{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b765489f-5019-5cad-bf89-0909d1671e3b", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@astrojs/telemetry", "purl": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.9", "type": "library", "bom-ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.9", "version": "2.10.15-tuxcare.9", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-56140", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:85f95371-00c0-5991-ae60-d5da1ca14bf5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 2.10.15-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2024-56159", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:b736decb-faa5-5d63-9e37-7e5932d7f30c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 2.10.15-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2025-55303", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:5b44d250-ffc7-5232-aab7-a6ffc8263354", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55303 is fixed in version 2.10.15-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2025-61925", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:7aa45f8a-9b25-528b-b637-0ecd355f5455", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 2.10.15-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2025-64757", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:c5c28608-ad70-584b-a051-78e78d2c8638", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 2.10.15-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2025-64764", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:fed906c5-8624-5824-b603-f990458af6ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 2.10.15-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2025-64765", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:1917bd4c-6461-5a18-b807-ba6863961c0c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 2.10.15-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2025-65019", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:2bd9b15b-a85f-5d2a-90c9-25afbbb771ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 2.10.15-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2025-66202", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:f842fd0f-30cd-541b-95cb-68209347860d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 2.10.15-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2026-33769", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:c8d868ac-dcfb-5d97-85ec-ed682b8eb67d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 2.10.15-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2026-41067", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:a397be78-ce98-5b21-ac80-646b9827b1ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 2.10.15-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2026-45028", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:9b4d9956-3ed3-5a1f-bb05-9110512d63ff", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 2.10.15-tuxcare.9 of @astrojs/telemetry. not_affected \u2014 Astro version 2.10.14 is not affected by CVE-2026-45028. The server islands feature with encrypted parameter handling does not exist in this version. The vulnerability requires server islands (introduced in later versions) to be present, specifically the encryption/decryption of props and slots parameters via AES-GCM. Version 2.10.14 predates this feature entirely. While the repository contains...", "justification": "code_not_present" } }, { "id": "CVE-2026-50146", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:bfc4596a-5821-5a01-a907-b4af9181d07d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 2.10.15-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2026-54298", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:0ade8a9a-05b1-5635-80dd-80c21bd44237", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 2.10.15-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2026-54299", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:98bbcb99-96f1-5483-b10b-8194f5f174e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 2.10.15-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2026-59728", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:d43d5bb5-9709-5dda-a056-e6fb57d0d950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 2.10.15-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2026-59729", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:4f0aa8ca-f5d5-5956-94a9-7b1b5b5dacf6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59729 is fixed in version 2.10.15-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2026-73422", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:01403ba3-606d-5dcf-849a-5ecba4738cd7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73422 is fixed in version 2.10.15-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2026-84376", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:a86b6ce8-829b-5e02-9583-59727cb03854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-84376 is fixed in version 2.10.15-tuxcare.9 of @astrojs/telemetry." } }, { "id": "GHSA-26w7-cxv4-gfx2", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:04d46fb8-acc8-55ef-b912-aa64676ec441", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 is fixed in version 2.10.15-tuxcare.9 of @astrojs/telemetry." } }, { "id": "GHSA-4g3v-8h47-v7g6", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:f966ea52-5e9b-5dcc-be05-f6dda3869ce3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 2.10.15-tuxcare.9 of @astrojs/telemetry." } } ], "dependencies": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.9" } ] }