{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:cdc3bc82-5de3-53c6-aa74-a7186293e5d8",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.6",
      "type": "library",
      "name": "@astrojs/rss",
      "version": "2.10.15-tuxcare.6",
      "purl": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.6"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:361bbd52-63b0-5453-982c-e378857c6c67",
      "id": "CVE-2024-56140",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56140 is fixed in version 2.10.15-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c3d0e43-980a-5bcc-b54f-084a4b09233f",
      "id": "CVE-2024-56159",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56159 is fixed in version 2.10.15-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ec19e74c-6a2e-5d00-92a9-d2230333a8b2",
      "id": "CVE-2025-55303",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55303 is fixed in version 2.10.15-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79dc5963-7a65-5888-8863-76e2a5b3236c",
      "id": "CVE-2025-61925",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61925 is fixed in version 2.10.15-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42ea7f44-7724-5d37-8400-ededc0acdf8e",
      "id": "CVE-2025-64757",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64757 is fixed in version 2.10.15-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:543579f1-d956-5f2a-b733-36f07a7bc2bc",
      "id": "CVE-2025-64764",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64764 is fixed in version 2.10.15-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8de6ce83-61a5-5f05-a23e-aaafe9960100",
      "id": "CVE-2025-64765",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64765 is fixed in version 2.10.15-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea9b1a65-cd37-5656-aceb-80bec7dd8632",
      "id": "CVE-2025-65019",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-65019 is fixed in version 2.10.15-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d00d37bf-e6e8-56cc-bdd4-0b2959d7f3cf",
      "id": "CVE-2025-66202",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66202 is fixed in version 2.10.15-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba48e63f-0973-51c4-a363-91daa7e8c5c6",
      "id": "CVE-2026-33769",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33769 is fixed in version 2.10.15-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1dfa1a5-a3ef-5ed3-8682-7ac6df6dbc34",
      "id": "CVE-2026-41067",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41067 is fixed in version 2.10.15-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1486fe5-bed6-5c0f-b740-b14106b0ed9b",
      "id": "CVE-2026-45028",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-45028 does not affect version 2.10.15-tuxcare.6 of @astrojs/rss. not_affected \u2014 Astro version 2.10.14 is not affected by CVE-2026-45028. The server islands feature with encrypted parameter handling does not exist in this version. The vulnerability requires server islands (introduced in later versions) to be present, specifically the encryption/decryption of props and slots parameters via AES-GCM. Version 2.10.14 predates this feature entirely. While the repository contains..."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e522139-aeb3-5f1b-99c2-61b2f1cec650",
      "id": "CVE-2026-50146",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50146 is fixed in version 2.10.15-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7c21e85-617e-5f85-8160-9f0853376c50",
      "id": "CVE-2026-54298",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54298 is fixed in version 2.10.15-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:071be4ec-baba-5445-8156-3d0722f51ce1",
      "id": "CVE-2026-54299",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54299 is fixed in version 2.10.15-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e554c7e0-8caf-5524-8f6a-26deadf75670",
      "id": "CVE-2026-59728",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59728 is fixed in version 2.10.15-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb2b4b87-82ca-5a1c-aa9d-ebe5ba0df259",
      "id": "CVE-2026-59729",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59729 affects version 2.10.15-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43425496-07cc-5646-9a4c-2fbd5219ad24",
      "id": "CVE-2026-73422",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73422 affects version 2.10.15-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cdedc5a3-e7d4-5406-89ca-aac2eef22f58",
      "id": "CVE-2026-84376",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-84376 affects version 2.10.15-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d77998f-8737-54da-89af-5f573470e79d",
      "id": "GHSA-26w7-cxv4-gfx2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 affects version 2.10.15-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd806bdc-d963-5d04-9a7e-e72dd85b8fe8",
      "id": "GHSA-4g3v-8h47-v7g6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 affects version 2.10.15-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.6"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.6"
    }
  ]
}