{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:17e07f90-493c-5aa1-8a0a-c8db544163dd",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "create-astro",
      "purl": "pkg:npm/create-astro@3.6.5-tuxcare.12",
      "type": "library",
      "bom-ref": "pkg:npm/create-astro@3.6.5-tuxcare.12",
      "version": "3.6.5-tuxcare.12",
      "pedigree": {
        "ancestors": [
          {
            "name": "create-astro",
            "purl": "pkg:npm/create-astro@3.6.5",
            "type": "library",
            "version": "3.6.5"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-47885",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:d219583c-e932-547a-92c7-401ad1e41e58",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47885 is fixed in version 3.6.5-tuxcare.12 of create-astro."
      }
    },
    {
      "id": "CVE-2024-56140",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:13e98fd9-3008-5074-90fd-98a6fc92543f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56140 is fixed in version 3.6.5-tuxcare.12 of create-astro."
      }
    },
    {
      "id": "CVE-2024-56159",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:a1e740f5-0078-5aa8-a35d-f0b560bec6f0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56159 is fixed in version 3.6.5-tuxcare.12 of create-astro."
      }
    },
    {
      "id": "CVE-2025-55303",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:e430bc39-0b51-540e-848c-8df45096b2a4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55303 is fixed in version 3.6.5-tuxcare.12 of create-astro."
      }
    },
    {
      "id": "CVE-2025-61925",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:dff03f0a-bf6e-5a14-bcf7-98efe4a2f909",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61925 is fixed in version 3.6.5-tuxcare.12 of create-astro."
      }
    },
    {
      "id": "CVE-2025-64525",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:14d012ab-636a-58c4-858b-8d54dcd934ed",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64525 is fixed in version 3.6.5-tuxcare.12 of create-astro."
      }
    },
    {
      "id": "CVE-2025-64757",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:c08e7be0-2e72-59f5-9150-d71c36b9c05c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64757 is fixed in version 3.6.5-tuxcare.12 of create-astro."
      }
    },
    {
      "id": "CVE-2025-64764",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:bbcb6603-d826-5567-a721-88b642d9183f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64764 is fixed in version 3.6.5-tuxcare.12 of create-astro."
      }
    },
    {
      "id": "CVE-2025-64765",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:d6585b59-bb90-54fe-9435-009d824b2ab9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64765 is fixed in version 3.6.5-tuxcare.12 of create-astro."
      }
    },
    {
      "id": "CVE-2025-65019",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:8bf55fdb-f411-5b8a-b131-2b897e367ac9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-65019 is fixed in version 3.6.5-tuxcare.12 of create-astro."
      }
    },
    {
      "id": "CVE-2025-66202",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:2c1abe26-c61d-50f0-89f8-b95650f67d2b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66202 is fixed in version 3.6.5-tuxcare.12 of create-astro."
      }
    },
    {
      "id": "CVE-2026-114128",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:72f1abbd-7633-5bda-a69f-2d6fda24dbe7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114128 affects version 3.6.5-tuxcare.12 of create-astro."
      }
    },
    {
      "id": "CVE-2026-33769",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:72b17489-022d-5908-97b9-880357f5267e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33769 is fixed in version 3.6.5-tuxcare.12 of create-astro."
      }
    },
    {
      "id": "CVE-2026-41067",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:8faf5aca-e2e9-5ffd-9a0f-cb8f05da4901",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41067 is fixed in version 3.6.5-tuxcare.12 of create-astro."
      }
    },
    {
      "id": "CVE-2026-45028",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:adcfd685-01a4-5b11-8f1d-1ea60b3b4f15",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-45028 does not affect version 3.6.5-tuxcare.12 of create-astro. not_affected \u2014 Astro version 3.6.5 is NOT AFFECTED by CVE-2026-45028. The vulnerability concerns server islands encryption (AES-GCM ciphertext replay between props and slots), but server islands functionality does not exist in version 3.6.5. The feature was introduced in later versions (~May 2025, v5.x/6.x), and the vulnerability was fixed in v6.1.10 (April 2026). Exhaustive search across 327 source files con...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-50146",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:d91a8aad-ca24-50c2-9e58-62732eb85ef7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50146 is fixed in version 3.6.5-tuxcare.12 of create-astro."
      }
    },
    {
      "id": "CVE-2026-54298",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:7ff9092b-0f12-5f1c-b1c5-393bb9353884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54298 is fixed in version 3.6.5-tuxcare.12 of create-astro."
      }
    },
    {
      "id": "CVE-2026-54299",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:7ef3b04d-96f9-55d2-bbad-b2efb7854977",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54299 is fixed in version 3.6.5-tuxcare.12 of create-astro."
      }
    },
    {
      "id": "CVE-2026-59728",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:ae01b372-91dc-5e32-a6dd-ec6f081516c7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59728 is fixed in version 3.6.5-tuxcare.12 of create-astro."
      }
    },
    {
      "id": "CVE-2026-59729",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:a1a78bfd-e049-552e-b1a9-684c1e717e6c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59729 is fixed in version 3.6.5-tuxcare.12 of create-astro."
      }
    },
    {
      "id": "CVE-2026-73422",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:6a1f5a4e-0dfa-5a97-8baa-7f42112345aa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73422 is fixed in version 3.6.5-tuxcare.12 of create-astro."
      }
    },
    {
      "id": "CVE-2026-84376",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:1b01f1b1-12fe-5f6c-9ae3-d09f82a7762d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-84376 is fixed in version 3.6.5-tuxcare.12 of create-astro."
      }
    },
    {
      "id": "GHSA-26w7-cxv4-gfx2",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:665d6ff1-c321-569b-bb15-97139d5b0a4b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 is fixed in version 3.6.5-tuxcare.12 of create-astro."
      }
    },
    {
      "id": "GHSA-4g3v-8h47-v7g6",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:00067f17-7412-5886-985e-920215672674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 3.6.5-tuxcare.12 of create-astro."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/create-astro@3.6.5-tuxcare.12"
    }
  ]
}