{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:cf54cc7b-7977-5072-bd29-5d1bde40ea2e", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@astrojs/webapi", "purl": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.9", "type": "library", "bom-ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.9", "version": "2.10.15-tuxcare.9", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-56140", "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:dca7d538-10a4-5099-a14f-d14e9e2640b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 2.10.15-tuxcare.9 of @astrojs/webapi." } }, { "id": "CVE-2024-56159", "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:c3079253-5f49-55d9-92e7-8b6a61d81d37", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 2.10.15-tuxcare.9 of @astrojs/webapi." } }, { "id": "CVE-2025-55303", "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:d1499a42-7e7d-5877-931a-93bfad727156", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55303 is fixed in version 2.10.15-tuxcare.9 of @astrojs/webapi." } }, { "id": "CVE-2025-61925", "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:17cb6541-ba49-5a00-8a32-9fd08337b017", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 2.10.15-tuxcare.9 of @astrojs/webapi." } }, { "id": "CVE-2025-64757", "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:4446ba0f-f517-55e5-8128-7d7989fdf6c3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 2.10.15-tuxcare.9 of @astrojs/webapi." } }, { "id": "CVE-2025-64764", "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:f846b779-b232-5373-a7fa-12357e0158ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 2.10.15-tuxcare.9 of @astrojs/webapi." } }, { "id": "CVE-2025-64765", "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:a92f1f25-934f-5f83-87f9-83117dec71fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 2.10.15-tuxcare.9 of @astrojs/webapi." } }, { "id": "CVE-2025-65019", "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:d2ece099-6038-5d69-b4a4-33e8c3094c0c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 2.10.15-tuxcare.9 of @astrojs/webapi." } }, { "id": "CVE-2025-66202", "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:f7d56d9e-4f89-5ee9-a726-ee845ae7edef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 2.10.15-tuxcare.9 of @astrojs/webapi." } }, { "id": "CVE-2026-33769", "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:4acacec2-81ec-5ce2-b93f-728d3bbe0150", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 2.10.15-tuxcare.9 of @astrojs/webapi." } }, { "id": "CVE-2026-41067", "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:90748648-4dd3-596d-8aa9-15fee6c7e880", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 2.10.15-tuxcare.9 of @astrojs/webapi." } }, { "id": "CVE-2026-45028", "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:0e7dd8ac-519c-5af0-9e88-ce10c4f4ca01", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 2.10.15-tuxcare.9 of @astrojs/webapi. not_affected \u2014 Astro version 2.10.14 is not affected by CVE-2026-45028. The server islands feature with encrypted parameter handling does not exist in this version. The vulnerability requires server islands (introduced in later versions) to be present, specifically the encryption/decryption of props and slots parameters via AES-GCM. Version 2.10.14 predates this feature entirely. While the repository contains...", "justification": "code_not_present" } }, { "id": "CVE-2026-50146", "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:c93a755b-c2a0-5174-933b-8b990d927610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 2.10.15-tuxcare.9 of @astrojs/webapi." } }, { "id": "CVE-2026-54298", "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:ff61130f-dca0-5d6f-86ee-4d56170bb317", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 2.10.15-tuxcare.9 of @astrojs/webapi." } }, { "id": "CVE-2026-54299", "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:4ff2cf06-6448-51a2-bacf-3a0f025d7f75", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 2.10.15-tuxcare.9 of @astrojs/webapi." } }, { "id": "CVE-2026-59728", "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:5e6dc59e-0083-518d-a3e8-1ecad4eccafb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 2.10.15-tuxcare.9 of @astrojs/webapi." } }, { "id": "CVE-2026-59729", "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:9141e3a2-5351-57b9-8fb0-3cd8340348a2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59729 is fixed in version 2.10.15-tuxcare.9 of @astrojs/webapi." } }, { "id": "CVE-2026-73422", "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:39958c23-11ca-5231-88fe-061e783f247c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73422 is fixed in version 2.10.15-tuxcare.9 of @astrojs/webapi." } }, { "id": "CVE-2026-84376", "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:3b87a51c-3a04-5b1e-87f5-683fc37d1641", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-84376 is fixed in version 2.10.15-tuxcare.9 of @astrojs/webapi." } }, { "id": "GHSA-26w7-cxv4-gfx2", "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:cbefe060-07cd-5a74-855d-b2ec92e416c8", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 is fixed in version 2.10.15-tuxcare.9 of @astrojs/webapi." } }, { "id": "GHSA-4g3v-8h47-v7g6", "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:cac9b0e2-303d-5283-95c7-9bfc4613e74d", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 2.10.15-tuxcare.9 of @astrojs/webapi." } } ], "dependencies": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.9" } ] }