{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:be96cc7f-6f3b-5926-a7f8-1b58d860b86b", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@astrojs/telemetry", "purl": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.11", "type": "library", "bom-ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.11", "version": "2.10.15-tuxcare.11", "pedigree": { "ancestors": [ { "name": "@astrojs/telemetry", "purl": "pkg:npm/%40astrojs/telemetry@2.10.15", "type": "library", "version": "2.10.15" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-56140", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:4ca28d31-f360-5b08-8b15-34cfc3c33e10", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 2.10.15-tuxcare.11 of @astrojs/telemetry." } }, { "id": "CVE-2024-56159", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:42b4c0e3-aa04-5ad1-a0d3-87a48bebce8b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 2.10.15-tuxcare.11 of @astrojs/telemetry." } }, { "id": "CVE-2025-55303", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:06ea87f8-d55c-5638-b1fa-0a0017e09ed7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55303 is fixed in version 2.10.15-tuxcare.11 of @astrojs/telemetry." } }, { "id": "CVE-2025-61925", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:2f2a3c3d-d11a-59fc-b8a0-08499b3114db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 2.10.15-tuxcare.11 of @astrojs/telemetry." } }, { "id": "CVE-2025-64757", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:d72a1bd5-7b79-520a-a646-f2bc438c22cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 2.10.15-tuxcare.11 of @astrojs/telemetry." } }, { "id": "CVE-2025-64764", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:3130a314-995d-5536-ae4d-2c93597bf953", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 2.10.15-tuxcare.11 of @astrojs/telemetry." } }, { "id": "CVE-2025-64765", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:ffb4315d-7379-5be3-8278-704551f2e6f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 2.10.15-tuxcare.11 of @astrojs/telemetry." } }, { "id": "CVE-2025-65019", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:c26404e8-4f0f-5c67-a7ed-e21e65feff6d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 2.10.15-tuxcare.11 of @astrojs/telemetry." } }, { "id": "CVE-2025-66202", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:9cb8dddb-e5b4-5d3e-8941-bd7b81c48159", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 2.10.15-tuxcare.11 of @astrojs/telemetry." } }, { "id": "CVE-2026-114128", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:d840343b-02aa-55be-872f-ba36f55f40d9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-114128 affects version 2.10.15-tuxcare.11 of @astrojs/telemetry." } }, { "id": "CVE-2026-33769", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:fc794caf-41a6-5618-b42b-29d25b5933a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 2.10.15-tuxcare.11 of @astrojs/telemetry." } }, { "id": "CVE-2026-41067", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:e7059618-18c5-5b5b-9bf0-ed095ef4c41e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 2.10.15-tuxcare.11 of @astrojs/telemetry." } }, { "id": "CVE-2026-45028", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:ee9a2fce-fbf6-5dad-8a4f-5ec5b94ba69b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 2.10.15-tuxcare.11 of @astrojs/telemetry. not_affected \u2014 Astro version 2.10.14 is not affected by CVE-2026-45028. The server islands feature with encrypted parameter handling does not exist in this version. The vulnerability requires server islands (introduced in later versions) to be present, specifically the encryption/decryption of props and slots parameters via AES-GCM. Version 2.10.14 predates this feature entirely. While the repository contains...", "justification": "code_not_present" } }, { "id": "CVE-2026-50146", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:0f4d1519-387e-5237-8d90-c8838ff4d503", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 2.10.15-tuxcare.11 of @astrojs/telemetry." } }, { "id": "CVE-2026-54298", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:fa8c5364-18d7-53f7-bb36-4f879e92adc6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 2.10.15-tuxcare.11 of @astrojs/telemetry." } }, { "id": "CVE-2026-54299", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:4efddbe8-ad7a-5e07-bd7c-5d7e885c71db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 2.10.15-tuxcare.11 of @astrojs/telemetry." } }, { "id": "CVE-2026-59728", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:4da30199-d2b8-5e76-b5f4-f543b2f3d67f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 2.10.15-tuxcare.11 of @astrojs/telemetry." } }, { "id": "CVE-2026-59729", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:c797fa76-553e-5fda-8748-a2fe98009a6c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59729 is fixed in version 2.10.15-tuxcare.11 of @astrojs/telemetry." } }, { "id": "CVE-2026-73422", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:24bd4385-6de4-56ec-933f-658bb5c985ed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73422 is fixed in version 2.10.15-tuxcare.11 of @astrojs/telemetry." } }, { "id": "CVE-2026-84376", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:3468de76-fcec-5175-9627-741dcb1881bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-84376 is fixed in version 2.10.15-tuxcare.11 of @astrojs/telemetry." } }, { "id": "GHSA-26w7-cxv4-gfx2", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:0925faa2-774d-56ae-8963-3134624c4cb8", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 is fixed in version 2.10.15-tuxcare.11 of @astrojs/telemetry." } }, { "id": "GHSA-4g3v-8h47-v7g6", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.11" } ], "bom-ref": "urn:uuid:8add0cf8-515a-56c7-b9f5-f2b01450cd50", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 2.10.15-tuxcare.11 of @astrojs/telemetry." } } ], "dependencies": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.11" } ] }