{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:df6f147c-1c3c-575b-8237-21b35b17310e",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "create-astro",
      "purl": "pkg:npm/create-astro@3.6.5-tuxcare.11",
      "type": "library",
      "bom-ref": "pkg:npm/create-astro@3.6.5-tuxcare.11",
      "version": "3.6.5-tuxcare.11",
      "pedigree": {
        "ancestors": [
          {
            "name": "create-astro",
            "purl": "pkg:npm/create-astro@3.6.5",
            "type": "library",
            "version": "3.6.5"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-47885",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:88c9ed8a-1c79-5952-a7f9-d9ee993b7873",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47885 is fixed in version 3.6.5-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2024-56140",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:ee132611-f322-515a-8397-cce1bb013117",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56140 is fixed in version 3.6.5-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2024-56159",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:ffe2f888-132e-5efa-a6af-f36a0859ffb3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56159 is fixed in version 3.6.5-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2025-55303",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:28cb41eb-4244-5625-a3df-2995f82e543a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55303 affects version 3.6.5-tuxcare.11 of create-astro, and is fixed in 3.6.5-tuxcare.12."
      }
    },
    {
      "id": "CVE-2025-61925",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:983abc97-eabe-5492-84e9-5d1f16ecc2a2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61925 is fixed in version 3.6.5-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2025-64525",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:f55f9f32-6441-5302-839e-9d9e9f855193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64525 is fixed in version 3.6.5-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2025-64757",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:85b8bafb-6b67-5972-9da6-6caead25363a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-64757 affects version 3.6.5-tuxcare.11 of create-astro, and is fixed in 3.6.5-tuxcare.12."
      }
    },
    {
      "id": "CVE-2025-64764",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:fff6ac6d-f258-596c-b958-8e003393b4c1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64764 is fixed in version 3.6.5-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2025-64765",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:f134d380-e462-52a1-9042-756a06c65aa3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64765 is fixed in version 3.6.5-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2025-65019",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:e68a3406-8541-5d7a-a8f8-b271eb7fcbc2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-65019 is fixed in version 3.6.5-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2025-66202",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:89fbb0ce-8f05-50a2-90cf-539cd862547a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66202 is fixed in version 3.6.5-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2026-114128",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:b37b0c56-884b-5a3e-aa93-b6511b30fa00",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114128 affects version 3.6.5-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2026-33769",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:436706e7-7079-5e35-904e-02f6f7227e2a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33769 is fixed in version 3.6.5-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2026-41067",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:602f9887-b207-50bb-b015-df98678814d9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41067 is fixed in version 3.6.5-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2026-45028",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:632563cb-b107-52cc-b4f8-62d977ca3f80",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-45028 does not affect version 3.6.5-tuxcare.11 of create-astro. not_affected \u2014 Astro version 3.6.5 is NOT AFFECTED by CVE-2026-45028. The vulnerability concerns server islands encryption (AES-GCM ciphertext replay between props and slots), but server islands functionality does not exist in version 3.6.5. The feature was introduced in later versions (~May 2025, v5.x/6.x), and the vulnerability was fixed in v6.1.10 (April 2026). Exhaustive search across 327 source files con...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-50146",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:e536121b-b4f9-5ce4-abea-dbbd762c220b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50146 is fixed in version 3.6.5-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2026-54298",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:46ca9bcf-82b5-577f-9c9b-179e552524d8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54298 is fixed in version 3.6.5-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2026-54299",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:288e0a94-3b4a-5757-b023-9a9385f3f04f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54299 is fixed in version 3.6.5-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2026-59728",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:94e3ecc5-3eb9-594e-b7f9-12fa4937bcf5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59728 is fixed in version 3.6.5-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2026-59729",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:14b8737d-eb94-53a5-9d19-e1e99c9a69e0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59729 is fixed in version 3.6.5-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2026-73422",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:a6b20d4f-0d17-5adb-a014-46b527dd068a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73422 is fixed in version 3.6.5-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2026-84376",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:1091bc35-4603-5560-b3fa-1af00bfd50eb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-84376 is fixed in version 3.6.5-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "GHSA-26w7-cxv4-gfx2",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:0ff3d7a6-f1f7-543d-85d9-b45f7b814647",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 is fixed in version 3.6.5-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "GHSA-4g3v-8h47-v7g6",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:69bd6ac5-5da4-53f6-8ac0-dcb311c9d2c4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 3.6.5-tuxcare.11 of create-astro."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/create-astro@3.6.5-tuxcare.11"
    }
  ]
}