{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:7afb256f-faf9-57d2-a107-942e2da7e40e",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@astrojs/telemetry",
      "purl": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.11",
      "type": "library",
      "bom-ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.11",
      "version": "3.6.5-tuxcare.11",
      "pedigree": {
        "ancestors": [
          {
            "name": "@astrojs/telemetry",
            "purl": "pkg:npm/%40astrojs/telemetry@3.6.5",
            "type": "library",
            "version": "3.6.5"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-47885",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:75ccf93e-757a-50b1-b39d-efa1f5d255b7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47885 is fixed in version 3.6.5-tuxcare.11 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2024-56140",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:67c182b3-9840-5d0c-aa26-e2a9e7a2dbfd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56140 is fixed in version 3.6.5-tuxcare.11 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2024-56159",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:364f8039-6b3b-56ad-adfb-3e5003026d69",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56159 is fixed in version 3.6.5-tuxcare.11 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2025-55303",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:2d3de5d1-d712-5385-bcb6-3aa53021718c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55303 affects version 3.6.5-tuxcare.11 of @astrojs/telemetry, and is fixed in 3.6.5-tuxcare.12."
      }
    },
    {
      "id": "CVE-2025-61925",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:891afd8e-2907-5460-b13e-f97cc6383ec7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61925 is fixed in version 3.6.5-tuxcare.11 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2025-64525",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:98acbafb-1993-55e9-b5b0-c6e8e1d3e6e0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64525 is fixed in version 3.6.5-tuxcare.11 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2025-64757",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:fb9e1863-7d57-5c35-9e55-3dba88194120",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-64757 affects version 3.6.5-tuxcare.11 of @astrojs/telemetry, and is fixed in 3.6.5-tuxcare.12."
      }
    },
    {
      "id": "CVE-2025-64764",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:3a4e8c4e-a4c2-5b90-aec9-23488c020e9b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64764 is fixed in version 3.6.5-tuxcare.11 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2025-64765",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:3df04017-aa6a-5fa0-a775-fb3cdd9fb304",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64765 is fixed in version 3.6.5-tuxcare.11 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2025-65019",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:b74ee14c-7c48-5754-9ee0-ba2ff716e3f5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-65019 is fixed in version 3.6.5-tuxcare.11 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2025-66202",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:5aec4181-6ade-537e-b89a-dbb99a3ed027",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66202 is fixed in version 3.6.5-tuxcare.11 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2026-114128",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:75b2efc9-0c14-5c82-a67d-fa2b151a3f4e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114128 affects version 3.6.5-tuxcare.11 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2026-33769",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:62c67eb5-a10d-53ab-87d5-196ee19988cd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33769 is fixed in version 3.6.5-tuxcare.11 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2026-41067",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:3911df68-6550-561a-84b4-7373f07fbc5a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41067 is fixed in version 3.6.5-tuxcare.11 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2026-45028",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:6bf57f88-a94c-576c-a0d8-19dcea32b29a",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-45028 does not affect version 3.6.5-tuxcare.11 of @astrojs/telemetry. not_affected \u2014 Astro version 3.6.5 is NOT AFFECTED by CVE-2026-45028. The vulnerability concerns server islands encryption (AES-GCM ciphertext replay between props and slots), but server islands functionality does not exist in version 3.6.5. The feature was introduced in later versions (~May 2025, v5.x/6.x), and the vulnerability was fixed in v6.1.10 (April 2026). Exhaustive search across 327 source files con...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-50146",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:4023a5d8-473b-5b47-a5c0-79991b43410f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50146 is fixed in version 3.6.5-tuxcare.11 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2026-54298",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:238b24d2-6d71-52c5-ac62-de0f4a2f6a0c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54298 is fixed in version 3.6.5-tuxcare.11 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2026-54299",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:b0af3ed7-2d65-5783-b0b4-3dc1c5f5e935",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54299 is fixed in version 3.6.5-tuxcare.11 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2026-59728",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:82ebaa06-291d-5602-9298-54ba200b5074",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59728 is fixed in version 3.6.5-tuxcare.11 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2026-59729",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:922af557-3b90-57f2-b9de-6eccdabf4b56",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59729 is fixed in version 3.6.5-tuxcare.11 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2026-73422",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:6847477b-0d16-5afb-af6a-a6817bdcad73",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73422 is fixed in version 3.6.5-tuxcare.11 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2026-84376",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:c0a8083d-14ee-5ca0-98b9-307026ee5740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-84376 is fixed in version 3.6.5-tuxcare.11 of @astrojs/telemetry."
      }
    },
    {
      "id": "GHSA-26w7-cxv4-gfx2",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:3f3d1707-5cfb-5848-b3bc-84bb73c3bd70",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 is fixed in version 3.6.5-tuxcare.11 of @astrojs/telemetry."
      }
    },
    {
      "id": "GHSA-4g3v-8h47-v7g6",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:356445f1-131b-507b-aab6-ee9ac2a9fff0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 3.6.5-tuxcare.11 of @astrojs/telemetry."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.11"
    }
  ]
}