{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:29eae4ef-41be-5333-828b-3fb3e558285c",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@astrojs/rss",
      "purl": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.11",
      "type": "library",
      "bom-ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.11",
      "version": "3.6.5-tuxcare.11",
      "pedigree": {
        "ancestors": [
          {
            "name": "@astrojs/rss",
            "purl": "pkg:npm/%40astrojs/rss@3.6.5",
            "type": "library",
            "version": "3.6.5"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-47885",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:8808e6a3-6617-5ef4-97a7-6ba97f17fc40",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47885 is fixed in version 3.6.5-tuxcare.11 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2024-56140",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:cf68278f-6405-5a9a-94ef-6f0c37ec20ab",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56140 is fixed in version 3.6.5-tuxcare.11 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2024-56159",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:3c338cb9-4b8d-50f5-8241-054244d2cb63",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56159 is fixed in version 3.6.5-tuxcare.11 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2025-55303",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:e3f055b8-e73d-5801-a8ee-7a4cb37a3be5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55303 affects version 3.6.5-tuxcare.11 of @astrojs/rss, and is fixed in 3.6.5-tuxcare.12."
      }
    },
    {
      "id": "CVE-2025-61925",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:843c0582-fe0a-5c7d-a364-a2ad5116bf37",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61925 is fixed in version 3.6.5-tuxcare.11 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2025-64525",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:29325c80-5c89-5771-bca5-58f5afaa171d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64525 is fixed in version 3.6.5-tuxcare.11 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2025-64757",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:e9963e19-1ed0-52d0-a93c-14a894271a1d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-64757 affects version 3.6.5-tuxcare.11 of @astrojs/rss, and is fixed in 3.6.5-tuxcare.12."
      }
    },
    {
      "id": "CVE-2025-64764",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:101428d6-f99a-59c7-81a6-1daea1ac1c63",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64764 is fixed in version 3.6.5-tuxcare.11 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2025-64765",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:ac10bfcc-11a9-585d-853a-bdb97a731c46",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64765 is fixed in version 3.6.5-tuxcare.11 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2025-65019",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:b23044cf-30b3-5012-bdf7-3130e4965806",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-65019 is fixed in version 3.6.5-tuxcare.11 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2025-66202",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:4c4ebb5c-92e4-59c5-972f-3862834073c3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66202 is fixed in version 3.6.5-tuxcare.11 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2026-114128",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:a6976cdc-4dee-5452-b300-eb877e2bef97",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114128 affects version 3.6.5-tuxcare.11 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2026-33769",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:c730beb7-634d-5ba1-8e9f-b2e06174c346",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33769 is fixed in version 3.6.5-tuxcare.11 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2026-41067",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:487ca25a-451e-585e-9d30-daf5b4fdc2c5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41067 is fixed in version 3.6.5-tuxcare.11 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2026-45028",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:63b5f614-e68f-5ac3-8e50-0a1c5a47f01a",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-45028 does not affect version 3.6.5-tuxcare.11 of @astrojs/rss. not_affected \u2014 Astro version 3.6.5 is NOT AFFECTED by CVE-2026-45028. The vulnerability concerns server islands encryption (AES-GCM ciphertext replay between props and slots), but server islands functionality does not exist in version 3.6.5. The feature was introduced in later versions (~May 2025, v5.x/6.x), and the vulnerability was fixed in v6.1.10 (April 2026). Exhaustive search across 327 source files con...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-50146",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:79d1628d-12ce-5903-80e0-c73ddaecfe8d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50146 is fixed in version 3.6.5-tuxcare.11 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2026-54298",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:29677869-53c5-5c82-9a90-485c8569df68",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54298 is fixed in version 3.6.5-tuxcare.11 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2026-54299",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:f7922b6a-f682-5259-a98a-08ebdb3de032",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54299 is fixed in version 3.6.5-tuxcare.11 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2026-59728",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:809bcff3-9852-58b4-ae1d-608125a8c089",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59728 is fixed in version 3.6.5-tuxcare.11 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2026-59729",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:85f5a21a-2955-56fe-9009-fb9d762d8447",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59729 is fixed in version 3.6.5-tuxcare.11 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2026-73422",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:14fdea5a-6d60-5139-b13f-88039a2f0fd8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73422 is fixed in version 3.6.5-tuxcare.11 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2026-84376",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:9f5615b0-2c05-59c6-aa8e-e017aa9fb50e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-84376 is fixed in version 3.6.5-tuxcare.11 of @astrojs/rss."
      }
    },
    {
      "id": "GHSA-26w7-cxv4-gfx2",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:bb3aaa4b-6767-58d4-a003-082e0acf08ad",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 is fixed in version 3.6.5-tuxcare.11 of @astrojs/rss."
      }
    },
    {
      "id": "GHSA-4g3v-8h47-v7g6",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:2f777e61-e85e-522d-87cc-9e02c81db0d3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 3.6.5-tuxcare.11 of @astrojs/rss."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.11"
    }
  ]
}