{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:19e2d082-129b-52dc-a575-5bc61e499372", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "astro", "purl": "pkg:npm/astro@2.10.15-tuxcare.9", "type": "library", "bom-ref": "pkg:npm/astro@2.10.15-tuxcare.9", "version": "2.10.15-tuxcare.9", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-56140", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:6bded215-8ef8-5814-b4d1-3d996c2939fe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 2.10.15-tuxcare.9 of astro." } }, { "id": "CVE-2024-56159", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:ead41a7d-a88e-50c2-b80d-f6a5f859a0fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 2.10.15-tuxcare.9 of astro." } }, { "id": "CVE-2025-55303", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:4f0731e4-c0e4-5e05-91bd-cf47f2c40b43", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55303 is fixed in version 2.10.15-tuxcare.9 of astro." } }, { "id": "CVE-2025-61925", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:f973b41d-6fa8-54a7-97f7-720156b89fa3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 2.10.15-tuxcare.9 of astro." } }, { "id": "CVE-2025-64757", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:ac10624c-c4df-5ace-bad5-a6def0c71408", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 2.10.15-tuxcare.9 of astro." } }, { "id": "CVE-2025-64764", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:60b95e6b-a6fa-538b-8bfe-6352f15b4476", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 2.10.15-tuxcare.9 of astro." } }, { "id": "CVE-2025-64765", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:192d3bce-1172-57c6-a3d2-26cd6409618b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 2.10.15-tuxcare.9 of astro." } }, { "id": "CVE-2025-65019", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:1bcef8ea-7f13-5e85-8574-b704a32c0fee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 2.10.15-tuxcare.9 of astro." } }, { "id": "CVE-2025-66202", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:00155df2-4ca5-59d0-a031-84d90eb7ef8e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 2.10.15-tuxcare.9 of astro." } }, { "id": "CVE-2026-33769", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:f1cc766a-cf48-53f9-8dab-b56d9b6b9717", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 2.10.15-tuxcare.9 of astro." } }, { "id": "CVE-2026-41067", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:b1a5aa44-d32e-5e75-953a-95c97ac0a606", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 2.10.15-tuxcare.9 of astro." } }, { "id": "CVE-2026-45028", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:08bf7373-ab2d-5e5e-9c43-799aa41b685b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 2.10.15-tuxcare.9 of astro. not_affected \u2014 Astro version 2.10.14 is not affected by CVE-2026-45028. The server islands feature with encrypted parameter handling does not exist in this version. The vulnerability requires server islands (introduced in later versions) to be present, specifically the encryption/decryption of props and slots parameters via AES-GCM. Version 2.10.14 predates this feature entirely. While the repository contains...", "justification": "code_not_present" } }, { "id": "CVE-2026-50146", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:43ae4124-d0c3-52bd-bfcc-900f10294161", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 2.10.15-tuxcare.9 of astro." } }, { "id": "CVE-2026-54298", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:74662810-3bb2-5595-b127-40547fc9aca8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 2.10.15-tuxcare.9 of astro." } }, { "id": "CVE-2026-54299", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:05ec8f6d-f948-549e-bb55-05bb114b2845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 2.10.15-tuxcare.9 of astro." } }, { "id": "CVE-2026-59728", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:a6922c4f-2271-5b97-8533-2dbbac417558", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 2.10.15-tuxcare.9 of astro." } }, { "id": "CVE-2026-59729", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:91b1d3c0-1d2b-520a-a67b-9eee87c3feee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59729 is fixed in version 2.10.15-tuxcare.9 of astro." } }, { "id": "CVE-2026-73422", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:5647b8c8-390c-514d-9c6a-333df7f352c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73422 is fixed in version 2.10.15-tuxcare.9 of astro." } }, { "id": "CVE-2026-84376", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:34f8ccfc-ef8d-54ad-b23a-8021a860ea1d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-84376 is fixed in version 2.10.15-tuxcare.9 of astro." } }, { "id": "GHSA-26w7-cxv4-gfx2", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:92327b4b-dc94-571a-b9c7-a49ae021209d", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 is fixed in version 2.10.15-tuxcare.9 of astro." } }, { "id": "GHSA-4g3v-8h47-v7g6", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:e8c9ece8-6c70-588b-b64a-06112820ab07", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 2.10.15-tuxcare.9 of astro." } } ], "dependencies": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.9" } ] }