{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:4e67d4ad-4aab-5954-9e5f-967dd2be42e2", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "create-astro", "purl": "pkg:npm/create-astro@3.6.5-tuxcare.9", "type": "library", "bom-ref": "pkg:npm/create-astro@3.6.5-tuxcare.9", "version": "3.6.5-tuxcare.9", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-47885", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:4cbd8061-0250-5749-b014-be8103b77597", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47885 is fixed in version 3.6.5-tuxcare.9 of create-astro." } }, { "id": "CVE-2024-56140", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:66985426-efb3-5c9b-a8d9-e2fa40346f90", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 3.6.5-tuxcare.9 of create-astro." } }, { "id": "CVE-2024-56159", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:d02c8717-ac80-5b5d-9b2e-74658642c448", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 3.6.5-tuxcare.9 of create-astro." } }, { "id": "CVE-2025-55303", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:75cfb01a-9e53-5174-8f59-6968a93b08f3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55303 is fixed in version 3.6.5-tuxcare.9 of create-astro." } }, { "id": "CVE-2025-61925", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:75ac6b6b-6aa9-53a0-81a3-a834bbb1a05e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 3.6.5-tuxcare.9 of create-astro." } }, { "id": "CVE-2025-64525", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:c1d9b5f8-7abe-52f1-ad09-e57b0f83f793", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64525 is fixed in version 3.6.5-tuxcare.9 of create-astro." } }, { "id": "CVE-2025-64757", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:ab594bcc-79ab-53b1-98ff-08c088117ef3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 3.6.5-tuxcare.9 of create-astro." } }, { "id": "CVE-2025-64764", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:994401db-8dca-5218-a0a7-a322f3e6ae9b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 3.6.5-tuxcare.9 of create-astro." } }, { "id": "CVE-2025-64765", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:0e0154ee-c358-5c34-a6df-8f7ac7d45ae6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 3.6.5-tuxcare.9 of create-astro." } }, { "id": "CVE-2025-65019", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:03b17e8a-86dd-550a-9d85-95465f1aba12", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 3.6.5-tuxcare.9 of create-astro." } }, { "id": "CVE-2025-66202", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:d48f2bed-5174-51f6-82fa-728972d8f2cf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 3.6.5-tuxcare.9 of create-astro." } }, { "id": "CVE-2026-33769", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:15a9848d-8c62-5d08-bd5d-e1d55de534a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 3.6.5-tuxcare.9 of create-astro." } }, { "id": "CVE-2026-41067", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:34230e09-d9a3-51c1-85ae-9707989483ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 3.6.5-tuxcare.9 of create-astro." } }, { "id": "CVE-2026-45028", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:f9cb2c04-567b-53ef-a8fc-546f1d5fe5f2", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 3.6.5-tuxcare.9 of create-astro. not_affected \u2014 Astro version 3.6.5 is NOT AFFECTED by CVE-2026-45028. The vulnerability concerns server islands encryption (AES-GCM ciphertext replay between props and slots), but server islands functionality does not exist in version 3.6.5. The feature was introduced in later versions (~May 2025, v5.x/6.x), and the vulnerability was fixed in v6.1.10 (April 2026). Exhaustive search across 327 source files con...", "justification": "code_not_present" } }, { "id": "CVE-2026-50146", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:e809cb06-a18c-5604-bfc1-1f336035ffca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 3.6.5-tuxcare.9 of create-astro." } }, { "id": "CVE-2026-54298", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:84c6fd60-f8bc-5b4b-a14f-d3338381f0ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 3.6.5-tuxcare.9 of create-astro." } }, { "id": "CVE-2026-54299", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:04e7ab04-a067-5175-b1bb-6b6acc956cd6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 3.6.5-tuxcare.9 of create-astro." } }, { "id": "CVE-2026-59728", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:069d5b3c-01b6-592e-adb0-196bc047b483", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 3.6.5-tuxcare.9 of create-astro." } }, { "id": "CVE-2026-59729", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:df4f8301-3da0-58e6-b60e-38c368e876ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59729 is fixed in version 3.6.5-tuxcare.9 of create-astro." } }, { "id": "CVE-2026-73422", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:d8face1f-aa87-53e1-9bbd-cfe86bba138b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73422 is fixed in version 3.6.5-tuxcare.9 of create-astro." } }, { "id": "CVE-2026-84376", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:09bc8032-8fd9-570d-bf0a-6ba561cc3ba2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-84376 is fixed in version 3.6.5-tuxcare.9 of create-astro." } }, { "id": "GHSA-26w7-cxv4-gfx2", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:45f54afd-ab46-57ef-8493-3345d8c2ccb3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 is fixed in version 3.6.5-tuxcare.9 of create-astro." } }, { "id": "GHSA-4g3v-8h47-v7g6", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.9" } ], "bom-ref": "urn:uuid:63cf0b0f-d218-5225-b7eb-9a19045293ef", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 3.6.5-tuxcare.9 of create-astro." } } ], "dependencies": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.9" } ] }