{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:955f1c37-3bff-59ef-ad1e-b9a0aca77eb1",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.6",
      "type": "library",
      "name": "@astrojs/rss",
      "version": "3.6.5-tuxcare.6",
      "purl": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.6"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:82a42724-b206-5588-8961-7da9236392ce",
      "id": "CVE-2024-47885",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47885 is fixed in version 3.6.5-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51267c37-1166-5779-b81e-7fb30171ddb4",
      "id": "CVE-2024-56140",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56140 is fixed in version 3.6.5-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:920716b4-6a65-5c71-aeb9-4235873a0f78",
      "id": "CVE-2024-56159",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56159 is fixed in version 3.6.5-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fcd3f05-ee9e-5f50-97d8-79913e3e148b",
      "id": "CVE-2025-55303",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55303 is fixed in version 3.6.5-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a667a9a7-6cdf-5d11-b36b-5cb39992e46b",
      "id": "CVE-2025-61925",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61925 is fixed in version 3.6.5-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5de83195-b532-5c31-8e12-3aa1272d16f1",
      "id": "CVE-2025-64525",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64525 is fixed in version 3.6.5-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:998b2208-c5a5-5f78-8ee2-08f87e1f54a4",
      "id": "CVE-2025-64757",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64757 is fixed in version 3.6.5-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be4919a3-8634-5a8d-b313-875c45bbd5a2",
      "id": "CVE-2025-64764",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64764 is fixed in version 3.6.5-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70efba07-95df-5ef1-bb05-211ab135b762",
      "id": "CVE-2025-64765",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64765 is fixed in version 3.6.5-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ac48b69-be1d-5aa8-ae64-bc740cda91cf",
      "id": "CVE-2025-65019",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-65019 is fixed in version 3.6.5-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac2f5799-0aff-5d4d-aeff-60b1683236ed",
      "id": "CVE-2025-66202",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66202 is fixed in version 3.6.5-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2841f96-713e-508b-9739-2f510dcbe5b1",
      "id": "CVE-2026-33769",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33769 is fixed in version 3.6.5-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b5e55f54-9f10-5743-87d6-031a2d699d44",
      "id": "CVE-2026-41067",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41067 is fixed in version 3.6.5-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c609bfc8-ae68-5343-8671-08dd97c6d57d",
      "id": "CVE-2026-45028",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-45028 does not affect version 3.6.5-tuxcare.6 of @astrojs/rss. not_affected \u2014 Astro version 3.6.5 is NOT AFFECTED by CVE-2026-45028. The vulnerability concerns server islands encryption (AES-GCM ciphertext replay between props and slots), but server islands functionality does not exist in version 3.6.5. The feature was introduced in later versions (~May 2025, v5.x/6.x), and the vulnerability was fixed in v6.1.10 (April 2026). Exhaustive search across 327 source files con..."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eccae608-dbe9-5c3c-9bde-847966cfe456",
      "id": "CVE-2026-50146",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50146 is fixed in version 3.6.5-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:934218ea-b307-5f62-9243-4b75db3218a6",
      "id": "CVE-2026-54298",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54298 is fixed in version 3.6.5-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b4a3a4f-868e-588d-838a-30f609bc95fe",
      "id": "CVE-2026-54299",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54299 is fixed in version 3.6.5-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3a97c54-2ca7-51c3-8a3b-97d0a4f4213c",
      "id": "CVE-2026-59728",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59728 is fixed in version 3.6.5-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f85c6676-5e06-5fe0-8f59-9e05206dfa53",
      "id": "CVE-2026-59729",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59729 is fixed in version 3.6.5-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:112ba0e0-8644-5853-82de-ff375d6cc2fa",
      "id": "CVE-2026-73422",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73422 affects version 3.6.5-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa3afc2a-1f79-53b8-a1a7-db87432fbc0f",
      "id": "CVE-2026-84376",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-84376 affects version 3.6.5-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39b71c9d-7fc6-5151-8a46-39dea64f0a56",
      "id": "GHSA-26w7-cxv4-gfx2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 affects version 3.6.5-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68afa867-8c81-5dfd-bc94-836e0cabe06f",
      "id": "GHSA-4g3v-8h47-v7g6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 affects version 3.6.5-tuxcare.6 of @astrojs/rss."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.6"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.6"
    }
  ]
}