justification": "code_not_present" } }, { "id": "CVE-2026-50146", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:8352bab3-6c2c-5df2-b113-b3911f31f54c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 2.10.15-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2026-54298", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:98310907-b277-529b-9b49-1db15527c07b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 2.10.15-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2026-54299", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:e95e5df7-d5c1-5a96-9180-065c23e9a48b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 2.10.15-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2026-59728", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:211ad9bb-b677-570b-afc5-0c46ef3d2273", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 2.10.15-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2026-59729", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:e7eaa3cf-4b06-5c17-81e7-783202b542ba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59729 is fixed in version 2.10.15-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2026-73422", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:a34b6069-bf49-5152-9926-ac1aa5384b1a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73422 is fixed in version 2.10.15-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2026-84376", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:710e7f6a-8d7a-5466-acdc-48caa0db0cd9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-84376 is fixed in version 2.10.15-tuxcare.9 of @astrojs/prism." } }, { "id": "GHSA-26w7-cxv4-gfx2", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:c360eca0-194c-503c-bfc7-d137794c240e", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 is fixed in version 2.10.15-tuxcare.9 of @astrojs/prism." } }, { "id": "GHSA-4g3v-8h47-v7g6", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:4d529d91-889f-53d7-ba5e-6f4a88f8f4fc", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 2.10.15-tuxcare.9 of @astrojs/prism." } } ], "dependencies": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.9" } ] }