{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:214a8596-04e6-567a-984e-826a86cc9bd3", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "astro", "purl": "pkg:npm/astro@3.6.5-tuxcare.12", "type": "library", "bom-ref": "pkg:npm/astro@3.6.5-tuxcare.12", "version": "3.6.5-tuxcare.12", "pedigree": { "ancestors": [ { "name": "astro", "purl": "pkg:npm/astro@3.6.5", "type": "library", "version": "3.6.5" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-47885", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.12" } ], "bom-ref": "urn:uuid:467909cf-b677-5e9c-baa8-2a104fb401f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47885 is fixed in version 3.6.5-tuxcare.12 of astro." } }, { "id": "CVE-2024-56140", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.12" } ], "bom-ref": "urn:uuid:eeb9d75f-7355-59fc-94e7-a31480468b47", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 3.6.5-tuxcare.12 of astro." } }, { "id": "CVE-2024-56159", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.12" } ], "bom-ref": "urn:uuid:a56b5914-6dad-5c15-b9bc-6877e85b17fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 3.6.5-tuxcare.12 of astro." } }, { "id": "CVE-2025-55303", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.12" } ], "bom-ref": "urn:uuid:423559b1-96ed-57df-9ea5-a687d24d12b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55303 is fixed in version 3.6.5-tuxcare.12 of astro." } }, { "id": "CVE-2025-61925", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.12" } ], "bom-ref": "urn:uuid:8670c3b3-b893-5bc1-a7df-50a3e60069cc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 3.6.5-tuxcare.12 of astro." } }, { "id": "CVE-2025-64525", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.12" } ], "bom-ref": "urn:uuid:e88507a1-b08b-555e-bf1c-d9d4a4815d75", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64525 is fixed in version 3.6.5-tuxcare.12 of astro." } }, { "id": "CVE-2025-64757", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.12" } ], "bom-ref": "urn:uuid:85b7f03f-e1f5-5d96-95d6-5005ef81973c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 3.6.5-tuxcare.12 of astro." } }, { "id": "CVE-2025-64764", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.12" } ], "bom-ref": "urn:uuid:3aefdf54-c8fd-5495-9d51-55e94a027af7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 3.6.5-tuxcare.12 of astro." } }, { "id": "CVE-2025-64765", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.12" } ], "bom-ref": "urn:uuid:dbad049e-5472-51f4-ae6e-e928429b597b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 3.6.5-tuxcare.12 of astro." } }, { "id": "CVE-2025-65019", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.12" } ], "bom-ref": "urn:uuid:8a985e67-d85c-55d9-9a51-e43301626d02", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 3.6.5-tuxcare.12 of astro." } }, { "id": "CVE-2025-66202", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.12" } ], "bom-ref": "urn:uuid:fd3ffa26-0d04-54dc-9844-da8ac96409f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 3.6.5-tuxcare.12 of astro." } }, { "id": "CVE-2026-114128", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.12" } ], "bom-ref": "urn:uuid:03d68973-0c2e-5d7a-968d-24fb8d278c17", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-114128 affects version 3.6.5-tuxcare.12 of astro." } }, { "id": "CVE-2026-33769", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.12" } ], "bom-ref": "urn:uuid:ca13d42d-6e49-5ebf-b8e8-86581952944e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 3.6.5-tuxcare.12 of astro." } }, { "id": "CVE-2026-41067", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.12" } ], "bom-ref": "urn:uuid:3436230e-1619-593d-ac7f-23292ac0c16f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 3.6.5-tuxcare.12 of astro." } }, { "id": "CVE-2026-45028", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.12" } ], "bom-ref": "urn:uuid:d1013a32-ab2c-544f-9d2d-e0f6e78f6c5e", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 3.6.5-tuxcare.12 of astro. not_affected \u2014 Astro version 3.6.5 is NOT AFFECTED by CVE-2026-45028. The vulnerability concerns server islands encryption (AES-GCM ciphertext replay between props and slots), but server islands functionality does not exist in version 3.6.5. The feature was introduced in later versions (~May 2025, v5.x/6.x), and the vulnerability was fixed in v6.1.10 (April 2026). Exhaustive search across 327 source files con...", "justification": "code_not_present" } }, { "id": "CVE-2026-50146", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.12" } ], "bom-ref": "urn:uuid:20fdcd34-d563-51f5-8036-baebc8e6217b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 3.6.5-tuxcare.12 of astro." } }, { "id": "CVE-2026-54298", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.12" } ], "bom-ref": "urn:uuid:f5ac412d-f544-5d22-93e4-436e8c2d523f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 3.6.5-tuxcare.12 of astro." } }, { "id": "CVE-2026-54299", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.12" } ], "bom-ref": "urn:uuid:fe82fd5a-f4b8-578c-ade2-031790b468df", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 3.6.5-tuxcare.12 of astro." } }, { "id": "CVE-2026-59728", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.12" } ], "bom-ref": "urn:uuid:1a6e338a-f90e-573f-9705-33699c0f3d90", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 3.6.5-tuxcare.12 of astro." } }, { "id": "CVE-2026-59729", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.12" } ], "bom-ref": "urn:uuid:7db8d5e4-8dd5-598d-8301-f437c6f35beb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59729 is fixed in version 3.6.5-tuxcare.12 of astro." } }, { "id": "CVE-2026-73422", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.12" } ], "bom-ref": "urn:uuid:0248b216-9202-5fa0-b6f6-ee152811fe48", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73422 is fixed in version 3.6.5-tuxcare.12 of astro." } }, { "id": "CVE-2026-84376", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.12" } ], "bom-ref": "urn:uuid:1f82c4d9-93f2-5b34-a984-eb475790d5df", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-84376 is fixed in version 3.6.5-tuxcare.12 of astro." } }, { "id": "GHSA-26w7-cxv4-gfx2", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.12" } ], "bom-ref": "urn:uuid:639194a6-be11-5014-a8b5-d3df8f69528c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 is fixed in version 3.6.5-tuxcare.12 of astro." } }, { "id": "GHSA-4g3v-8h47-v7g6", "affects": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.12" } ], "bom-ref": "urn:uuid:4b95db36-ba84-5ff8-ac5b-c1a83815af13", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 3.6.5-tuxcare.12 of astro." } } ], "dependencies": [ { "ref": "pkg:npm/astro@3.6.5-tuxcare.12" } ] }