{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:3cd38065-0c68-5142-8296-c97451f80b45",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@astrojs/telemetry",
      "purl": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.12",
      "type": "library",
      "bom-ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.12",
      "version": "3.6.5-tuxcare.12",
      "pedigree": {
        "ancestors": [
          {
            "name": "@astrojs/telemetry",
            "purl": "pkg:npm/%40astrojs/telemetry@3.6.5",
            "type": "library",
            "version": "3.6.5"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-47885",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:0e1f0eed-1655-5869-9e00-0680c2844df1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47885 is fixed in version 3.6.5-tuxcare.12 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2024-56140",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:a6b678c5-5a04-5d97-9afb-e820be4b2e2e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56140 is fixed in version 3.6.5-tuxcare.12 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2024-56159",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:cc485976-ef7b-56e4-af37-daa54d57332c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56159 is fixed in version 3.6.5-tuxcare.12 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2025-55303",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:07a0f68c-003e-5258-8c10-ea01c11c6490",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55303 is fixed in version 3.6.5-tuxcare.12 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2025-61925",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:5184c32e-f4a6-5ba5-b13b-28d4c8cfddec",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61925 is fixed in version 3.6.5-tuxcare.12 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2025-64525",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:ad30955e-1bfd-5aed-9f42-72ee8627b0b3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64525 is fixed in version 3.6.5-tuxcare.12 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2025-64757",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:0bcba4fd-bb38-5c5c-be82-deaf45f86234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64757 is fixed in version 3.6.5-tuxcare.12 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2025-64764",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:71a42b9f-312b-518e-9ef2-a84c4dae35c9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64764 is fixed in version 3.6.5-tuxcare.12 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2025-64765",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:b6222494-c058-5c6e-a66f-619f3791c7e5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64765 is fixed in version 3.6.5-tuxcare.12 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2025-65019",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:a6e87fca-c871-5e0b-8d50-316efacf1071",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-65019 is fixed in version 3.6.5-tuxcare.12 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2025-66202",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:08eb6e50-3f3d-5f7e-a1f2-b80107f85fd0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66202 is fixed in version 3.6.5-tuxcare.12 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2026-114128",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:36dba549-6ab3-5aa1-9604-bf4725723b25",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114128 affects version 3.6.5-tuxcare.12 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2026-33769",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:ddd9fd1f-2e04-5996-ac63-9ac25e29700e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33769 is fixed in version 3.6.5-tuxcare.12 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2026-41067",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:d17f4cf0-af8b-5188-a785-5e33ca5a6467",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41067 is fixed in version 3.6.5-tuxcare.12 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2026-45028",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:c9c46132-0a2d-577b-97ec-ed13fbfbd44b",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-45028 does not affect version 3.6.5-tuxcare.12 of @astrojs/telemetry. not_affected \u2014 Astro version 3.6.5 is NOT AFFECTED by CVE-2026-45028. The vulnerability concerns server islands encryption (AES-GCM ciphertext replay between props and slots), but server islands functionality does not exist in version 3.6.5. The feature was introduced in later versions (~May 2025, v5.x/6.x), and the vulnerability was fixed in v6.1.10 (April 2026). Exhaustive search across 327 source files con...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-50146",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:460b0e95-4cff-5018-8bc1-c645853c1dce",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50146 is fixed in version 3.6.5-tuxcare.12 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2026-54298",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:005f0e79-b81b-57ee-908b-ddad3725eafb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54298 is fixed in version 3.6.5-tuxcare.12 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2026-54299",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:d755ee78-e608-5ad9-9387-0e7d5098cb60",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54299 is fixed in version 3.6.5-tuxcare.12 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2026-59728",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:b38fff0f-2110-5adb-8da3-bf465febff3b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59728 is fixed in version 3.6.5-tuxcare.12 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2026-59729",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:cca46f04-5042-58ba-980e-4646827e794b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59729 is fixed in version 3.6.5-tuxcare.12 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2026-73422",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:2e61d804-31b6-5e8a-9b5f-1b0d42251f52",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73422 is fixed in version 3.6.5-tuxcare.12 of @astrojs/telemetry."
      }
    },
    {
      "id": "CVE-2026-84376",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:e7843704-c63c-5ea1-93ae-df235a0e8223",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-84376 is fixed in version 3.6.5-tuxcare.12 of @astrojs/telemetry."
      }
    },
    {
      "id": "GHSA-26w7-cxv4-gfx2",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:1dabe0c3-09b9-5656-91f4-64113465afcd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 is fixed in version 3.6.5-tuxcare.12 of @astrojs/telemetry."
      }
    },
    {
      "id": "GHSA-4g3v-8h47-v7g6",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:4017af65-6b6a-5ba9-a58f-cffae5302d6b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 3.6.5-tuxcare.12 of @astrojs/telemetry."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.12"
    }
  ]
}