{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:7487b528-bfa0-5390-bc0b-265e2e434b15", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@astrojs/prism", "purl": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.9", "type": "library", "bom-ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.9", "version": "3.6.5-tuxcare.9", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-47885", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:f603286d-ccd5-505b-a219-2949683bd01b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47885 is fixed in version 3.6.5-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2024-56140", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:f880143b-7ab6-5864-b174-e6065030d862", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 3.6.5-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2024-56159", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:52f6e147-3fab-5a84-b658-b302a49d724c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 3.6.5-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2025-55303", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:64d8b2d7-5daf-5546-af91-9dff9cecd241", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55303 is fixed in version 3.6.5-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2025-61925", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:9036dc0a-260c-56df-9738-539cf7c9a287", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 3.6.5-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2025-64525", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:f648063f-b7a7-5430-871f-aa8247ca6194", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64525 is fixed in version 3.6.5-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2025-64757", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:a6b8e9e5-0d07-5ea2-81b4-1840c8b08e76", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 3.6.5-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2025-64764", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:9d589e4d-e3e8-518e-b303-ee3264e212e5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 3.6.5-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2025-64765", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:7fd3035d-149a-5e42-8473-c22d55827d41", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 3.6.5-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2025-65019", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:2a9b5abb-0ebb-572f-b569-bb3c89d16aef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 3.6.5-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2025-66202", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:3665ddf2-164a-59c5-a65d-afa325c80745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 3.6.5-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2026-33769", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:0ce99103-8e13-5ec3-855b-da7bc072581d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 3.6.5-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2026-41067", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:42390269-a2b7-51bd-8bba-5f0550864d04", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 3.6.5-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2026-45028", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:e9535eec-4d10-564a-b58a-2661da6522eb", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 3.6.5-tuxcare.9 of @astrojs/prism. not_affected \u2014 Astro version 3.6.5 is NOT AFFECTED by CVE-2026-45028. The vulnerability concerns server islands encryption (AES-GCM ciphertext replay between props and slots), but server islands functionality does not exist in version 3.6.5. The feature was introduced in later versions (~May 2025, v5.x/6.x), and the vulnerability was fixed in v6.1.10 (April 2026). Exhaustive search across 327 source files con...", "justification": "code_not_present" } }, { "id": "CVE-2026-50146", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:bfbf16ce-9d25-5bf6-9828-bedbdf817294", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 3.6.5-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2026-54298", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:541c94cc-6eb3-5b67-acad-6632a3139c38", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 3.6.5-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2026-54299", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:1685c45c-58d5-52ec-952e-6a36697b2768", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 3.6.5-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2026-59728", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:569d664a-da65-5198-b1c9-a82cf164597d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 3.6.5-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2026-59729", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:56b232f8-0ab8-5c0b-864d-71ec670250fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59729 is fixed in version 3.6.5-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2026-73422", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:ab29f202-cda7-5c3d-aa4f-2d50859b3b66", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73422 is fixed in version 3.6.5-tuxcare.9 of @astrojs/prism." } }, { "id": "CVE-2026-84376", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:6c17cd80-4619-51ac-8eb0-c3cd18109abb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-84376 is fixed in version 3.6.5-tuxcare.9 of @astrojs/prism." } }, { "id": "GHSA-26w7-cxv4-gfx2", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:4fc49c93-0abf-543d-9989-fe5a37112b3d", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 is fixed in version 3.6.5-tuxcare.9 of @astrojs/prism." } }, { "id": "GHSA-4g3v-8h47-v7g6", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:f0fa36f0-19a0-5888-9a92-191d6124da92", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 3.6.5-tuxcare.9 of @astrojs/prism." } } ], "dependencies": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.9" } ] }