{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:5541a0d5-7631-50d1-afd1-c83123a2b29a",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "create-astro",
      "purl": "pkg:npm/create-astro@2.10.15-tuxcare.11",
      "type": "library",
      "bom-ref": "pkg:npm/create-astro@2.10.15-tuxcare.11",
      "version": "2.10.15-tuxcare.11",
      "pedigree": {
        "ancestors": [
          {
            "name": "create-astro",
            "purl": "pkg:npm/create-astro@2.10.15",
            "type": "library",
            "version": "2.10.15"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-56140",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:0485fc84-8e6f-51e7-806b-53486678782d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56140 is fixed in version 2.10.15-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2024-56159",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:af959744-522f-5b75-9e55-61135e8683fa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56159 is fixed in version 2.10.15-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2025-55303",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:cee72cae-2036-5c04-bcac-b6aaefd8cb6d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55303 is fixed in version 2.10.15-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2025-61925",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:e5af96cd-abe8-54e3-9729-6564b42054a4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61925 is fixed in version 2.10.15-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2025-64757",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:30eb8a2a-f6ab-50a7-b56c-18b46ceb2f99",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64757 is fixed in version 2.10.15-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2025-64764",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:348a37e5-5c71-56e3-850f-84141c463e49",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64764 is fixed in version 2.10.15-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2025-64765",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:93c78b10-81b5-505a-905e-7c170c76e848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64765 is fixed in version 2.10.15-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2025-65019",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:cd22a358-ab51-59ae-a026-32e99e311a14",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-65019 is fixed in version 2.10.15-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2025-66202",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:3edb3441-e64c-5185-b3cd-182dfafd210f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66202 is fixed in version 2.10.15-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2026-114128",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:b101fef0-564c-5798-bc40-4fe344f12943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114128 affects version 2.10.15-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2026-33769",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:5d37ff5d-64e6-51a3-b6b6-b01d1eaddba6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33769 is fixed in version 2.10.15-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2026-41067",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:203afb2d-605a-5623-bae0-fb2740756164",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41067 is fixed in version 2.10.15-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2026-45028",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:28012c3d-8222-5110-a583-59c399d9cf93",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-45028 does not affect version 2.10.15-tuxcare.11 of create-astro. not_affected \u2014 Astro version 2.10.14 is not affected by CVE-2026-45028. The server islands feature with encrypted parameter handling does not exist in this version. The vulnerability requires server islands (introduced in later versions) to be present, specifically the encryption/decryption of props and slots parameters via AES-GCM. Version 2.10.14 predates this feature entirely. While the repository contains...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-50146",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:c4d3f3de-7d1f-5536-91e6-e6963e5d8c2b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50146 is fixed in version 2.10.15-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2026-54298",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:d3529371-8c0d-5638-8103-4a7c06ce7eab",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54298 is fixed in version 2.10.15-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2026-54299",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:c4e04631-3bbe-5674-96a1-0cdc38bf80b1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54299 is fixed in version 2.10.15-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2026-59728",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:1dfc8a87-a015-5a6f-823c-2d9b59e71f7b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59728 is fixed in version 2.10.15-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2026-59729",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:cb4da67b-115d-531b-901c-630f53dab760",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59729 is fixed in version 2.10.15-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2026-73422",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:4796e630-d9c9-52ce-b8be-56c31a867945",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73422 is fixed in version 2.10.15-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "CVE-2026-84376",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:94b8c3dd-8916-5baf-9aea-560387585b26",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-84376 is fixed in version 2.10.15-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "GHSA-26w7-cxv4-gfx2",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:e3527d13-6c62-54b1-8bd1-b79ce782337f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 is fixed in version 2.10.15-tuxcare.11 of create-astro."
      }
    },
    {
      "id": "GHSA-4g3v-8h47-v7g6",
      "affects": [
        {
          "ref": "pkg:npm/create-astro@2.10.15-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:6c4991a3-5950-5de5-b87b-8739641e665e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 2.10.15-tuxcare.11 of create-astro."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/create-astro@2.10.15-tuxcare.11"
    }
  ]
}