{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:97455e6f-f43d-563e-b208-e722725d3299", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "create-astro", "purl": "pkg:npm/create-astro@2.10.15-tuxcare.10", "type": "library", "bom-ref": "pkg:npm/create-astro@2.10.15-tuxcare.10", "version": "2.10.15-tuxcare.10", "pedigree": { "ancestors": [ { "name": "create-astro", "purl": "pkg:npm/create-astro@2.10.15", "type": "library", "version": "2.10.15" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-56140", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:c5d2ace8-4556-5533-b953-d3cbf3397aeb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 2.10.15-tuxcare.10 of create-astro." } }, { "id": "CVE-2024-56159", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:bb3aac5e-3bac-5edf-b157-fffcab49b600", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 2.10.15-tuxcare.10 of create-astro." } }, { "id": "CVE-2025-55303", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:58caaf8e-5976-56de-9a91-91d01e3f51aa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55303 affects version 2.10.15-tuxcare.10 of create-astro, and is fixed in 2.10.15-tuxcare.11." } }, { "id": "CVE-2025-61925", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:0299aa68-d360-5a80-b82a-4b2a211641d4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 2.10.15-tuxcare.10 of create-astro." } }, { "id": "CVE-2025-64757", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:e15a6a15-6a8f-55e3-895e-ddc4b4b9eba4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 2.10.15-tuxcare.10 of create-astro." } }, { "id": "CVE-2025-64764", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:9f4733f0-1c1c-5ea1-9a08-308d47ccad2d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 2.10.15-tuxcare.10 of create-astro." } }, { "id": "CVE-2025-64765", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:c044141d-9847-5305-a923-8dc9fd3c40db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 2.10.15-tuxcare.10 of create-astro." } }, { "id": "CVE-2025-65019", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:7cc2b8d3-f0df-529c-a55e-2743a49bf2c3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 2.10.15-tuxcare.10 of create-astro." } }, { "id": "CVE-2025-66202", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:6422175e-139c-5ec4-a959-f2393896fe29", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 2.10.15-tuxcare.10 of create-astro." } }, { "id": "CVE-2026-114128", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:980bea1f-aa09-5a60-886f-0d31b72d2487", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-114128 affects version 2.10.15-tuxcare.10 of create-astro." } }, { "id": "CVE-2026-33769", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:0135ba03-d319-5e91-8cd4-5e141fd64456", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 2.10.15-tuxcare.10 of create-astro." } }, { "id": "CVE-2026-41067", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:c08935a2-21c4-5f64-84cf-d000f472a7fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 2.10.15-tuxcare.10 of create-astro." } }, { "id": "CVE-2026-45028", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:8965d945-cc04-58f7-a1d5-429a4146a264", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 2.10.15-tuxcare.10 of create-astro. not_affected \u2014 Astro version 2.10.14 is not affected by CVE-2026-45028. The server islands feature with encrypted parameter handling does not exist in this version. The vulnerability requires server islands (introduced in later versions) to be present, specifically the encryption/decryption of props and slots parameters via AES-GCM. Version 2.10.14 predates this feature entirely. While the repository contains...", "justification": "code_not_present" } }, { "id": "CVE-2026-50146", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:eac008c6-69c8-5c15-a97d-351984e7199f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 2.10.15-tuxcare.10 of create-astro." } }, { "id": "CVE-2026-54298", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:5c5fc639-bc07-5ea7-8c61-d8d54d6f36b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 2.10.15-tuxcare.10 of create-astro." } }, { "id": "CVE-2026-54299", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:91956877-4788-57dd-af47-79e2ac30cfad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 2.10.15-tuxcare.10 of create-astro." } }, { "id": "CVE-2026-59728", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:4bda7e8a-c692-5e37-8fef-340b4e49c63c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 2.10.15-tuxcare.10 of create-astro." } }, { "id": "CVE-2026-59729", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:2b819834-ffdb-5ae8-a43d-0058034b2b37", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59729 is fixed in version 2.10.15-tuxcare.10 of create-astro." } }, { "id": "CVE-2026-73422", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:91258847-3eb7-5d2a-b3c9-5392948ba1e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73422 is fixed in version 2.10.15-tuxcare.10 of create-astro." } }, { "id": "CVE-2026-84376", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:c365aa3c-2442-590d-892f-d5c8e55204c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-84376 is fixed in version 2.10.15-tuxcare.10 of create-astro." } }, { "id": "GHSA-26w7-cxv4-gfx2", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:16d79215-cced-5570-8e44-f85935da13a7", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 is fixed in version 2.10.15-tuxcare.10 of create-astro." } }, { "id": "GHSA-4g3v-8h47-v7g6", "affects": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:9d85fbf3-9d8d-554b-9d7e-82b7b61366ea", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 2.10.15-tuxcare.10 of create-astro." } } ], "dependencies": [ { "ref": "pkg:npm/create-astro@2.10.15-tuxcare.10" } ] }