{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:27549a0f-e349-5aa4-81a0-e7bcd20fb24e", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "astro", "purl": "pkg:npm/astro@2.10.15-tuxcare.10", "type": "library", "bom-ref": "pkg:npm/astro@2.10.15-tuxcare.10", "version": "2.10.15-tuxcare.10", "pedigree": { "ancestors": [ { "name": "astro", "purl": "pkg:npm/astro@2.10.15", "type": "library", "version": "2.10.15" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-47885", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:2dc657d7-e1a2-5707-a8d9-2794b0af042b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-47885 affects version 2.10.15-tuxcare.10 of astro." } }, { "id": "CVE-2024-56140", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:09add4f4-7683-59d1-86ac-8f1239f288bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 2.10.15-tuxcare.10 of astro." } }, { "id": "CVE-2024-56159", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:26ac415b-5b01-5627-9438-6ed45491cb6d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 2.10.15-tuxcare.10 of astro." } }, { "id": "CVE-2025-54793", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:a596c235-33cf-5472-8d86-d61b4d95c9ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-54793 affects version 2.10.15-tuxcare.10 of astro." } }, { "id": "CVE-2025-55303", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:14adc4bf-a55f-5192-821b-35e9dc7b1a20", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55303 affects version 2.10.15-tuxcare.10 of astro, and is fixed in 2.10.15-tuxcare.11." } }, { "id": "CVE-2025-59837", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:6efa1c75-51f7-548e-a42a-131f1b9e2bf4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59837 affects version 2.10.15-tuxcare.10 of astro." } }, { "id": "CVE-2025-61925", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:91f89984-4408-5993-ab9d-9d643b9d976f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 2.10.15-tuxcare.10 of astro." } }, { "id": "CVE-2025-64525", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:ecfa1d5a-913c-5fed-861b-ddbb3277fe6f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-64525 affects version 2.10.15-tuxcare.10 of astro." } }, { "id": "CVE-2025-64745", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:54e777b2-8f04-5e92-947a-74a8e565ed51", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-64745 affects version 2.10.15-tuxcare.10 of astro." } }, { "id": "CVE-2025-64757", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:442f2ef6-14a4-5b2e-9d20-96bd2913b5e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 2.10.15-tuxcare.10 of astro." } }, { "id": "CVE-2025-64764", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:5260751d-ee76-58b5-b6b0-8bc2d60f88d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 2.10.15-tuxcare.10 of astro." } }, { "id": "CVE-2025-64765", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:f1b260e0-5d66-5f82-87a8-356f9c01ae50", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 2.10.15-tuxcare.10 of astro." } }, { "id": "CVE-2025-65019", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:2e22bb7b-017b-5403-ab77-80bbda733253", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 2.10.15-tuxcare.10 of astro." } }, { "id": "CVE-2025-66202", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:8653e5d3-072c-5578-8151-580723841714", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 2.10.15-tuxcare.10 of astro." } }, { "id": "CVE-2026-114127", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:99469123-0023-53c3-bf6b-7ddd7a63b013", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-114127 affects version 2.10.15-tuxcare.10 of astro." } }, { "id": "CVE-2026-114128", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:0184fa0d-9e59-580d-ae6c-ff538371d90c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-114128 affects version 2.10.15-tuxcare.10 of astro." } }, { "id": "CVE-2026-33769", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:95ef01e2-f9d4-5e8e-adf2-e8424faddbeb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 2.10.15-tuxcare.10 of astro." } }, { "id": "CVE-2026-41067", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:0c1ad995-a8b7-515f-b485-571956720adf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 2.10.15-tuxcare.10 of astro." } }, { "id": "CVE-2026-45028", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:1c462aa2-6355-522a-a8c9-ae7ca66d4b87", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 2.10.15-tuxcare.10 of astro. not_affected \u2014 Astro version 2.10.14 is not affected by CVE-2026-45028. The server islands feature with encrypted parameter handling does not exist in this version. The vulnerability requires server islands (introduced in later versions) to be present, specifically the encryption/decryption of props and slots parameters via AES-GCM. Version 2.10.14 predates this feature entirely. While the repository contains...", "justification": "code_not_present" } }, { "id": "CVE-2026-50146", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:b8903e42-91f6-514b-9086-243279b1b9db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 2.10.15-tuxcare.10 of astro." } }, { "id": "CVE-2026-54298", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:2a96be95-c2ef-5445-97e0-22838b03f6d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 2.10.15-tuxcare.10 of astro." } }, { "id": "CVE-2026-54299", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:c69b164f-055b-5610-9f3e-f97c9a74c513", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 2.10.15-tuxcare.10 of astro." } }, { "id": "CVE-2026-59727", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:f7c1a386-c734-5531-b20d-d9b7dd9af06a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59727 affects version 2.10.15-tuxcare.10 of astro." } }, { "id": "CVE-2026-59728", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:1abbd337-fd25-555d-ab59-b6242a890bbf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 2.10.15-tuxcare.10 of astro." } }, { "id": "CVE-2026-59729", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:b2db3a64-2cd0-52ee-a575-9aec5d430a27", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59729 is fixed in version 2.10.15-tuxcare.10 of astro." } }, { "id": "CVE-2026-59731", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:26c8d36d-1150-56b8-a423-56936626ea00", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59731 affects version 2.10.15-tuxcare.10 of astro." } }, { "id": "CVE-2026-73422", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:7e4d2c80-7166-5250-a933-96a5303d3b10", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73422 is fixed in version 2.10.15-tuxcare.10 of astro." } }, { "id": "CVE-2026-73423", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:9359a58d-2741-5d3f-91c6-2c2670c3f92e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73423 affects version 2.10.15-tuxcare.10 of astro." } }, { "id": "CVE-2026-84376", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:db69bf04-01cc-527d-888d-e9243b80954a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-84376 is fixed in version 2.10.15-tuxcare.10 of astro." } }, { "id": "GHSA-26w7-cxv4-gfx2", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:ce91c2ed-956c-5770-b429-a583bd606039", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 is fixed in version 2.10.15-tuxcare.10 of astro." } }, { "id": "GHSA-4g3v-8h47-v7g6", "affects": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.10" } ], "bom-ref": "urn:uuid:e975a605-fd96-5739-8fd3-8a99cb18efec", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 2.10.15-tuxcare.10 of astro." } } ], "dependencies": [ { "ref": "pkg:npm/astro@2.10.15-tuxcare.10" } ] }