{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:21f8f507-3af6-59ff-a54c-fe396d4ad0a4", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@astrojs/rss", "purl": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.11", "type": "library", "bom-ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.11", "version": "2.10.15-tuxcare.11", "pedigree": { "ancestors": [ { "name": "@astrojs/rss", "purl": "pkg:npm/%40astrojs/rss@2.10.15", "type": "library", "version": "2.10.15" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-56140", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:cb8830d0-faf7-53cb-afdd-dd5c7755d2af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 2.10.15-tuxcare.11 of @astrojs/rss." } }, { "id": "CVE-2024-56159", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:b7f82eb8-e43e-524f-96da-1b2ca69fd288", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 2.10.15-tuxcare.11 of @astrojs/rss." } }, { "id": "CVE-2025-55303", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:54cb3cfd-37a5-5c19-871c-e071cf0408f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55303 is fixed in version 2.10.15-tuxcare.11 of @astrojs/rss." } }, { "id": "CVE-2025-61925", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:21a254b1-480d-57de-b77d-a7fcfe7b9b8e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 2.10.15-tuxcare.11 of @astrojs/rss." } }, { "id": "CVE-2025-64757", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:1c1e572b-e26e-5754-bd5e-967efbb3487c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 2.10.15-tuxcare.11 of @astrojs/rss." } }, { "id": "CVE-2025-64764", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:515ed0b9-1ae8-528e-bdf9-6602de3c9c10", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 2.10.15-tuxcare.11 of @astrojs/rss." } }, { "id": "CVE-2025-64765", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:5d6adc90-33fc-511d-86b3-bb6a063be718", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 2.10.15-tuxcare.11 of @astrojs/rss." } }, { "id": "CVE-2025-65019", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:a2730bb7-c2ca-5547-a8f2-961f512c92af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 2.10.15-tuxcare.11 of @astrojs/rss." } }, { "id": "CVE-2025-66202", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:89a487de-03be-5d05-b5ed-9462c2e7422f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 2.10.15-tuxcare.11 of @astrojs/rss." } }, { "id": "CVE-2026-114128", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:d6ccfbf5-8c6f-5757-95a7-75377f6dadb7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-114128 affects version 2.10.15-tuxcare.11 of @astrojs/rss." } }, { "id": "CVE-2026-33769", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:89c0d7d7-9150-5b6d-9ffc-5e1bdeea1e79", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 2.10.15-tuxcare.11 of @astrojs/rss." } }, { "id": "CVE-2026-41067", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:fac3246f-3323-50f5-8a8d-ed508f0ee822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 2.10.15-tuxcare.11 of @astrojs/rss." } }, { "id": "CVE-2026-45028", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:6a97a1d4-84c7-5bbe-a99b-f3ac60bd7098", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 2.10.15-tuxcare.11 of @astrojs/rss. not_affected \u2014 Astro version 2.10.14 is not affected by CVE-2026-45028. The server islands feature with encrypted parameter handling does not exist in this version. The vulnerability requires server islands (introduced in later versions) to be present, specifically the encryption/decryption of props and slots parameters via AES-GCM. Version 2.10.14 predates this feature entirely. While the repository contains...", "justification": "code_not_present" } }, { "id": "CVE-2026-50146", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:2b31f756-067e-54b2-93f3-938610390b2c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 2.10.15-tuxcare.11 of @astrojs/rss." } }, { "id": "CVE-2026-54298", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:55d45c68-3613-53db-aec3-96ea03b69f51", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 2.10.15-tuxcare.11 of @astrojs/rss." } }, { "id": "CVE-2026-54299", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:16fa150d-595d-542d-b2d3-b51bc9e9b5ed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 2.10.15-tuxcare.11 of @astrojs/rss." } }, { "id": "CVE-2026-59728", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:3fbde9d0-2e88-5d20-98cc-d66997791c85", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 2.10.15-tuxcare.11 of @astrojs/rss." } }, { "id": "CVE-2026-59729", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:1661bad5-0151-5f30-9eff-2aeaf9e6df41", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59729 is fixed in version 2.10.15-tuxcare.11 of @astrojs/rss." } }, { "id": "CVE-2026-73422", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:307ed620-28ff-5a1a-b69f-b178a3f05707", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73422 is fixed in version 2.10.15-tuxcare.11 of @astrojs/rss." } }, { "id": "CVE-2026-84376", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:77b6467c-3c62-5b16-91d4-0030764e8de1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-84376 is fixed in version 2.10.15-tuxcare.11 of @astrojs/rss." } }, { "id": "GHSA-26w7-cxv4-gfx2", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:4eb86467-1645-522e-805d-0c1811c6ebf0", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 is fixed in version 2.10.15-tuxcare.11 of @astrojs/rss." } }, { "id": "GHSA-4g3v-8h47-v7g6", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:7b4553bc-c331-55c3-838b-15f7ae786c52", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 2.10.15-tuxcare.11 of @astrojs/rss." } } ], "dependencies": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.11" } ] }