{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:d5dd2600-bb0c-56bb-a03b-8326decc1f66",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.6",
      "type": "library",
      "name": "@astrojs/telemetry",
      "version": "3.6.5-tuxcare.6",
      "purl": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.6"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:c075a935-c322-5b3f-9e84-cc637ca7f837",
      "id": "CVE-2024-47885",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47885 is fixed in version 3.6.5-tuxcare.6 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ddc747c0-286f-5663-900a-76e7b66e8853",
      "id": "CVE-2024-56140",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56140 is fixed in version 3.6.5-tuxcare.6 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a990dfb-6c5f-5965-9852-67e881c03145",
      "id": "CVE-2024-56159",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56159 is fixed in version 3.6.5-tuxcare.6 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee616ac9-485e-5bd2-94c7-f59282f81a61",
      "id": "CVE-2025-55303",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55303 is fixed in version 3.6.5-tuxcare.6 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2f81573-c769-5bd1-b054-1401dece395a",
      "id": "CVE-2025-61925",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61925 is fixed in version 3.6.5-tuxcare.6 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78cc93d2-e7d3-5109-9247-1c8e72277906",
      "id": "CVE-2025-64525",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64525 is fixed in version 3.6.5-tuxcare.6 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ac0de30-68b3-51f3-9ebb-0d0e335622ad",
      "id": "CVE-2025-64757",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64757 is fixed in version 3.6.5-tuxcare.6 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8582a7f9-4f7d-57a8-925e-f54127854f32",
      "id": "CVE-2025-64764",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64764 is fixed in version 3.6.5-tuxcare.6 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e5183c9-250d-5f90-83f9-19d9b93a5865",
      "id": "CVE-2025-64765",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64765 is fixed in version 3.6.5-tuxcare.6 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b803780b-c4d6-5a77-b5ae-786f260d72df",
      "id": "CVE-2025-65019",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-65019 is fixed in version 3.6.5-tuxcare.6 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d2093e2-57a1-56ad-8f4a-2b3742ae882a",
      "id": "CVE-2025-66202",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66202 is fixed in version 3.6.5-tuxcare.6 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11d8c9ce-4eda-543b-8c75-6ced6ad918a7",
      "id": "CVE-2026-33769",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33769 is fixed in version 3.6.5-tuxcare.6 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a448eeb3-f9e8-556e-8a3d-84fd4b64c993",
      "id": "CVE-2026-41067",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41067 is fixed in version 3.6.5-tuxcare.6 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e14f009-1301-5e9f-93ad-abe0be5d558b",
      "id": "CVE-2026-45028",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-45028 does not affect version 3.6.5-tuxcare.6 of @astrojs/telemetry. not_affected \u2014 Astro version 3.6.5 is NOT AFFECTED by CVE-2026-45028. The vulnerability concerns server islands encryption (AES-GCM ciphertext replay between props and slots), but server islands functionality does not exist in version 3.6.5. The feature was introduced in later versions (~May 2025, v5.x/6.x), and the vulnerability was fixed in v6.1.10 (April 2026). Exhaustive search across 327 source files con..."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8ef23ca-2dca-5270-b3fd-9b5ed629225c",
      "id": "CVE-2026-50146",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50146 is fixed in version 3.6.5-tuxcare.6 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7ab41c4c-b9fa-5f94-8059-ed1bab3fec42",
      "id": "CVE-2026-54298",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54298 is fixed in version 3.6.5-tuxcare.6 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9c3ebf3-e657-5811-bcfa-33a35a30162a",
      "id": "CVE-2026-54299",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54299 is fixed in version 3.6.5-tuxcare.6 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1981ff2f-e432-56b7-8bea-d2d18bbb5a46",
      "id": "CVE-2026-59728",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59728 is fixed in version 3.6.5-tuxcare.6 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a83ea676-c260-56ab-af4e-dbb5f7ca289b",
      "id": "CVE-2026-59729",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59729 is fixed in version 3.6.5-tuxcare.6 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b21bbe3-b098-509e-a23d-ac24710e7c15",
      "id": "CVE-2026-73422",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73422 affects version 3.6.5-tuxcare.6 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac91fc24-8cc1-59b9-9058-c5ff780088d2",
      "id": "CVE-2026-84376",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-84376 affects version 3.6.5-tuxcare.6 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:184d9e8c-a17b-5061-95e0-ce3b42d07c61",
      "id": "GHSA-26w7-cxv4-gfx2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 affects version 3.6.5-tuxcare.6 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6cb73006-69b6-568a-9d2a-9b317054d47b",
      "id": "GHSA-4g3v-8h47-v7g6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 affects version 3.6.5-tuxcare.6 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.6"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.6"
    }
  ]
}