{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:85353d90-8930-5e23-be26-676f18cb2125", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "create-astro", "purl": "pkg:npm/create-astro@2.10.15-tuxcare.8", "type": "library", "bom-ref": "pkg:npm/create-astro@2.10.15-tuxcare.8", "version": "2.10.15-tuxcare.8", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-56140", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:6adf0c83-cc0e-5753-b8b6-b219d795fc6d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 2.10.15-tuxcare.8 of create-astro." } }, { "id": "CVE-2024-56159", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:2b090562-58bf-5d65-96b5-25485be2b9f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 2.10.15-tuxcare.8 of create-astro." } }, { "id": "CVE-2025-55303", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:44c7f04d-5ab8-5515-aa0e-004ef994be33", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55303 is fixed in version 2.10.15-tuxcare.8 of create-astro." } }, { "id": "CVE-2025-61925", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:eafa3b6e-b516-58fc-baba-9d83d3926ced", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 2.10.15-tuxcare.8 of create-astro." } }, { "id": "CVE-2025-64757", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:d3fdc6f0-a00f-5cc5-8662-abc2a56111b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 2.10.15-tuxcare.8 of create-astro." } }, { "id": "CVE-2025-64764", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:ce725db8-4555-54ce-9ffe-0bd2ba312456", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 2.10.15-tuxcare.8 of create-astro." } }, { "id": "CVE-2025-64765", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:3bc00bda-f5eb-5b06-b43d-08de3ce17e27", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 2.10.15-tuxcare.8 of create-astro." } }, { "id": "CVE-2025-65019", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:6520716f-e014-56e7-af09-bf896ebfc48f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 2.10.15-tuxcare.8 of create-astro." } }, { "id": "CVE-2025-66202", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:97100b09-79c5-51d5-9f30-731803a6632d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 2.10.15-tuxcare.8 of create-astro." } }, { "id": "CVE-2026-33769", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:3dbb683a-75f9-565c-8f8b-e9d75a09ce89", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 2.10.15-tuxcare.8 of create-astro." } }, { "id": "CVE-2026-41067", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:1c9d8392-54c0-5617-9d82-9893360ee8ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 2.10.15-tuxcare.8 of create-astro." } }, { "id": "CVE-2026-45028", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:3ea57b22-7299-5860-b080-f2b532ae0320", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 2.10.15-tuxcare.8 of create-astro. not_affected \u2014 Astro version 2.10.14 is not affected by CVE-2026-45028. The server islands feature with encrypted parameter handling does not exist in this version. The vulnerability requires server islands (introduced in later versions) to be present, specifically the encryption/decryption of props and slots parameters via AES-GCM. Version 2.10.14 predates this feature entirely. While the repository contains...", "justification": "code_not_present" } }, { "id": "CVE-2026-50146", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:ba56cabe-202e-5554-9169-d2b94ccae108", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 2.10.15-tuxcare.8 of create-astro." } }, { "id": "CVE-2026-54298", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:9351ac48-6218-579b-a27d-685a85bd97c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 2.10.15-tuxcare.8 of create-astro." } }, { "id": "CVE-2026-54299", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:57a9d575-f29b-5fa2-92d0-087268a137a7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 2.10.15-tuxcare.8 of create-astro." } }, { "id": "CVE-2026-59728", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:6deb69f5-458a-53f5-8265-7e96a0ee3ba6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 2.10.15-tuxcare.8 of create-astro." } }, { "id": "CVE-2026-59729", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:6946cb87-5144-52fa-8358-fec9b514bfe7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59729 is fixed in version 2.10.15-tuxcare.8 of create-astro." } }, { "id": "CVE-2026-73422", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:2cf608be-1de4-552b-8b55-b2833cebce3e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73422 is fixed in version 2.10.15-tuxcare.8 of create-astro." } }, { "id": "CVE-2026-84376", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:86f41d2d-6948-5be5-a9e1-436c43b70c16", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-84376 affects version 2.10.15-tuxcare.8 of create-astro, and is fixed in 2.10.15-tuxcare.9." } }, { "id": "GHSA-26w7-cxv4-gfx2", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:d01c6ac5-e7ed-5aca-9c4a-093f40abac98", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 affects version 2.10.15-tuxcare.8 of create-astro, and is fixed in 2.10.15-tuxcare.9." } }, { "id": "GHSA-4g3v-8h47-v7g6", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:5bbee045-1a54-57be-8380-75d7c70a80b8", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 2.10.15-tuxcare.8 of create-astro." } } ], "dependencies": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.8" } ] }