{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b8e7efae-4e45-5165-b715-f2a699e776ed", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.6", "type": "library", "name": "@astrojs/webapi", "version": "2.10.15-tuxcare.6", "purl": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.6" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:2a766334-f9d4-5a86-94ba-7a777d8de704", "id": "CVE-2024-56140", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 2.10.15-tuxcare.6 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:cb2b0e07-76dd-5794-8fb3-31870a44e668", "id": "CVE-2024-56159", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 2.10.15-tuxcare.6 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:589f8f36-3089-5b87-ae4f-b226ff698347", "id": "CVE-2025-55303", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55303 is fixed in version 2.10.15-tuxcare.6 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:30f0b17c-107c-5cd4-aaa1-495613d4b6e6", "id": "CVE-2025-61925", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 2.10.15-tuxcare.6 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:3f973eb4-4f0e-515b-b587-154b55d0f5df", "id": "CVE-2025-64757", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 2.10.15-tuxcare.6 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:1adebf38-39a8-56ff-aa98-21129f38c5e1", "id": "CVE-2025-64764", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 2.10.15-tuxcare.6 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:687a5a2c-dba0-521a-8d2b-b06365a3f8a4", "id": "CVE-2025-64765", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 2.10.15-tuxcare.6 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:a9a6e863-b97f-5630-94e8-169323151321", "id": "CVE-2025-65019", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 2.10.15-tuxcare.6 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:c6766cd9-34c3-5d26-9cd7-7a6db9d0cc2f", "id": "CVE-2025-66202", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 2.10.15-tuxcare.6 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:3944c1e2-1a0d-5d97-803e-7f0e0f4a0440", "id": "CVE-2026-33769", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 2.10.15-tuxcare.6 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:65e44cf1-6545-5e64-bfe7-f4b87e71aae3", "id": "CVE-2026-41067", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 2.10.15-tuxcare.6 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:bc2a3492-0098-5a87-bcf2-3b8ad9d024c8", "id": "CVE-2026-45028", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 2.10.15-tuxcare.6 of @astrojs/webapi. not_affected \u2014 Astro version 2.10.14 is not affected by CVE-2026-45028. The server islands feature with encrypted parameter handling does not exist in this version. The vulnerability requires server islands (introduced in later versions) to be present, specifically the encryption/decryption of props and slots parameters via AES-GCM. Version 2.10.14 predates this feature entirely. While the repository contains..." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:2eb1b906-a01a-59ba-8d58-c989cd2a18f2", "id": "CVE-2026-50146", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 2.10.15-tuxcare.6 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:0d335d48-059b-5446-9998-8f296670b367", "id": "CVE-2026-54298", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 2.10.15-tuxcare.6 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:21875d92-9fe0-5b71-84a0-3bd3ce65336a", "id": "CVE-2026-54299", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 2.10.15-tuxcare.6 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:1455167f-86ca-5b6f-aa9e-4ba00a017e14", "id": "CVE-2026-59728", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 2.10.15-tuxcare.6 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:5d5a65c8-ce3f-56dc-b69e-3b99b679e846", "id": "CVE-2026-59729", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59729 affects version 2.10.15-tuxcare.6 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:b5c53187-b997-59be-86c3-0aa7dbc46598", "id": "CVE-2026-73422", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73422 affects version 2.10.15-tuxcare.6 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:6cc5a1a5-ba88-5835-b8c6-be3bd93c872f", "id": "CVE-2026-84376", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-84376 affects version 2.10.15-tuxcare.6 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:812365fd-dd1c-5c6a-a088-f252f9eb2675", "id": "GHSA-26w7-cxv4-gfx2", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 affects version 2.10.15-tuxcare.6 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:88f2bc11-3227-56b6-a3ec-b5302102beaa", "id": "GHSA-4g3v-8h47-v7g6", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 affects version 2.10.15-tuxcare.6 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.6" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.6" } ] }