{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:d504dad8-e4e8-5a2a-8d19-81a7785b93ad",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.6",
      "type": "library",
      "name": "@astrojs/prism",
      "version": "3.6.5-tuxcare.6",
      "purl": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.6"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:ba39ad26-587a-57e9-8a67-b755db857b02",
      "id": "CVE-2024-47885",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47885 is fixed in version 3.6.5-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:328b086f-1a4d-5faa-8fb3-5d1249eb6b44",
      "id": "CVE-2024-56140",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56140 is fixed in version 3.6.5-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb9f4115-303e-5823-9207-7d635982bb50",
      "id": "CVE-2024-56159",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56159 is fixed in version 3.6.5-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6fa92693-64b4-5d9a-b40a-053236ba015d",
      "id": "CVE-2025-55303",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55303 is fixed in version 3.6.5-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c4f101d-2682-5d1a-a4b8-10793af763df",
      "id": "CVE-2025-61925",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61925 is fixed in version 3.6.5-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57f98c56-57ce-5914-ab73-46c180dc7c0a",
      "id": "CVE-2025-64525",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64525 is fixed in version 3.6.5-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3439e35-2e53-5048-b30a-4bcc8b1eb5ca",
      "id": "CVE-2025-64757",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64757 is fixed in version 3.6.5-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bd6f37e-575f-5244-b236-ecf3f7a0cbda",
      "id": "CVE-2025-64764",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64764 is fixed in version 3.6.5-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c45d1e33-c745-5530-9c00-f5bec737fd5d",
      "id": "CVE-2025-64765",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64765 is fixed in version 3.6.5-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:99a12bf6-b2a9-5b4a-a0ca-93ab1e888ccd",
      "id": "CVE-2025-65019",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-65019 is fixed in version 3.6.5-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ce06e8d-ef4f-5539-a76a-5a065c89375b",
      "id": "CVE-2025-66202",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66202 is fixed in version 3.6.5-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d7441d6-ef0e-5957-9512-e41ab35e95d5",
      "id": "CVE-2026-33769",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33769 is fixed in version 3.6.5-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64aa545b-7ec8-5b46-bac0-77b6f112c97d",
      "id": "CVE-2026-41067",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41067 is fixed in version 3.6.5-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d1c1fd8-8c84-5dd7-bd2a-08e0e6d6497d",
      "id": "CVE-2026-45028",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-45028 does not affect version 3.6.5-tuxcare.6 of @astrojs/prism. not_affected \u2014 Astro version 3.6.5 is NOT AFFECTED by CVE-2026-45028. The vulnerability concerns server islands encryption (AES-GCM ciphertext replay between props and slots), but server islands functionality does not exist in version 3.6.5. The feature was introduced in later versions (~May 2025, v5.x/6.x), and the vulnerability was fixed in v6.1.10 (April 2026). Exhaustive search across 327 source files con..."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a23fa2d6-4508-511b-a805-c32c8f1dda2f",
      "id": "CVE-2026-50146",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50146 is fixed in version 3.6.5-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:626053ef-8307-50ec-8d46-c772f6271136",
      "id": "CVE-2026-54298",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54298 is fixed in version 3.6.5-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:017534cf-7fd1-5b0f-bc19-943c6d0e6901",
      "id": "CVE-2026-54299",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54299 is fixed in version 3.6.5-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26008ab9-3040-5f08-b48d-e58d41d019ab",
      "id": "CVE-2026-59728",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59728 is fixed in version 3.6.5-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:499ac3cc-b3c9-5328-956e-c92890f2ae69",
      "id": "CVE-2026-59729",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59729 is fixed in version 3.6.5-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b02486e2-38f8-50ff-95a4-73363678e112",
      "id": "CVE-2026-73422",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73422 affects version 3.6.5-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac59340f-20cf-56bc-b079-0894f6e0218d",
      "id": "CVE-2026-84376",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-84376 affects version 3.6.5-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a7bf17e-fe0a-5d28-a4a7-987bddc46317",
      "id": "GHSA-26w7-cxv4-gfx2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 affects version 3.6.5-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0410e615-54d4-5e1b-986f-dc85a99f556c",
      "id": "GHSA-4g3v-8h47-v7g6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 affects version 3.6.5-tuxcare.6 of @astrojs/prism."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.6"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.6"
    }
  ]
}