{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:d02d3a8b-196b-5e59-8925-36f17946c8c5", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "create-astro", "purl": "pkg:npm/create-astro@2.10.15-tuxcare.9", "type": "library", "bom-ref": "pkg:npm/create-astro@2.10.15-tuxcare.9", "version": "2.10.15-tuxcare.9", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-56140", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:5e7cd30b-c189-56b8-80a0-f59a532ee148", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 2.10.15-tuxcare.9 of create-astro." } }, { "id": "CVE-2024-56159", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:21669aea-374b-52ed-8b99-3002512df0d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 2.10.15-tuxcare.9 of create-astro." } }, { "id": "CVE-2025-55303", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:3063e046-161a-5ce4-82a3-790373682116", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55303 is fixed in version 2.10.15-tuxcare.9 of create-astro." } }, { "id": "CVE-2025-61925", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:ea63daee-1bb9-5d99-8f87-1f06d0579944", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 2.10.15-tuxcare.9 of create-astro." } }, { "id": "CVE-2025-64757", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:7f6cdc3b-528e-500d-bc32-d0b6d9d1cd7a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 2.10.15-tuxcare.9 of create-astro." } }, { "id": "CVE-2025-64764", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:a38b770b-4cc5-50ed-8da4-2ccc8994c970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 2.10.15-tuxcare.9 of create-astro." } }, { "id": "CVE-2025-64765", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:c45ec92c-7221-5676-88d6-76ae7fe170f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 2.10.15-tuxcare.9 of create-astro." } }, { "id": "CVE-2025-65019", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:2f90d5fb-b3c4-568f-b7c5-ffead26e7bbb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 2.10.15-tuxcare.9 of create-astro." } }, { "id": "CVE-2025-66202", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:0318384f-d937-5051-9928-b12cbfbac64b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 2.10.15-tuxcare.9 of create-astro." } }, { "id": "CVE-2026-33769", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:603459b9-9d4b-5617-ad51-3565ff313ca0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 2.10.15-tuxcare.9 of create-astro." } }, { "id": "CVE-2026-41067", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:e241927e-ad3b-5118-9fb1-0d8495501906", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 2.10.15-tuxcare.9 of create-astro." } }, { "id": "CVE-2026-45028", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:fe95294f-0e09-59f5-b916-b07ea3e0b35b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 2.10.15-tuxcare.9 of create-astro. not_affected \u2014 Astro version 2.10.14 is not affected by CVE-2026-45028. The server islands feature with encrypted parameter handling does not exist in this version. The vulnerability requires server islands (introduced in later versions) to be present, specifically the encryption/decryption of props and slots parameters via AES-GCM. Version 2.10.14 predates this feature entirely. While the repository contains...", "justification": "code_not_present" } }, { "id": "CVE-2026-50146", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:73da8a47-16ca-5b13-bb47-105a0ad6835b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 2.10.15-tuxcare.9 of create-astro." } }, { "id": "CVE-2026-54298", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:af61d899-dca4-5ff5-810f-f855a0b0f603", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 2.10.15-tuxcare.9 of create-astro." } }, { "id": "CVE-2026-54299", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:372ba5f6-b8fc-5fc6-950e-af4dd1e7e933", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 2.10.15-tuxcare.9 of create-astro." } }, { "id": "CVE-2026-59728", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:f765b2f6-1c2c-521f-87d6-18a49470d031", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 2.10.15-tuxcare.9 of create-astro." } }, { "id": "CVE-2026-59729", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:bea307b9-b003-5773-b3bc-813cfef396d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59729 is fixed in version 2.10.15-tuxcare.9 of create-astro." } }, { "id": "CVE-2026-73422", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:9eda3e46-a694-593d-9c7c-64ac8aac6bae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73422 is fixed in version 2.10.15-tuxcare.9 of create-astro." } }, { "id": "CVE-2026-84376", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:2146f33d-9e80-5cb3-9346-3a145d4aaff0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-84376 is fixed in version 2.10.15-tuxcare.9 of create-astro." } }, { "id": "GHSA-26w7-cxv4-gfx2", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:77e81462-bbc0-5b0e-aef7-171869ab6386", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 is fixed in version 2.10.15-tuxcare.9 of create-astro." } }, { "id": "GHSA-4g3v-8h47-v7g6", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.9" } ], "bom-ref": "urn:uuid:d4b15689-45e1-5289-bc57-998c1e4dd649", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 2.10.15-tuxcare.9 of create-astro." } } ], "dependencies": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.9" } ] }