{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:a400071b-e0d2-5125-a44b-6996d0d7fee8",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/astro@2.10.15-tuxcare.7",
      "type": "library",
      "name": "astro",
      "version": "2.10.15-tuxcare.7",
      "purl": "pkg:npm/astro@2.10.15-tuxcare.7"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:bdf47934-e679-53af-b548-578fefd6b7c3",
      "id": "CVE-2024-56140",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56140 is fixed in version 2.10.15-tuxcare.7 of astro."
      },
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1f44038-9602-5822-906e-cdfc6c706467",
      "id": "CVE-2024-56159",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56159 is fixed in version 2.10.15-tuxcare.7 of astro."
      },
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be510f5a-11a5-57ab-b9ec-5bc22a59a18d",
      "id": "CVE-2025-55303",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55303 is fixed in version 2.10.15-tuxcare.7 of astro."
      },
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f3b93db-cfe5-55fb-933c-01744648d67d",
      "id": "CVE-2025-61925",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61925 is fixed in version 2.10.15-tuxcare.7 of astro."
      },
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f40de860-f619-5ed4-8cf6-00d82ce72584",
      "id": "CVE-2025-64757",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64757 is fixed in version 2.10.15-tuxcare.7 of astro."
      },
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8596e5e7-14f7-5470-be0f-8477db429392",
      "id": "CVE-2025-64764",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64764 is fixed in version 2.10.15-tuxcare.7 of astro."
      },
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7b0afaa-43df-51d2-9b01-77eaacfdbe61",
      "id": "CVE-2025-64765",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64765 is fixed in version 2.10.15-tuxcare.7 of astro."
      },
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dba57b52-9a35-5efd-ab9f-95f7ebebe5a2",
      "id": "CVE-2025-65019",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-65019 is fixed in version 2.10.15-tuxcare.7 of astro."
      },
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab95b5b5-eb0a-5a58-9301-662a3239009a",
      "id": "CVE-2025-66202",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66202 is fixed in version 2.10.15-tuxcare.7 of astro."
      },
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29cc5e3a-f1ca-5405-b232-85a14b97b743",
      "id": "CVE-2026-33769",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33769 is fixed in version 2.10.15-tuxcare.7 of astro."
      },
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45a1abe3-7a02-587d-8ab3-a99db12cbf33",
      "id": "CVE-2026-41067",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41067 is fixed in version 2.10.15-tuxcare.7 of astro."
      },
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1417e3ef-2e02-50ee-9f0e-9eb6ca62cf9f",
      "id": "CVE-2026-45028",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-45028 does not affect version 2.10.15-tuxcare.7 of astro. not_affected \u2014 Astro version 2.10.14 is not affected by CVE-2026-45028. The server islands feature with encrypted parameter handling does not exist in this version. The vulnerability requires server islands (introduced in later versions) to be present, specifically the encryption/decryption of props and slots parameters via AES-GCM. Version 2.10.14 predates this feature entirely. While the repository contains..."
      },
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:922aa54f-6317-5129-b61f-be1e8345e83d",
      "id": "CVE-2026-50146",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50146 is fixed in version 2.10.15-tuxcare.7 of astro."
      },
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2bcc86a0-1bd7-573f-98e7-b5dc25a6bd61",
      "id": "CVE-2026-54298",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54298 is fixed in version 2.10.15-tuxcare.7 of astro."
      },
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:129111d4-fd4c-5f3d-9302-aae7779224a1",
      "id": "CVE-2026-54299",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54299 is fixed in version 2.10.15-tuxcare.7 of astro."
      },
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42cb87d7-a800-51cd-900a-6114b2a048f4",
      "id": "CVE-2026-59728",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59728 is fixed in version 2.10.15-tuxcare.7 of astro."
      },
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7abf86b0-bc41-54a4-bf5b-9f26d6a91025",
      "id": "CVE-2026-59729",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59729 affects version 2.10.15-tuxcare.7 of astro."
      },
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:891e0962-c881-5936-b626-0d575c213802",
      "id": "CVE-2026-73422",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73422 affects version 2.10.15-tuxcare.7 of astro."
      },
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7710aa18-8044-5ffb-8b42-26e3fa22a790",
      "id": "CVE-2026-84376",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-84376 affects version 2.10.15-tuxcare.7 of astro."
      },
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0d800a2-9eb6-5c50-b43d-7beec632b5b2",
      "id": "GHSA-26w7-cxv4-gfx2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 affects version 2.10.15-tuxcare.7 of astro."
      },
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e544d12-4ec5-5766-89a9-657786c783cf",
      "id": "GHSA-4g3v-8h47-v7g6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 affects version 2.10.15-tuxcare.7 of astro."
      },
      "affects": [
        {
          "ref": "pkg:npm/astro@2.10.15-tuxcare.7"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/astro@2.10.15-tuxcare.7"
    }
  ]
}