{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:f7077959-7d7d-56f5-87b3-e53081a3b0b8", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.7", "type": "library", "name": "@astrojs/telemetry", "version": "2.10.15-tuxcare.7", "purl": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.7" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:0d07c11b-7712-529a-bc87-21390642bf17", "id": "CVE-2024-56140", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 2.10.15-tuxcare.7 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:53c9eeaa-9959-5355-9ca8-cd1a5c98e7a4", "id": "CVE-2024-56159", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 2.10.15-tuxcare.7 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:3b40ff02-f354-5da4-ac63-cf2a2f3a9410", "id": "CVE-2025-55303", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55303 is fixed in version 2.10.15-tuxcare.7 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:407a4ceb-7c14-5bf7-b7cc-42fe37fc5c6d", "id": "CVE-2025-61925", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 2.10.15-tuxcare.7 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:d38b9a0e-d99c-57cc-8c4b-3bec766755dd", "id": "CVE-2025-64757", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 2.10.15-tuxcare.7 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:e5e56ec7-db2a-52a4-bd75-32e1fbadb345", "id": "CVE-2025-64764", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 2.10.15-tuxcare.7 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:c1e408c0-3b79-548f-a274-42f75e205239", "id": "CVE-2025-64765", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 2.10.15-tuxcare.7 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:e97fd379-3354-50f8-adc9-5853c408c2e2", "id": "CVE-2025-65019", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 2.10.15-tuxcare.7 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:0bb6c1e3-a432-58b1-92c9-e0c4e943a0a2", "id": "CVE-2025-66202", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 2.10.15-tuxcare.7 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:18126e80-ee6f-5828-9815-516c43b3ed7e", "id": "CVE-2026-33769", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 2.10.15-tuxcare.7 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:0426e730-5d41-572d-bb3d-479358302423", "id": "CVE-2026-41067", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 2.10.15-tuxcare.7 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:1a42da95-eef3-5d1c-b36e-b2471e7238e2", "id": "CVE-2026-45028", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 2.10.15-tuxcare.7 of @astrojs/telemetry. not_affected \u2014 Astro version 2.10.14 is not affected by CVE-2026-45028. The server islands feature with encrypted parameter handling does not exist in this version. The vulnerability requires server islands (introduced in later versions) to be present, specifically the encryption/decryption of props and slots parameters via AES-GCM. Version 2.10.14 predates this feature entirely. While the repository contains..." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:0e7f7d1b-9036-50da-96c3-73c4e0b954f4", "id": "CVE-2026-50146", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 2.10.15-tuxcare.7 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:6e3fa05f-2301-5eea-9f84-fd6b560a6d5e", "id": "CVE-2026-54298", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 2.10.15-tuxcare.7 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:d9a5bc5a-8d71-5beb-91eb-7b1054dd2b69", "id": "CVE-2026-54299", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 2.10.15-tuxcare.7 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:b060288e-ab75-5573-a78f-d4e2b8fe9651", "id": "CVE-2026-59728", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 2.10.15-tuxcare.7 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:ebba6e51-1272-5a6a-8477-6f49612a50a1", "id": "CVE-2026-59729", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59729 affects version 2.10.15-tuxcare.7 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:1f6a5356-bcb5-5cfa-93a2-04b86c6ccb62", "id": "CVE-2026-73422", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73422 affects version 2.10.15-tuxcare.7 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:c7eeced7-7832-5c2a-8cea-cbe9a513ef89", "id": "CVE-2026-84376", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-84376 affects version 2.10.15-tuxcare.7 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:1fdd0cf4-f84f-5fd1-bb49-dd4d085eda73", "id": "GHSA-26w7-cxv4-gfx2", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 affects version 2.10.15-tuxcare.7 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:7090e596-945d-5c0b-86cc-36d64e76f0de", "id": "GHSA-4g3v-8h47-v7g6", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 affects version 2.10.15-tuxcare.7 of @astrojs/telemetry." }, "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.7" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.7" } ] }