{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:361879a2-706f-51bc-9e78-4a6da131d5b8", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "astro", "purl": "pkg:npm/astro@3.6.5-tuxcare.9", "type": "library", "bom-ref": "pkg:npm/astro@3.6.5-tuxcare.9", "version": "3.6.5-tuxcare.9", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-47885", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:47bb141d-63f4-52dc-bfe4-a370531abfc3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47885 is fixed in version 3.6.5-tuxcare.9 of astro." } }, { "id": "CVE-2024-56140", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:4c715942-ed04-579c-9d1b-f6d9d1672029", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 3.6.5-tuxcare.9 of astro." } }, { "id": "CVE-2024-56159", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:1b039932-472a-56e2-82cf-9dd615843dab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 3.6.5-tuxcare.9 of astro." } }, { "id": "CVE-2025-55303", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:00e2d116-8f73-5c58-8c8b-a4dc6cee0bba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55303 is fixed in version 3.6.5-tuxcare.9 of astro." } }, { "id": "CVE-2025-61925", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:5dbacd1e-9338-565a-895f-49db9328c1fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 3.6.5-tuxcare.9 of astro." } }, { "id": "CVE-2025-64525", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:c118d0ab-38d7-5ec4-aa16-9a1b64b3f345", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64525 is fixed in version 3.6.5-tuxcare.9 of astro." } }, { "id": "CVE-2025-64757", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:2699cc3d-ca13-5580-a48b-c49ced3f9be6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 3.6.5-tuxcare.9 of astro." } }, { "id": "CVE-2025-64764", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:cfc1c6f0-85cb-5e6d-bac9-f653cf6fc1b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 3.6.5-tuxcare.9 of astro." } }, { "id": "CVE-2025-64765", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:46ff7923-2914-5841-aa76-319076274f00", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 3.6.5-tuxcare.9 of astro." } }, { "id": "CVE-2025-65019", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:2d9bf42d-6729-51c7-8a91-7b58b5a7c1ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 3.6.5-tuxcare.9 of astro." } }, { "id": "CVE-2025-66202", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:188998b9-1e68-5145-b1cd-08da0d6e5c86", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 3.6.5-tuxcare.9 of astro." } }, { "id": "CVE-2026-33769", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:2419d47d-677a-56b2-b448-ef191dcfa402", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 3.6.5-tuxcare.9 of astro." } }, { "id": "CVE-2026-41067", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:5c057ec0-d7e6-5fa8-aaf2-e5795d2b510c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 3.6.5-tuxcare.9 of astro." } }, { "id": "CVE-2026-45028", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:563dc1f0-cabe-5083-93d1-6083f24a515e", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 3.6.5-tuxcare.9 of astro. not_affected \u2014 Astro version 3.6.5 is NOT AFFECTED by CVE-2026-45028. The vulnerability concerns server islands encryption (AES-GCM ciphertext replay between props and slots), but server islands functionality does not exist in version 3.6.5. The feature was introduced in later versions (~May 2025, v5.x/6.x), and the vulnerability was fixed in v6.1.10 (April 2026). Exhaustive search across 327 source files con...", "justification": "code_not_present" } }, { "id": "CVE-2026-50146", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:440f417b-64a0-5a6e-a5f8-fb6a74fac433", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 3.6.5-tuxcare.9 of astro." } }, { "id": "CVE-2026-54298", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:a113334c-17cf-5ede-b7c2-1f59ca8b23fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 3.6.5-tuxcare.9 of astro." } }, { "id": "CVE-2026-54299", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:9fd4732d-427d-5a7a-9bb7-38eefb94cc16", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 3.6.5-tuxcare.9 of astro." } }, { "id": "CVE-2026-59728", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:4294664c-cd73-5c90-94e5-98d87e681c9c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 3.6.5-tuxcare.9 of astro." } }, { "id": "CVE-2026-59729", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:67ded524-76d1-5759-90d4-5a43c0c69dfe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59729 is fixed in version 3.6.5-tuxcare.9 of astro." } }, { "id": "CVE-2026-73422", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:08bc115f-2206-5c36-a246-165bb2c3f3f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73422 is fixed in version 3.6.5-tuxcare.9 of astro." } }, { "id": "CVE-2026-84376", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:71775a7d-7998-5bcb-b233-b72fc69583e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-84376 is fixed in version 3.6.5-tuxcare.9 of astro." } }, { "id": "GHSA-26w7-cxv4-gfx2", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:5c744904-544c-5c81-9b5d-992501ba3e45", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 is fixed in version 3.6.5-tuxcare.9 of astro." } }, { "id": "GHSA-4g3v-8h47-v7g6", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:684a0b36-cc12-5c95-9851-62b5981a2017", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 3.6.5-tuxcare.9 of astro." } } ], "dependencies": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.9" } ] }