{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2184a408-a755-56e4-b45a-233c7ee0447c",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@astrojs/telemetry",
      "purl": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.10",
      "type": "library",
      "bom-ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.10",
      "version": "2.10.15-tuxcare.10",
      "pedigree": {
        "ancestors": [
          {
            "name": "@astrojs/telemetry",
            "purl": "pkg:npm/%40astrojs/telemetry@2.10.15",
            "type": "library",
            "version": "2.10.15"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-56140",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:ad66bb0e-2b8a-5cee-9da6-e73094ae17ce",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56140 is fixed in version 2.10.15-tuxcare.10 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2024-56159",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:3b81f62b-57e6-5e8f-9c87-b91160d5677e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56159 is fixed in version 2.10.15-tuxcare.10 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2025-55303",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:98abc5cc-4471-56f0-b5ed-cf9139ade858",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55303 affects version 2.10.15-tuxcare.10 of @astrojs/telemetry, and is fixed in 2.10.15-tuxcare.11."
      }
    },
    {
      "id": "CVE-2025-61925",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:c0e9d73c-b32e-51dd-bf21-5944de099a85",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61925 is fixed in version 2.10.15-tuxcare.10 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2025-64757",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:9b2372ce-08bd-5e43-97da-e9210f331950",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64757 is fixed in version 2.10.15-tuxcare.10 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2025-64764",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:5da0ad08-3e1d-5d16-8fe6-4997a14256e5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64764 is fixed in version 2.10.15-tuxcare.10 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2025-64765",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:4ba4553c-30c4-5210-a0a5-70026fbed9e8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64765 is fixed in version 2.10.15-tuxcare.10 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2025-65019",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:16cb62e4-f6b2-5d9c-a108-bdfe021409af",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-65019 is fixed in version 2.10.15-tuxcare.10 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2025-66202",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:ce816204-6d9d-51b3-971c-ce23a071b66c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66202 is fixed in version 2.10.15-tuxcare.10 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2026-114128",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:f14991ae-eb65-55eb-8721-0860da39ab6c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114128 affects version 2.10.15-tuxcare.10 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2026-33769",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:a3d30ce7-2ad0-55f4-82b7-e4e80c56bf13",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33769 is fixed in version 2.10.15-tuxcare.10 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2026-41067",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:48371062-5aea-5463-88c5-385044d03a05",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41067 is fixed in version 2.10.15-tuxcare.10 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2026-45028",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:692e1d32-a3f9-5706-919b-2f6435cc2cef",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-45028 does not affect version 2.10.15-tuxcare.10 of @astrojs/telemetry. not_affected \u2014 Astro version 2.10.14 is not affected by CVE-2026-45028. The server islands feature with encrypted parameter handling does not exist in this version. The vulnerability requires server islands (introduced in later versions) to be present, specifically the encryption/decryption of props and slots parameters via AES-GCM. Version 2.10.14 predates this feature entirely. While the repository contains...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-50146",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:a36c45f0-41dc-5bce-b61e-46679102dbde",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50146 is fixed in version 2.10.15-tuxcare.10 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2026-54298",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:ba11c362-686f-584c-95de-a96c4986ec61",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54298 is fixed in version 2.10.15-tuxcare.10 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2026-54299",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:04414abf-991c-591d-b21e-4844eba6aba6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54299 is fixed in version 2.10.15-tuxcare.10 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2026-59728",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:359963d1-ee93-5842-8eae-dee0b6be76fa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59728 is fixed in version 2.10.15-tuxcare.10 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2026-59729",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:7dfc60e7-d174-59f3-976e-b8f038b8b533",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59729 is fixed in version 2.10.15-tuxcare.10 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2026-73422",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:e33ffcb0-e001-55c2-b8f9-3297660cd8a7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73422 is fixed in version 2.10.15-tuxcare.10 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2026-84376",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:da1bbaff-d478-5d47-b86d-9b3085150c76",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-84376 is fixed in version 2.10.15-tuxcare.10 of @astrojs/telemetry."
      }
    },
    {
      "id": "GHSA-26w7-cxv4-gfx2",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:5319c9c3-71ce-545c-a211-2d774d9dd8a0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 is fixed in version 2.10.15-tuxcare.10 of @astrojs/telemetry."
      }
    },
    {
      "id": "GHSA-4g3v-8h47-v7g6",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:fad0b640-ec34-5fb4-8286-e5020afcb275",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 2.10.15-tuxcare.10 of @astrojs/telemetry."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.10"
    }
  ]
}