{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e9b54f4b-fbc9-592b-a68c-e3029aebd9a2", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@astrojs/rss", "purl": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.10", "type": "library", "bom-ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.10", "version": "2.10.15-tuxcare.10", "pedigree": { "ancestors": [ { "name": "@astrojs/rss", "purl": "pkg:npm/%40astrojs/rss@2.10.15", "type": "library", "version": "2.10.15" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-56140", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:fb1a9e01-a778-58f1-a5cd-21819e1f3e2f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 2.10.15-tuxcare.10 of @astrojs/rss." } }, { "id": "CVE-2024-56159", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:5f9d7f67-e760-5d42-84f4-75e0f6623996", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 2.10.15-tuxcare.10 of @astrojs/rss." } }, { "id": "CVE-2025-55303", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:dd636870-29f5-5a19-a85c-89e5215a5e64", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55303 affects version 2.10.15-tuxcare.10 of @astrojs/rss, and is fixed in 2.10.15-tuxcare.11." } }, { "id": "CVE-2025-61925", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:597d5286-1628-5fca-8d85-9a67ce2774ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 2.10.15-tuxcare.10 of @astrojs/rss." } }, { "id": "CVE-2025-64757", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:6beab792-67d7-5662-ae6b-23747024841f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 2.10.15-tuxcare.10 of @astrojs/rss." } }, { "id": "CVE-2025-64764", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:bf771e48-834c-5fa9-8e9c-59e503e20b8f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 2.10.15-tuxcare.10 of @astrojs/rss." } }, { "id": "CVE-2025-64765", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:9cb798ad-b193-5a15-846f-e8e40619a865", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 2.10.15-tuxcare.10 of @astrojs/rss." } }, { "id": "CVE-2025-65019", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:81d23762-d292-5e37-8928-531cf500da68", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 2.10.15-tuxcare.10 of @astrojs/rss." } }, { "id": "CVE-2025-66202", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:a7419772-2cf6-5205-9ae7-b66fff8edd9c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 2.10.15-tuxcare.10 of @astrojs/rss." } }, { "id": "CVE-2026-114128", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:e188c312-1764-58b5-acc8-d93fe5fc6a64", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-114128 affects version 2.10.15-tuxcare.10 of @astrojs/rss." } }, { "id": "CVE-2026-33769", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:3caa5bab-2c30-5403-b9cc-6d738d8b4108", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 2.10.15-tuxcare.10 of @astrojs/rss." } }, { "id": "CVE-2026-41067", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:6924d524-0423-5869-ac6c-a77495e7eecc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 2.10.15-tuxcare.10 of @astrojs/rss." } }, { "id": "CVE-2026-45028", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:da6db96a-9c62-58f5-859c-b019a48f094d", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 2.10.15-tuxcare.10 of @astrojs/rss. not_affected \u2014 Astro version 2.10.14 is not affected by CVE-2026-45028. The server islands feature with encrypted parameter handling does not exist in this version. The vulnerability requires server islands (introduced in later versions) to be present, specifically the encryption/decryption of props and slots parameters via AES-GCM. Version 2.10.14 predates this feature entirely. While the repository contains...", "justification": "code_not_present" } }, { "id": "CVE-2026-50146", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:06cd9572-888c-53b9-b8b3-648971d7c829", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 2.10.15-tuxcare.10 of @astrojs/rss." } }, { "id": "CVE-2026-54298", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:5f05b780-365e-52f6-8fbb-a04258452744", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 2.10.15-tuxcare.10 of @astrojs/rss." } }, { "id": "CVE-2026-54299", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:cc6e3afc-93b6-5457-b5ee-ecfb37144958", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 2.10.15-tuxcare.10 of @astrojs/rss." } }, { "id": "CVE-2026-59728", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:1494f32c-8816-5656-b15e-3546606818ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 2.10.15-tuxcare.10 of @astrojs/rss." } }, { "id": "CVE-2026-59729", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:643c26a7-e4dc-5e52-952e-2cda89a00417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59729 is fixed in version 2.10.15-tuxcare.10 of @astrojs/rss." } }, { "id": "CVE-2026-73422", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:56836418-831f-50d6-bd67-720e3c4ea1cf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73422 is fixed in version 2.10.15-tuxcare.10 of @astrojs/rss." } }, { "id": "CVE-2026-84376", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:bae0841b-6b22-5200-92d1-d907047b054d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-84376 is fixed in version 2.10.15-tuxcare.10 of @astrojs/rss." } }, { "id": "GHSA-26w7-cxv4-gfx2", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:6af108c4-8e35-5115-ab30-74e25291af34", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 is fixed in version 2.10.15-tuxcare.10 of @astrojs/rss." } }, { "id": "GHSA-4g3v-8h47-v7g6", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:8ca0e54f-2928-5760-a6be-f10cf7271316", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 2.10.15-tuxcare.10 of @astrojs/rss." } } ], "dependencies": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.10" } ] }