{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:51060ada-d8c1-5312-bc95-decd1becbf0e",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "astro",
      "purl": "pkg:npm/astro@2.10.15-tuxcare.2",
      "type": "library",
      "bom-ref": "pkg:npm/astro@2.10.15-tuxcare.2",
      "version": "2.10.15-tuxcare.2",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-56140",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c23cdf86-4b70-5bb8-b5ed-00fa801be81c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56140 is fixed in version 2.10.15-tuxcare.2 of astro."
      }
    },
    {
      "id": "CVE-2024-56159",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:77b16995-31ab-54ff-8ea5-19f6c2cfe10b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56159 is fixed in version 2.10.15-tuxcare.2 of astro."
      }
    },
    {
      "id": "CVE-2025-55303",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6ba0cd34-2b43-5cfa-b0c4-35f0414249b1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55303 is fixed in version 2.10.15-tuxcare.2 of astro."
      }
    },
    {
      "id": "CVE-2025-61925",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7b2298e5-bd24-5fd9-81cc-bbd9d3c5bb3b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61925 is fixed in version 2.10.15-tuxcare.2 of astro."
      }
    },
    {
      "id": "CVE-2025-64757",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8c372483-8f1e-504f-9561-36f2e50662ac",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64757 is fixed in version 2.10.15-tuxcare.2 of astro."
      }
    },
    {
      "id": "CVE-2025-64764",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:05dcb42b-00a6-5ea0-b833-9253cfb22058",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64764 is fixed in version 2.10.15-tuxcare.2 of astro."
      }
    },
    {
      "id": "CVE-2025-64765",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c984382a-1e29-55d0-8470-895e21704904",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64765 is fixed in version 2.10.15-tuxcare.2 of astro."
      }
    },
    {
      "id": "CVE-2025-65019",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c52f8ac4-9855-5319-8a72-0649c51a3f16",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-65019 is fixed in version 2.10.15-tuxcare.2 of astro."
      }
    },
    {
      "id": "CVE-2025-66202",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2d44b69b-ee3b-51c5-853f-376891e9d67e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66202 is fixed in version 2.10.15-tuxcare.2 of astro."
      }
    },
    {
      "id": "CVE-2026-33769",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7c08b39c-e443-562f-9cac-c8a4e6fcb09b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33769 is fixed in version 2.10.15-tuxcare.2 of astro."
      }
    },
    {
      "id": "CVE-2026-41067",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a41d13ea-2240-5732-8ec2-cc36eb9bd1ff",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41067 is fixed in version 2.10.15-tuxcare.2 of astro."
      }
    },
    {
      "id": "CVE-2026-45028",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0bdba72e-73f8-56f4-88aa-c846218eebb3",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-45028 does not affect version 2.10.15-tuxcare.2 of astro. not_affected \u2014 Astro version 2.10.14 is not affected by CVE-2026-45028. The server islands feature with encrypted parameter handling does not exist in this version. The vulnerability requires server islands (introduced in later versions) to be present, specifically the encryption/decryption of props and slots parameters via AES-GCM. Version 2.10.14 predates this feature entirely. While the repository contains...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-50146",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b20abe27-a2de-5661-b1cf-ecfbfe732f56",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50146 affects version 2.10.15-tuxcare.2 of astro, and is fixed in 2.10.15-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-54298",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e245d908-96ea-58eb-8570-405ab8fd62bf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54298 affects version 2.10.15-tuxcare.2 of astro, and is fixed in 2.10.15-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-54299",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b94dd0e6-9afd-5122-8d8d-69d8fd0ac841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54299 affects version 2.10.15-tuxcare.2 of astro, and is fixed in 2.10.15-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-59728",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e060d946-74a3-558b-8d48-067096feb36d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59728 affects version 2.10.15-tuxcare.2 of astro, and is fixed in 2.10.15-tuxcare.5."
      }
    },
    {
      "id": "CVE-2026-59729",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:cc4cbcd9-e1df-5df3-b910-bc20b0c3802a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59729 affects version 2.10.15-tuxcare.2 of astro."
      }
    },
    {
      "id": "CVE-2026-73422",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:54139806-49ee-5bf0-93ee-ad8c11fe93ae",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73422 affects version 2.10.15-tuxcare.2 of astro."
      }
    },
    {
      "id": "CVE-2026-84376",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:45ac8b2a-563c-543d-a59a-0c70e0877b3b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-84376 affects version 2.10.15-tuxcare.2 of astro."
      }
    },
    {
      "id": "GHSA-26w7-cxv4-gfx2",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:21acd61f-c6ad-56a8-932a-103a20e15ac1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 affects version 2.10.15-tuxcare.2 of astro."
      }
    },
    {
      "id": "GHSA-4g3v-8h47-v7g6",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1dc82f1d-c2ab-516c-af81-43929686a0dc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 affects version 2.10.15-tuxcare.2 of astro."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/astro@2.10.15-tuxcare.2"
    }
  ]
}