{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:ff7004c3-2402-5cc5-a79d-acc23dbbe3f1",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "astro",
      "purl": "pkg:npm/astro@2.10.15-tuxcare.11",
      "type": "library",
      "bom-ref": "pkg:npm/astro@2.10.15-tuxcare.11",
      "version": "2.10.15-tuxcare.11",
      "pedigree": {
        "ancestors": [
          {
            "name": "astro",
            "purl": "pkg:npm/astro@2.10.15",
            "type": "library",
            "version": "2.10.15"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-56140",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:43156f52-100a-56e7-a68b-a9685cdec681",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56140 is fixed in version 2.10.15-tuxcare.11 of astro."
      }
    },
    {
      "id": "CVE-2024-56159",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:994acd76-3514-54ee-8108-aa90fea96cac",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56159 is fixed in version 2.10.15-tuxcare.11 of astro."
      }
    },
    {
      "id": "CVE-2025-55303",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:6423ff2c-03b9-510c-8163-ec1c1ec0bf96",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55303 is fixed in version 2.10.15-tuxcare.11 of astro."
      }
    },
    {
      "id": "CVE-2025-61925",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:c7d20db4-2bcc-5382-8449-f5d54425fc00",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61925 is fixed in version 2.10.15-tuxcare.11 of astro."
      }
    },
    {
      "id": "CVE-2025-64757",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:cd705dab-4894-5fba-aca0-bc52df4e5446",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64757 is fixed in version 2.10.15-tuxcare.11 of astro."
      }
    },
    {
      "id": "CVE-2025-64764",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:bdc9aabc-1247-5cc4-9315-a81b48ce81da",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64764 is fixed in version 2.10.15-tuxcare.11 of astro."
      }
    },
    {
      "id": "CVE-2025-64765",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:a6121bd8-0e59-5556-ae31-81182365f40d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64765 is fixed in version 2.10.15-tuxcare.11 of astro."
      }
    },
    {
      "id": "CVE-2025-65019",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:e79ae6c7-e364-5b30-be0f-641599a153da",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-65019 is fixed in version 2.10.15-tuxcare.11 of astro."
      }
    },
    {
      "id": "CVE-2025-66202",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:a790b029-537c-5411-91cc-689b5944b3be",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66202 is fixed in version 2.10.15-tuxcare.11 of astro."
      }
    },
    {
      "id": "CVE-2026-114128",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:fe7edee3-0f5c-5a3f-9990-d21d46ab5431",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114128 affects version 2.10.15-tuxcare.11 of astro."
      }
    },
    {
      "id": "CVE-2026-33769",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:398b24b4-0c54-5cfb-9c7a-a030217f1fb8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33769 is fixed in version 2.10.15-tuxcare.11 of astro."
      }
    },
    {
      "id": "CVE-2026-41067",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:39d6feb4-2a77-58ec-a3ba-663abf144cbc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41067 is fixed in version 2.10.15-tuxcare.11 of astro."
      }
    },
    {
      "id": "CVE-2026-45028",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:d84ef3db-ac7d-58ef-b8c4-9105bb048492",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-45028 does not affect version 2.10.15-tuxcare.11 of astro. not_affected \u2014 Astro version 2.10.14 is not affected by CVE-2026-45028. The server islands feature with encrypted parameter handling does not exist in this version. The vulnerability requires server islands (introduced in later versions) to be present, specifically the encryption/decryption of props and slots parameters via AES-GCM. Version 2.10.14 predates this feature entirely. While the repository contains...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-50146",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:e30dcc0e-ea44-5299-a347-5aa294cffed3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50146 is fixed in version 2.10.15-tuxcare.11 of astro."
      }
    },
    {
      "id": "CVE-2026-54298",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:72b12f3b-d484-5425-8a4a-32f08c97a1b4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54298 is fixed in version 2.10.15-tuxcare.11 of astro."
      }
    },
    {
      "id": "CVE-2026-54299",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:3aa0d904-630f-5b27-b7c7-1203373e433f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54299 is fixed in version 2.10.15-tuxcare.11 of astro."
      }
    },
    {
      "id": "CVE-2026-59728",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:81adb0a8-c51a-5dd4-923d-1f7d98c7cee9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59728 is fixed in version 2.10.15-tuxcare.11 of astro."
      }
    },
    {
      "id": "CVE-2026-59729",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:46402b2f-816a-53f2-8b26-0c1aeb97803c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59729 is fixed in version 2.10.15-tuxcare.11 of astro."
      }
    },
    {
      "id": "CVE-2026-73422",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:180d66a7-dd49-59af-8bc8-754d0e751f17",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73422 is fixed in version 2.10.15-tuxcare.11 of astro."
      }
    },
    {
      "id": "CVE-2026-84376",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:6f8240ff-cd61-5b78-9865-c7871ab247b1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-84376 is fixed in version 2.10.15-tuxcare.11 of astro."
      }
    },
    {
      "id": "GHSA-26w7-cxv4-gfx2",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:8532f343-ab9e-564e-920d-dc85ccb4a67a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 is fixed in version 2.10.15-tuxcare.11 of astro."
      }
    },
    {
      "id": "GHSA-4g3v-8h47-v7g6",
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:9f3c9b47-4cd4-5bb6-a313-f277ab252eb5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 2.10.15-tuxcare.11 of astro."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/astro@2.10.15-tuxcare.11"
    }
  ]
}