{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:36216c24-a063-51ce-98be-468a2ae30c0e", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.7", "type": "library", "name": "@astrojs/prism", "version": "2.10.15-tuxcare.7", "purl": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.7" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:dcb3171a-2cef-5086-b860-d1a6a30344cf", "id": "CVE-2024-56140", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 2.10.15-tuxcare.7 of @astrojs/prism." }, "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:1382712c-41c0-5500-90bf-b9f783dbed6b", "id": "CVE-2024-56159", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 2.10.15-tuxcare.7 of @astrojs/prism." }, "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:0ad5bcff-d6ff-574e-a372-24f2c607ac4d", "id": "CVE-2025-55303", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55303 is fixed in version 2.10.15-tuxcare.7 of @astrojs/prism." }, "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:bf7994d8-2ca9-5bf9-8032-7d056af68129", "id": "CVE-2025-61925", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 2.10.15-tuxcare.7 of @astrojs/prism." }, "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:d3d5bfbb-dc49-5e6b-8634-105882240eaa", "id": "CVE-2025-64757", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 2.10.15-tuxcare.7 of @astrojs/prism." }, "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:78f751ee-a8e1-59ac-a520-b30d3f98234f", "id": "CVE-2025-64764", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 2.10.15-tuxcare.7 of @astrojs/prism." }, "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:87b06497-ddd8-57c7-9760-4ad11216cb45", "id": "CVE-2025-64765", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 2.10.15-tuxcare.7 of @astrojs/prism." }, "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:4dc6c2e8-8a17-501c-9f0e-8fada0e5dca6", "id": "CVE-2025-65019", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 2.10.15-tuxcare.7 of @astrojs/prism." }, "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:e47aa070-a034-599c-923c-8a9941a782fc", "id": "CVE-2025-66202", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 2.10.15-tuxcare.7 of @astrojs/prism." }, "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:09a6884a-3348-58e4-b9cc-7774c9eccfbf", "id": "CVE-2026-33769", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 2.10.15-tuxcare.7 of @astrojs/prism." }, "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:9a741761-3ace-5c50-8f68-011fa1f2e52b", "id": "CVE-2026-41067", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 2.10.15-tuxcare.7 of @astrojs/prism." }, "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:8c44f601-19bb-52fa-82c9-4d698c8014b3", "id": "CVE-2026-45028", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 2.10.15-tuxcare.7 of @astrojs/prism. not_affected \u2014 Astro version 2.10.14 is not affected by CVE-2026-45028. The server islands feature with encrypted parameter handling does not exist in this version. The vulnerability requires server islands (introduced in later versions) to be present, specifically the encryption/decryption of props and slots parameters via AES-GCM. Version 2.10.14 predates this feature entirely. While the repository contains..." }, "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:2337c1cc-2d48-5d29-974e-d293a898ee22", "id": "CVE-2026-50146", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 2.10.15-tuxcare.7 of @astrojs/prism." }, "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:7ad62d70-fa0b-51d0-a998-db672bb492ba", "id": "CVE-2026-54298", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 2.10.15-tuxcare.7 of @astrojs/prism." }, "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:6168a8a2-4b2d-51ff-bec8-7070f24c0a41", "id": "CVE-2026-54299", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 2.10.15-tuxcare.7 of @astrojs/prism." }, "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:7b2f8406-70bd-5201-9518-851ffeec17a5", "id": "CVE-2026-59728", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 2.10.15-tuxcare.7 of @astrojs/prism." }, "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:c98d432e-12b3-5f24-b33f-c36f3bdc500b", "id": "CVE-2026-59729", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59729 affects version 2.10.15-tuxcare.7 of @astrojs/prism." }, "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:6e22c8dd-fd08-5300-85dc-d4db5da36755", "id": "CVE-2026-73422", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73422 affects version 2.10.15-tuxcare.7 of @astrojs/prism." }, "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:ee5e5880-9906-5dab-b6ed-819df87d9c71", "id": "CVE-2026-84376", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-84376 affects version 2.10.15-tuxcare.7 of @astrojs/prism." }, "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:15b95269-87f3-50c1-9a1f-f70f1f367ed2", "id": "GHSA-26w7-cxv4-gfx2", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 affects version 2.10.15-tuxcare.7 of @astrojs/prism." }, "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:516c1c98-ede2-57ff-a52d-8d0c07629fea", "id": "GHSA-4g3v-8h47-v7g6", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 affects version 2.10.15-tuxcare.7 of @astrojs/prism." }, "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.7" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.7" } ] }