{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:88b26b45-c73c-5e78-b4f0-28a40f9c42c7",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.6",
      "type": "library",
      "name": "@astrojs/prism",
      "version": "2.10.15-tuxcare.6",
      "purl": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.6"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:c5432225-f357-5039-b593-6c9620a2b4a9",
      "id": "CVE-2024-56140",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56140 is fixed in version 2.10.15-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85134710-2e2b-526f-8311-230844553da4",
      "id": "CVE-2024-56159",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56159 is fixed in version 2.10.15-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc8192ed-fa52-5e70-9eeb-1a89de3f17e6",
      "id": "CVE-2025-55303",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55303 is fixed in version 2.10.15-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:101348b4-5577-543e-b3f3-c00f3f2635e5",
      "id": "CVE-2025-61925",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61925 is fixed in version 2.10.15-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a600ccd-88f5-5e60-9fc6-921efdd31d67",
      "id": "CVE-2025-64757",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64757 is fixed in version 2.10.15-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f910d65b-c61f-5617-a2ec-7fff87842767",
      "id": "CVE-2025-64764",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64764 is fixed in version 2.10.15-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:debe97bf-9f8c-579d-8442-463a16a1e370",
      "id": "CVE-2025-64765",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64765 is fixed in version 2.10.15-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40872368-cd9b-5fc8-a288-169e95824b08",
      "id": "CVE-2025-65019",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-65019 is fixed in version 2.10.15-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8693a6e9-2ff3-5543-a514-186e020014ba",
      "id": "CVE-2025-66202",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66202 is fixed in version 2.10.15-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ffb2f023-3a7e-5c9f-934d-372121a1532a",
      "id": "CVE-2026-33769",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33769 is fixed in version 2.10.15-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:207e8786-bd3d-53da-b0a6-d9520c841128",
      "id": "CVE-2026-41067",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41067 is fixed in version 2.10.15-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3523a0df-d377-5cca-a286-b354ca1731b3",
      "id": "CVE-2026-45028",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-45028 does not affect version 2.10.15-tuxcare.6 of @astrojs/prism. not_affected \u2014 Astro version 2.10.14 is not affected by CVE-2026-45028. The server islands feature with encrypted parameter handling does not exist in this version. The vulnerability requires server islands (introduced in later versions) to be present, specifically the encryption/decryption of props and slots parameters via AES-GCM. Version 2.10.14 predates this feature entirely. While the repository contains..."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c6d49d9-b796-5009-8bed-de49bd6bb839",
      "id": "CVE-2026-50146",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50146 is fixed in version 2.10.15-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:535d118c-ace6-5478-be6a-e48dbff1a262",
      "id": "CVE-2026-54298",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54298 is fixed in version 2.10.15-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39a1cf33-9a75-5e38-bf5c-e32a1d6015b6",
      "id": "CVE-2026-54299",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54299 is fixed in version 2.10.15-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d3451f7-f1da-5994-b007-d3d1d6f80622",
      "id": "CVE-2026-59728",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59728 is fixed in version 2.10.15-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e7c9d48-e463-5ae3-9d34-c99030c4dd63",
      "id": "CVE-2026-59729",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59729 affects version 2.10.15-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5616d234-049a-5ad3-b22f-51a1df1edd8a",
      "id": "CVE-2026-73422",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73422 affects version 2.10.15-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b2ecd9c-43b6-5d59-bad3-9d3b8be61d7d",
      "id": "CVE-2026-84376",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-84376 affects version 2.10.15-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36c35eb4-b7e7-5523-b097-03d9949cc89c",
      "id": "GHSA-26w7-cxv4-gfx2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 affects version 2.10.15-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0839cb6d-9754-51f3-8113-cfe74cc076f8",
      "id": "GHSA-4g3v-8h47-v7g6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 affects version 2.10.15-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.6"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.6"
    }
  ]
}