{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:c5bfd92f-26ab-505a-b751-354e6f5dcfca",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@astrojs/rss",
      "purl": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.12",
      "type": "library",
      "bom-ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.12",
      "version": "3.6.5-tuxcare.12",
      "pedigree": {
        "ancestors": [
          {
            "name": "@astrojs/rss",
            "purl": "pkg:npm/%40astrojs/rss@3.6.5",
            "type": "library",
            "version": "3.6.5"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-47885",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:9f189ae0-9fd9-570a-9fb0-8f6c477ec1fb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47885 is fixed in version 3.6.5-tuxcare.12 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2024-56140",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:581c2156-6aac-5068-82e1-d57bfe26dbc4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56140 is fixed in version 3.6.5-tuxcare.12 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2024-56159",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:9968c59c-5e71-519b-ad4b-25ea20d9a4f3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56159 is fixed in version 3.6.5-tuxcare.12 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2025-55303",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:92ac36c4-67d4-55d8-8b77-f7d864a4ae2f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55303 is fixed in version 3.6.5-tuxcare.12 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2025-61925",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:33eb4435-868d-5a6e-b793-fdc4d98c867b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61925 is fixed in version 3.6.5-tuxcare.12 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2025-64525",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:3071e2bb-dab9-5382-b42a-b14c469e3bab",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64525 is fixed in version 3.6.5-tuxcare.12 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2025-64757",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:0543795e-8d52-539c-bb48-61cbf6b9b86b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64757 is fixed in version 3.6.5-tuxcare.12 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2025-64764",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:a6add0cb-e894-505d-ab84-bd13a04cb247",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64764 is fixed in version 3.6.5-tuxcare.12 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2025-64765",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:9449c11e-673b-52bc-a332-a2ef92b37c98",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64765 is fixed in version 3.6.5-tuxcare.12 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2025-65019",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:4caa5c7b-8d61-5f7d-9b8f-5a39e02688eb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-65019 is fixed in version 3.6.5-tuxcare.12 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2025-66202",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:8837cb81-2070-50e8-8a83-d7e465805e44",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66202 is fixed in version 3.6.5-tuxcare.12 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2026-114128",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:7d7358e8-8b00-544d-9ccb-557cd681dbf1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114128 affects version 3.6.5-tuxcare.12 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2026-33769",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:b6fb8026-112d-5e45-88b1-3f6ead4c3216",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33769 is fixed in version 3.6.5-tuxcare.12 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2026-41067",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:81123d6a-0e16-528a-8ddc-eee921e6477d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41067 is fixed in version 3.6.5-tuxcare.12 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2026-45028",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:f7fd0eb6-fd63-5cb7-92b4-c4a962b0326f",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-45028 does not affect version 3.6.5-tuxcare.12 of @astrojs/rss. not_affected \u2014 Astro version 3.6.5 is NOT AFFECTED by CVE-2026-45028. The vulnerability concerns server islands encryption (AES-GCM ciphertext replay between props and slots), but server islands functionality does not exist in version 3.6.5. The feature was introduced in later versions (~May 2025, v5.x/6.x), and the vulnerability was fixed in v6.1.10 (April 2026). Exhaustive search across 327 source files con...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-50146",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:af9cc2d0-ffde-5951-996e-706f84aa6f87",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50146 is fixed in version 3.6.5-tuxcare.12 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2026-54298",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:2349a901-987c-57fe-8639-4d6022c59674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54298 is fixed in version 3.6.5-tuxcare.12 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2026-54299",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:7ede14d6-9a02-5dac-b9c6-efc3c2a4cffa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54299 is fixed in version 3.6.5-tuxcare.12 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2026-59728",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:e231f842-f3a0-52e4-b998-cac194c056f0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59728 is fixed in version 3.6.5-tuxcare.12 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2026-59729",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:c8416796-2c7e-5229-9d2a-35b31fe8c715",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59729 is fixed in version 3.6.5-tuxcare.12 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2026-73422",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:749087b8-269b-5b73-aa4c-d1aebc2ea4e8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73422 is fixed in version 3.6.5-tuxcare.12 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2026-84376",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:cef729ef-efea-51b4-8c32-f3644f13f1c9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-84376 is fixed in version 3.6.5-tuxcare.12 of @astrojs/rss."
      }
    },
    {
      "id": "GHSA-26w7-cxv4-gfx2",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:4f389afb-1669-50be-81a1-bf6163aa2ad7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 is fixed in version 3.6.5-tuxcare.12 of @astrojs/rss."
      }
    },
    {
      "id": "GHSA-4g3v-8h47-v7g6",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:e6c2b824-b0e5-54e7-bf53-b40fbd76fda8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 3.6.5-tuxcare.12 of @astrojs/rss."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.12"
    }
  ]
}