{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:532994ab-f3ed-5e4e-beea-b75bed9de437", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "astro", "purl": "pkg:npm/astro@2.10.15-tuxcare.5", "type": "library", "bom-ref": "pkg:npm/astro@2.10.15-tuxcare.5", "version": "2.10.15-tuxcare.5", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-56140", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.5" } ], "bom-ref": "urn:uuid:13db30c3-5c7c-558e-b880-cb0212ecbd12", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 2.10.15-tuxcare.5 of astro." } }, { "id": "CVE-2024-56159", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.5" } ], "bom-ref": "urn:uuid:215f208d-f0dd-55f1-b44c-6580dd8f2b9b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 2.10.15-tuxcare.5 of astro." } }, { "id": "CVE-2025-55303", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.5" } ], "bom-ref": "urn:uuid:090709d5-c897-5307-8483-8da735d2475b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55303 is fixed in version 2.10.15-tuxcare.5 of astro." } }, { "id": "CVE-2025-61925", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.5" } ], "bom-ref": "urn:uuid:a4b193e6-0963-5b5d-8c51-fe34f6959f5a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 2.10.15-tuxcare.5 of astro." } }, { "id": "CVE-2025-64757", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.5" } ], "bom-ref": "urn:uuid:dafdbf85-56c0-5260-8a70-220c23d1aae4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 2.10.15-tuxcare.5 of astro." } }, { "id": "CVE-2025-64764", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.5" } ], "bom-ref": "urn:uuid:bbe9076b-1d49-5279-9974-8e8bbcd3a404", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 2.10.15-tuxcare.5 of astro." } }, { "id": "CVE-2025-64765", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.5" } ], "bom-ref": "urn:uuid:199faaeb-5526-59bc-b94b-7f3727cbe13f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 2.10.15-tuxcare.5 of astro." } }, { "id": "CVE-2025-65019", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.5" } ], "bom-ref": "urn:uuid:911f6781-cac6-5ec7-892b-2e7fbb2b0c52", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 2.10.15-tuxcare.5 of astro." } }, { "id": "CVE-2025-66202", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.5" } ], "bom-ref": "urn:uuid:4a056937-24b5-5570-8d01-3dccb67b1a41", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 2.10.15-tuxcare.5 of astro." } }, { "id": "CVE-2026-33769", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.5" } ], "bom-ref": "urn:uuid:57ddf2a9-3885-5ed0-98f6-2a721da3b083", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 2.10.15-tuxcare.5 of astro." } }, { "id": "CVE-2026-41067", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.5" } ], "bom-ref": "urn:uuid:c8ed7018-94dd-5cb1-9f2b-fde61a96c04c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 2.10.15-tuxcare.5 of astro." } }, { "id": "CVE-2026-45028", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.5" } ], "bom-ref": "urn:uuid:b97368dd-c2c8-5494-9e66-d859b40c49b9", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 2.10.15-tuxcare.5 of astro. not_affected \u2014 Astro version 2.10.14 is not affected by CVE-2026-45028. The server islands feature with encrypted parameter handling does not exist in this version. The vulnerability requires server islands (introduced in later versions) to be present, specifically the encryption/decryption of props and slots parameters via AES-GCM. Version 2.10.14 predates this feature entirely. While the repository contains...", "justification": "code_not_present" } }, { "id": "CVE-2026-50146", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.5" } ], "bom-ref": "urn:uuid:b74ca122-d888-5bdf-80c9-d31bcbb58537", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 2.10.15-tuxcare.5 of astro." } }, { "id": "CVE-2026-54298", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.5" } ], "bom-ref": "urn:uuid:567f79a4-2529-56f9-ab1b-aba64845b87f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 2.10.15-tuxcare.5 of astro." } }, { "id": "CVE-2026-54299", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.5" } ], "bom-ref": "urn:uuid:648a4805-7744-574f-98f9-6ad218e5fea6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 2.10.15-tuxcare.5 of astro." } }, { "id": "CVE-2026-59728", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.5" } ], "bom-ref": "urn:uuid:6d80e0aa-b820-5b4d-9a11-9d85e461775d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 2.10.15-tuxcare.5 of astro." } }, { "id": "CVE-2026-59729", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.5" } ], "bom-ref": "urn:uuid:0f4af2ac-e32c-56ee-9915-3b779dd5c6d9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59729 affects version 2.10.15-tuxcare.5 of astro." } }, { "id": "CVE-2026-73422", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.5" } ], "bom-ref": "urn:uuid:c2cbb410-2043-5e5b-b228-6d7432c9774c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73422 affects version 2.10.15-tuxcare.5 of astro." } }, { "id": "CVE-2026-84376", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.5" } ], "bom-ref": "urn:uuid:537dcead-1212-5768-808d-03d8c23cf4e3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-84376 affects version 2.10.15-tuxcare.5 of astro." } }, { "id": "GHSA-26w7-cxv4-gfx2", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.5" } ], "bom-ref": "urn:uuid:65b0e7fc-2b11-542a-ae18-424dc32151c5", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 affects version 2.10.15-tuxcare.5 of astro." } }, { "id": "GHSA-4g3v-8h47-v7g6", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.5" } ], "bom-ref": "urn:uuid:87353707-a20c-5eb6-82bf-6691b61a91b2", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 affects version 2.10.15-tuxcare.5 of astro." } } ], "dependencies": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.5" } ] }