{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:1a5a9fd8-2ce6-58bf-9af5-0e5f8fb486e3", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.7", "type": "library", "name": "@astrojs/webapi", "version": "2.10.15-tuxcare.7", "purl": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.7" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:f61ed5a5-fdfb-53b0-8651-f21bbf78ae17", "id": "CVE-2024-56140", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 2.10.15-tuxcare.7 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:afd20fdc-61d5-5f0f-84bf-71c1b1ea0619", "id": "CVE-2024-56159", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 2.10.15-tuxcare.7 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:0a803708-b68e-592f-b153-ce1108f71e84", "id": "CVE-2025-55303", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55303 is fixed in version 2.10.15-tuxcare.7 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:e40fb876-fae9-5206-8302-1e171987793b", "id": "CVE-2025-61925", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 2.10.15-tuxcare.7 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:f58cdfd7-4b0d-5691-a8e5-801884aadafb", "id": "CVE-2025-64757", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 2.10.15-tuxcare.7 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:f377ce4d-7247-5707-b748-98301b880f59", "id": "CVE-2025-64764", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 2.10.15-tuxcare.7 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:3757ebbe-ab3e-5f3d-a97a-65cae7d3c421", "id": "CVE-2025-64765", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 2.10.15-tuxcare.7 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:bd4e53f3-0bba-5457-b965-3c2a728ed8a9", "id": "CVE-2025-65019", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 2.10.15-tuxcare.7 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:0df33084-ca02-522b-8f99-9dda50ea544c", "id": "CVE-2025-66202", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 2.10.15-tuxcare.7 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:30f1efb7-3ac0-53d6-be1f-46722d3bcff6", "id": "CVE-2026-33769", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 2.10.15-tuxcare.7 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:8bda0b52-62b1-5018-8175-c229d11804f7", "id": "CVE-2026-41067", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 2.10.15-tuxcare.7 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:d4122534-0f33-5e18-8120-534f9133d0fa", "id": "CVE-2026-45028", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 2.10.15-tuxcare.7 of @astrojs/webapi. not_affected \u2014 Astro version 2.10.14 is not affected by CVE-2026-45028. The server islands feature with encrypted parameter handling does not exist in this version. The vulnerability requires server islands (introduced in later versions) to be present, specifically the encryption/decryption of props and slots parameters via AES-GCM. Version 2.10.14 predates this feature entirely. While the repository contains..." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:2c703673-4585-5785-8ca7-253cf01ac6fc", "id": "CVE-2026-50146", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 2.10.15-tuxcare.7 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:011f45aa-b00e-5f7a-89fc-eb6b4c362622", "id": "CVE-2026-54298", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 2.10.15-tuxcare.7 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:1a0c6f2b-e22a-5d3f-849c-38a1ebdfae02", "id": "CVE-2026-54299", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 2.10.15-tuxcare.7 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:2e836786-ae67-513a-9a38-05411c71ccea", "id": "CVE-2026-59728", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 2.10.15-tuxcare.7 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:401d615b-2ed1-540f-8498-5e707f12a575", "id": "CVE-2026-59729", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59729 affects version 2.10.15-tuxcare.7 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:dbaec1ef-aee7-59fc-9ca8-8effe188f380", "id": "CVE-2026-73422", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73422 affects version 2.10.15-tuxcare.7 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:38914850-bb6a-5472-82ac-76cffbee23b4", "id": "CVE-2026-84376", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-84376 affects version 2.10.15-tuxcare.7 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:aebff6ca-d409-5230-9e7e-c2f61994b7af", "id": "GHSA-26w7-cxv4-gfx2", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 affects version 2.10.15-tuxcare.7 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:45a11cd1-fe54-5680-a496-758b3d2efcb5", "id": "GHSA-4g3v-8h47-v7g6", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 affects version 2.10.15-tuxcare.7 of @astrojs/webapi." }, "affects": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.7" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40astrojs/webapi@2.10.15-tuxcare.7" } ] }