{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:1d45c4ec-523b-531f-87be-d4d3964a3fc1", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@astrojs/telemetry", "purl": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.9", "type": "library", "bom-ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.9", "version": "3.6.5-tuxcare.9", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-47885", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:2e304af1-06e3-53bf-a6a4-6cbff73c2ba9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47885 is fixed in version 3.6.5-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2024-56140", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:9db2e286-2491-5066-b58a-deef5f5c26df", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 3.6.5-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2024-56159", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:a2814b51-97ac-5c9c-95d1-58b385793c99", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 3.6.5-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2025-55303", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:a4b439d0-8072-550b-8621-bb6e9859530e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55303 is fixed in version 3.6.5-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2025-61925", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:c84fb634-d5fa-5279-aff5-04926d32e1bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 3.6.5-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2025-64525", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:29176ba7-d7fc-5032-b80e-1fb5d30dd58f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64525 is fixed in version 3.6.5-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2025-64757", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:c650b2db-39e0-5c79-845e-0b955abaf3a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 3.6.5-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2025-64764", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:172e94c5-8299-5823-a377-899166dc6bf0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 3.6.5-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2025-64765", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:b7e138e6-9d60-5f19-9f99-dc9a3036ed7f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 3.6.5-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2025-65019", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:1e8e7f92-8e56-5b9d-a9c6-ccb51bc9a90c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 3.6.5-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2025-66202", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:d1568eba-4fa6-5e61-87e0-b893693f7234", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 3.6.5-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2026-33769", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:b2bc7555-8334-596c-88d6-3e4a15ce2255", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 3.6.5-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2026-41067", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:c2903f5a-2dd0-5027-a7d6-85224eb8e24a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 3.6.5-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2026-45028", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:cd9beb14-f05b-5bf0-8b5d-4002d6a0783c", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 3.6.5-tuxcare.9 of @astrojs/telemetry. not_affected \u2014 Astro version 3.6.5 is NOT AFFECTED by CVE-2026-45028. The vulnerability concerns server islands encryption (AES-GCM ciphertext replay between props and slots), but server islands functionality does not exist in version 3.6.5. The feature was introduced in later versions (~May 2025, v5.x/6.x), and the vulnerability was fixed in v6.1.10 (April 2026). Exhaustive search across 327 source files con...", "justification": "code_not_present" } }, { "id": "CVE-2026-50146", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:d2bf1acc-4da5-5d99-a49a-630b70ad1cc5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 3.6.5-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2026-54298", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:72330982-0c96-58fa-80c2-71f73942db87", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 3.6.5-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2026-54299", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:e9566dab-8ae5-57af-a5f6-9595914d4c91", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 3.6.5-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2026-59728", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:7e8e2981-89d5-5f40-8225-2d98a54d7393", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 3.6.5-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2026-59729", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:8c0255f7-1496-5e9e-a41d-12b182252348", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59729 is fixed in version 3.6.5-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2026-73422", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:9f2f19ef-f53d-5365-9aae-b7fc927d1bb6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73422 is fixed in version 3.6.5-tuxcare.9 of @astrojs/telemetry." } }, { "id": "CVE-2026-84376", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:7aac1b85-6fc4-535d-ba6b-87859bb4335f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-84376 is fixed in version 3.6.5-tuxcare.9 of @astrojs/telemetry." } }, { "id": "GHSA-26w7-cxv4-gfx2", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:af71e0e9-491e-5ee6-be71-4851c85aca6c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 is fixed in version 3.6.5-tuxcare.9 of @astrojs/telemetry." } }, { "id": "GHSA-4g3v-8h47-v7g6", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:7f44aabf-c51d-54da-8ce5-0692b8330bfc", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 3.6.5-tuxcare.9 of @astrojs/telemetry." } } ], "dependencies": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.9" } ] }