{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:7a025d19-26b3-5bd5-b763-ce820514cc2f", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.6", "type": "library", "name": "@astrojs/telemetry", "version": "2.10.15-tuxcare.6", "purl": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.6" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:bca0e492-03bc-5ff5-9de5-1ebf6d5fa79c", "id": "CVE-2024-56140", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 2.10.15-tuxcare.6 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:ba667972-a9e3-51e1-bdbd-0079dbb24157", "id": "CVE-2024-56159", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 2.10.15-tuxcare.6 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:1280d20e-23f9-510c-969d-7dab93c39cc4", "id": "CVE-2025-55303", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55303 is fixed in version 2.10.15-tuxcare.6 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:8f1369ac-3970-56e8-8bb9-79fbb7a596a9", "id": "CVE-2025-61925", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 2.10.15-tuxcare.6 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:536b620c-be1b-5cd1-8ee7-03941c6fc0ce", "id": "CVE-2025-64757", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 2.10.15-tuxcare.6 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:3bfcf387-8877-5a6f-b609-b292c34347d1", "id": "CVE-2025-64764", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 2.10.15-tuxcare.6 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:a650f821-d681-5f23-9dab-e17d26e07d74", "id": "CVE-2025-64765", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 2.10.15-tuxcare.6 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:ed629335-9adf-55e6-845e-ecf915875d13", "id": "CVE-2025-65019", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 2.10.15-tuxcare.6 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:69dc5722-8c76-56fd-83d7-a0a9fcd1f62a", "id": "CVE-2025-66202", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 2.10.15-tuxcare.6 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:e44b7ede-b21f-508b-b38b-70465edcff29", "id": "CVE-2026-33769", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 2.10.15-tuxcare.6 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:bbb4eab3-2c46-595c-b1d0-a9c7871ca99e", "id": "CVE-2026-41067", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 2.10.15-tuxcare.6 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:eaee5973-e792-505e-a53e-ad917e6e125a", "id": "CVE-2026-45028", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 2.10.15-tuxcare.6 of @astrojs/telemetry. not_affected \u2014 Astro version 2.10.14 is not affected by CVE-2026-45028. The server islands feature with encrypted parameter handling does not exist in this version. The vulnerability requires server islands (introduced in later versions) to be present, specifically the encryption/decryption of props and slots parameters via AES-GCM. Version 2.10.14 predates this feature entirely. While the repository contains..." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:68628917-af88-507e-a0dc-1f977a6f8aff", "id": "CVE-2026-50146", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 2.10.15-tuxcare.6 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:579a5703-234b-5ee8-8f65-1d2541f01d36", "id": "CVE-2026-54298", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 2.10.15-tuxcare.6 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:0c508709-994f-5eeb-9fb7-a224bb1cd051", "id": "CVE-2026-54299", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 2.10.15-tuxcare.6 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:848c8002-379b-50c5-97b3-2f320fd47a96", "id": "CVE-2026-59728", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 2.10.15-tuxcare.6 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:bf83db99-cc86-5522-86f3-efc597fa1c8e", "id": "CVE-2026-59729", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59729 affects version 2.10.15-tuxcare.6 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:f8c049a9-2d7a-5569-b1c0-c876def71695", "id": "CVE-2026-73422", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73422 affects version 2.10.15-tuxcare.6 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:9084e8b6-75a7-5e54-a581-c59c58a7ec3e", "id": "CVE-2026-84376", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-84376 affects version 2.10.15-tuxcare.6 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:590c7520-22ac-5ad9-bb02-7046f0483103", "id": "GHSA-26w7-cxv4-gfx2", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 affects version 2.10.15-tuxcare.6 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:7fe5d152-5642-5b5f-82b1-dc19e13d77f8", "id": "GHSA-4g3v-8h47-v7g6", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 affects version 2.10.15-tuxcare.6 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.6" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.6" } ] }