{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:cf74f1f8-30be-514f-bf27-a0dfea3d3db0",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "astro",
      "purl": "pkg:npm/astro@2.10.15-tuxcare.10",
      "type": "library",
      "bom-ref": "pkg:npm/astro@2.10.15-tuxcare.10",
      "version": "2.10.15-tuxcare.10",
      "pedigree": {
        "ancestors": [
          {
            "name": "astro",
            "purl": "pkg:npm/astro@2.10.15",
            "type": "library",
            "version": "2.10.15"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-56140",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:09add4f4-7683-59d1-86ac-8f1239f288bc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56140 is fixed in version 2.10.15-tuxcare.10 of astro."
      }
    },
    {
      "id": "CVE-2024-56159",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:26ac415b-5b01-5627-9438-6ed45491cb6d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56159 is fixed in version 2.10.15-tuxcare.10 of astro."
      }
    },
    {
      "id": "CVE-2025-55303",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:14adc4bf-a55f-5192-821b-35e9dc7b1a20",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55303 affects version 2.10.15-tuxcare.10 of astro, and is fixed in 2.10.15-tuxcare.11."
      }
    },
    {
      "id": "CVE-2025-61925",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:91f89984-4408-5993-ab9d-9d643b9d976f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61925 is fixed in version 2.10.15-tuxcare.10 of astro."
      }
    },
    {
      "id": "CVE-2025-64757",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:442f2ef6-14a4-5b2e-9d20-96bd2913b5e1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64757 is fixed in version 2.10.15-tuxcare.10 of astro."
      }
    },
    {
      "id": "CVE-2025-64764",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:5260751d-ee76-58b5-b6b0-8bc2d60f88d0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64764 is fixed in version 2.10.15-tuxcare.10 of astro."
      }
    },
    {
      "id": "CVE-2025-64765",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:f1b260e0-5d66-5f82-87a8-356f9c01ae50",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64765 is fixed in version 2.10.15-tuxcare.10 of astro."
      }
    },
    {
      "id": "CVE-2025-65019",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:2e22bb7b-017b-5403-ab77-80bbda733253",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-65019 is fixed in version 2.10.15-tuxcare.10 of astro."
      }
    },
    {
      "id": "CVE-2025-66202",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:8653e5d3-072c-5578-8151-580723841714",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66202 is fixed in version 2.10.15-tuxcare.10 of astro."
      }
    },
    {
      "id": "CVE-2026-114128",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:0184fa0d-9e59-580d-ae6c-ff538371d90c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114128 affects version 2.10.15-tuxcare.10 of astro."
      }
    },
    {
      "id": "CVE-2026-33769",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:95ef01e2-f9d4-5e8e-adf2-e8424faddbeb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33769 is fixed in version 2.10.15-tuxcare.10 of astro."
      }
    },
    {
      "id": "CVE-2026-41067",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:0c1ad995-a8b7-515f-b485-571956720adf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41067 is fixed in version 2.10.15-tuxcare.10 of astro."
      }
    },
    {
      "id": "CVE-2026-45028",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:1c462aa2-6355-522a-a8c9-ae7ca66d4b87",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-45028 does not affect version 2.10.15-tuxcare.10 of astro. not_affected \u2014 Astro version 2.10.14 is not affected by CVE-2026-45028. The server islands feature with encrypted parameter handling does not exist in this version. The vulnerability requires server islands (introduced in later versions) to be present, specifically the encryption/decryption of props and slots parameters via AES-GCM. Version 2.10.14 predates this feature entirely. While the repository contains...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-50146",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:b8903e42-91f6-514b-9086-243279b1b9db",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50146 is fixed in version 2.10.15-tuxcare.10 of astro."
      }
    },
    {
      "id": "CVE-2026-54298",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:2a96be95-c2ef-5445-97e0-22838b03f6d6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54298 is fixed in version 2.10.15-tuxcare.10 of astro."
      }
    },
    {
      "id": "CVE-2026-54299",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:c69b164f-055b-5610-9f3e-f97c9a74c513",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54299 is fixed in version 2.10.15-tuxcare.10 of astro."
      }
    },
    {
      "id": "CVE-2026-59728",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:1abbd337-fd25-555d-ab59-b6242a890bbf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59728 is fixed in version 2.10.15-tuxcare.10 of astro."
      }
    },
    {
      "id": "CVE-2026-59729",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:b2db3a64-2cd0-52ee-a575-9aec5d430a27",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59729 is fixed in version 2.10.15-tuxcare.10 of astro."
      }
    },
    {
      "id": "CVE-2026-73422",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:7e4d2c80-7166-5250-a933-96a5303d3b10",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73422 is fixed in version 2.10.15-tuxcare.10 of astro."
      }
    },
    {
      "id": "CVE-2026-84376",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:db69bf04-01cc-527d-888d-e9243b80954a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-84376 is fixed in version 2.10.15-tuxcare.10 of astro."
      }
    },
    {
      "id": "GHSA-26w7-cxv4-gfx2",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:ce91c2ed-956c-5770-b429-a583bd606039",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 is fixed in version 2.10.15-tuxcare.10 of astro."
      }
    },
    {
      "id": "GHSA-4g3v-8h47-v7g6",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:e975a605-fd96-5739-8fd3-8a99cb18efec",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 2.10.15-tuxcare.10 of astro."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/astro@2.10.15-tuxcare.10"
    }
  ]
}