{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:1c2277ef-f212-55d5-a8cf-d96aeea55f5e",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.7",
      "type": "library",
      "name": "@astrojs/rss",
      "version": "2.10.15-tuxcare.7",
      "purl": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.7"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:9782876c-b532-55e4-964b-d123ccd5e538",
      "id": "CVE-2024-56140",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56140 is fixed in version 2.10.15-tuxcare.7 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:638074b0-91c2-513b-b796-ff0d2cbb4fd9",
      "id": "CVE-2024-56159",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56159 is fixed in version 2.10.15-tuxcare.7 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38506dd9-c66b-58b4-af9c-aa7840a33b01",
      "id": "CVE-2025-55303",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55303 is fixed in version 2.10.15-tuxcare.7 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2817e484-7841-5bd7-b19f-f66bf61338d4",
      "id": "CVE-2025-61925",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61925 is fixed in version 2.10.15-tuxcare.7 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55056e78-d276-5156-8dd9-ee427d6a94fb",
      "id": "CVE-2025-64757",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64757 is fixed in version 2.10.15-tuxcare.7 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b13f407b-b379-501e-a962-b193630206ce",
      "id": "CVE-2025-64764",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64764 is fixed in version 2.10.15-tuxcare.7 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8df1c3f1-3d35-5780-a085-1c8908715f55",
      "id": "CVE-2025-64765",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64765 is fixed in version 2.10.15-tuxcare.7 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3e64352-bfef-5693-9106-b44f65d5a0c4",
      "id": "CVE-2025-65019",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-65019 is fixed in version 2.10.15-tuxcare.7 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0d7c163-7f13-54b7-85bd-cc11114103d6",
      "id": "CVE-2025-66202",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66202 is fixed in version 2.10.15-tuxcare.7 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad33e4f9-6948-5d78-8565-68f6ca753b69",
      "id": "CVE-2026-33769",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33769 is fixed in version 2.10.15-tuxcare.7 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da042428-aefa-55d0-9f10-42bb98621260",
      "id": "CVE-2026-41067",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41067 is fixed in version 2.10.15-tuxcare.7 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7be8c4bc-d2f6-5dbc-8b61-44a664d1b105",
      "id": "CVE-2026-45028",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-45028 does not affect version 2.10.15-tuxcare.7 of @astrojs/rss. not_affected \u2014 Astro version 2.10.14 is not affected by CVE-2026-45028. The server islands feature with encrypted parameter handling does not exist in this version. The vulnerability requires server islands (introduced in later versions) to be present, specifically the encryption/decryption of props and slots parameters via AES-GCM. Version 2.10.14 predates this feature entirely. While the repository contains..."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21118b89-abac-5573-a77f-04148c94e325",
      "id": "CVE-2026-50146",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50146 is fixed in version 2.10.15-tuxcare.7 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ace59bae-5dbe-5aba-beff-fc6357180402",
      "id": "CVE-2026-54298",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54298 is fixed in version 2.10.15-tuxcare.7 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a750c114-7dfb-5813-8270-1f2a8dc5945e",
      "id": "CVE-2026-54299",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54299 is fixed in version 2.10.15-tuxcare.7 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25c9cac7-cc7f-5f2a-81f6-85fc832bc486",
      "id": "CVE-2026-59728",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59728 is fixed in version 2.10.15-tuxcare.7 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65859c12-ad99-5ed4-b3a3-7dece60067b4",
      "id": "CVE-2026-59729",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59729 affects version 2.10.15-tuxcare.7 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba2d2dc8-ba1c-5ec3-be99-a98bf0492b22",
      "id": "CVE-2026-73422",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73422 affects version 2.10.15-tuxcare.7 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eee7fe91-648d-5255-9f5d-381670e70f0d",
      "id": "CVE-2026-84376",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-84376 affects version 2.10.15-tuxcare.7 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07c8ef32-41b8-5702-a931-bd73efc8a937",
      "id": "GHSA-26w7-cxv4-gfx2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 affects version 2.10.15-tuxcare.7 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89ddce8c-17de-526a-8260-508b4422b2fd",
      "id": "GHSA-4g3v-8h47-v7g6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 affects version 2.10.15-tuxcare.7 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.7"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.7"
    }
  ]
}