{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:7b3c1abe-486f-5e9f-9fd2-930b756c9000", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@astrojs/rss", "purl": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.9", "type": "library", "bom-ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.9", "version": "2.10.15-tuxcare.9", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-56140", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:b66035b2-41b3-5c8f-8c72-597925f501e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 2.10.15-tuxcare.9 of @astrojs/rss." } }, { "id": "CVE-2024-56159", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:b414d517-d840-5c25-a13b-95254b3d4e85", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 2.10.15-tuxcare.9 of @astrojs/rss." } }, { "id": "CVE-2025-55303", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:1147f7dd-57b5-534d-999c-2fc42702ee01", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55303 is fixed in version 2.10.15-tuxcare.9 of @astrojs/rss." } }, { "id": "CVE-2025-61925", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:5cb0905f-c681-56bb-8edb-28b704be4cfb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 2.10.15-tuxcare.9 of @astrojs/rss." } }, { "id": "CVE-2025-64757", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:9847d5a9-ad3b-5f76-a581-679846316a0d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 2.10.15-tuxcare.9 of @astrojs/rss." } }, { "id": "CVE-2025-64764", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:74380e3d-c2f1-54bf-b60d-b415c684a761", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 2.10.15-tuxcare.9 of @astrojs/rss." } }, { "id": "CVE-2025-64765", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:8d3cf39b-c4e8-5ad4-bcb7-e0d6f69855b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 2.10.15-tuxcare.9 of @astrojs/rss." } }, { "id": "CVE-2025-65019", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:9378fa42-9c09-567d-ab23-6c8b11fe4588", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 2.10.15-tuxcare.9 of @astrojs/rss." } }, { "id": "CVE-2025-66202", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:4909e762-eddd-5d80-8926-b612812e62e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 2.10.15-tuxcare.9 of @astrojs/rss." } }, { "id": "CVE-2026-33769", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:2ffd336d-08c6-5e2a-9c18-31ab7e637abe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 2.10.15-tuxcare.9 of @astrojs/rss." } }, { "id": "CVE-2026-41067", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:19bfa69e-37f2-5fb4-8dc7-9e89feb6548a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 2.10.15-tuxcare.9 of @astrojs/rss." } }, { "id": "CVE-2026-45028", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:d4dbba00-cd62-53d2-b155-07bc24bd71a1", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 2.10.15-tuxcare.9 of @astrojs/rss. not_affected \u2014 Astro version 2.10.14 is not affected by CVE-2026-45028. The server islands feature with encrypted parameter handling does not exist in this version. The vulnerability requires server islands (introduced in later versions) to be present, specifically the encryption/decryption of props and slots parameters via AES-GCM. Version 2.10.14 predates this feature entirely. While the repository contains...", "justification": "code_not_present" } }, { "id": "CVE-2026-50146", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:4081cbcf-72d3-5b0a-ae1f-4d82bd880232", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 2.10.15-tuxcare.9 of @astrojs/rss." } }, { "id": "CVE-2026-54298", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:bfd9a563-e4e3-58f7-99d1-c05c42bec9db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 2.10.15-tuxcare.9 of @astrojs/rss." } }, { "id": "CVE-2026-54299", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:a29e141d-1911-5678-a43a-a62d1d4f0c30", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 2.10.15-tuxcare.9 of @astrojs/rss." } }, { "id": "CVE-2026-59728", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:8da5aa77-2219-5b66-98c4-f145e1846dd5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 2.10.15-tuxcare.9 of @astrojs/rss." } }, { "id": "CVE-2026-59729", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:8797a2ac-bd8c-57a3-857e-02f7dd4a82f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59729 is fixed in version 2.10.15-tuxcare.9 of @astrojs/rss." } }, { "id": "CVE-2026-73422", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:6270db90-1a1a-5831-b83d-7e5adabaa7d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73422 is fixed in version 2.10.15-tuxcare.9 of @astrojs/rss." } }, { "id": "CVE-2026-84376", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:fc1f3ded-6058-55f8-b409-2b7f7e554d4c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-84376 is fixed in version 2.10.15-tuxcare.9 of @astrojs/rss." } }, { "id": "GHSA-26w7-cxv4-gfx2", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:2616b54a-90a4-5853-a608-493b8f026f0d", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 is fixed in version 2.10.15-tuxcare.9 of @astrojs/rss." } }, { "id": "GHSA-4g3v-8h47-v7g6", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:28583cb0-b2e9-5808-8c4e-04680991e30c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 2.10.15-tuxcare.9 of @astrojs/rss." } } ], "dependencies": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.9" } ] }