{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:4f89f7d4-57a3-567d-8b2a-96d182fa8494",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "astro",
      "purl": "pkg:npm/astro@5.18.2-tuxcare.1",
      "type": "library",
      "bom-ref": "pkg:npm/astro@5.18.2-tuxcare.1",
      "version": "5.18.2-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "astro",
            "purl": "pkg:npm/astro@5.18.2",
            "type": "library",
            "version": "5.18.2"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-47885",
      "affects": [
        {
          "ref": "pkg:npm/astro@5.18.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0039908d-dd29-51f8-88c6-8ef571d08e11",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47885 affects version 5.18.2-tuxcare.1 of astro."
      }
    },
    {
      "id": "CVE-2024-56140",
      "affects": [
        {
          "ref": "pkg:npm/astro@5.18.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3b21ff0f-6af3-51bc-a3e1-63fa86c28a9c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56140 affects version 5.18.2-tuxcare.1 of astro."
      }
    },
    {
      "id": "CVE-2024-56159",
      "affects": [
        {
          "ref": "pkg:npm/astro@5.18.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:67ede53b-083c-5e49-bad6-303c40613326",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56159 affects version 5.18.2-tuxcare.1 of astro."
      }
    },
    {
      "id": "CVE-2025-54793",
      "affects": [
        {
          "ref": "pkg:npm/astro@5.18.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:131c1b73-1f32-5a5b-9869-1296509f805c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-54793 affects version 5.18.2-tuxcare.1 of astro."
      }
    },
    {
      "id": "CVE-2025-55303",
      "affects": [
        {
          "ref": "pkg:npm/astro@5.18.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:92f0b3d8-7d4b-5bd9-b4ed-84e916f549ef",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55303 affects version 5.18.2-tuxcare.1 of astro."
      }
    },
    {
      "id": "CVE-2025-59837",
      "affects": [
        {
          "ref": "pkg:npm/astro@5.18.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:bd1984b7-86fa-5e5c-b816-aa6ce9264032",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59837 affects version 5.18.2-tuxcare.1 of astro."
      }
    },
    {
      "id": "CVE-2025-61925",
      "affects": [
        {
          "ref": "pkg:npm/astro@5.18.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a28642d8-5c27-53a9-ba2e-c1b354389291",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-61925 affects version 5.18.2-tuxcare.1 of astro."
      }
    },
    {
      "id": "CVE-2025-64525",
      "affects": [
        {
          "ref": "pkg:npm/astro@5.18.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c9ac8d7d-922c-5a62-8328-f1ace4b79b0f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-64525 affects version 5.18.2-tuxcare.1 of astro."
      }
    },
    {
      "id": "CVE-2025-64745",
      "affects": [
        {
          "ref": "pkg:npm/astro@5.18.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:51a9e831-d992-5614-a3d2-502fcb6be2a7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-64745 affects version 5.18.2-tuxcare.1 of astro."
      }
    },
    {
      "id": "CVE-2025-64757",
      "affects": [
        {
          "ref": "pkg:npm/astro@5.18.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1faabe2c-c211-524f-a604-d73cb7999ad2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-64757 affects version 5.18.2-tuxcare.1 of astro."
      }
    },
    {
      "id": "CVE-2025-64764",
      "affects": [
        {
          "ref": "pkg:npm/astro@5.18.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:381fd74f-9306-552a-bdc6-c3b83b9d2d02",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-64764 affects version 5.18.2-tuxcare.1 of astro."
      }
    },
    {
      "id": "CVE-2025-64765",
      "affects": [
        {
          "ref": "pkg:npm/astro@5.18.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6ebbba17-0e6a-565e-bcf9-2809be23771d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-64765 affects version 5.18.2-tuxcare.1 of astro."
      }
    },
    {
      "id": "CVE-2025-65019",
      "affects": [
        {
          "ref": "pkg:npm/astro@5.18.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:88570b07-c92a-5595-82c2-03a9a39fcbdf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-65019 affects version 5.18.2-tuxcare.1 of astro."
      }
    },
    {
      "id": "CVE-2025-66202",
      "affects": [
        {
          "ref": "pkg:npm/astro@5.18.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5d405e94-42af-5f15-bc71-4073d18d75f7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66202 affects version 5.18.2-tuxcare.1 of astro."
      }
    },
    {
      "id": "CVE-2026-114127",
      "affects": [
        {
          "ref": "pkg:npm/astro@5.18.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e9251a24-c617-5819-8fdd-d96d7deacf33",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114127 affects version 5.18.2-tuxcare.1 of astro."
      }
    },
    {
      "id": "CVE-2026-114128",
      "affects": [
        {
          "ref": "pkg:npm/astro@5.18.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:bbb6a2f9-96a3-5ac9-8e53-e5cb7cfb3ad1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-114128 affects version 5.18.2-tuxcare.1 of astro."
      }
    },
    {
      "id": "CVE-2026-33769",
      "affects": [
        {
          "ref": "pkg:npm/astro@5.18.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a72a2a5e-6d1c-5418-87df-93af086d29ca",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33769 affects version 5.18.2-tuxcare.1 of astro."
      }
    },
    {
      "id": "CVE-2026-41067",
      "affects": [
        {
          "ref": "pkg:npm/astro@5.18.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0ffb3a7f-51c6-559e-8b96-9a4d8849dcca",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41067 is fixed in version 5.18.2-tuxcare.1 of astro."
      }
    },
    {
      "id": "CVE-2026-45028",
      "affects": [
        {
          "ref": "pkg:npm/astro@5.18.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1f0438af-6380-5544-8a9c-ff6023da6a85",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45028 is fixed in version 5.18.2-tuxcare.1 of astro."
      }
    },
    {
      "id": "CVE-2026-50146",
      "affects": [
        {
          "ref": "pkg:npm/astro@5.18.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:55a2c64e-b29f-5575-a52e-30ef5819f569",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50146 is fixed in version 5.18.2-tuxcare.1 of astro."
      }
    },
    {
      "id": "CVE-2026-54298",
      "affects": [
        {
          "ref": "pkg:npm/astro@5.18.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:20d8463d-c56f-5ba6-abe8-cda1f062b922",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54298 is fixed in version 5.18.2-tuxcare.1 of astro."
      }
    },
    {
      "id": "CVE-2026-54299",
      "affects": [
        {
          "ref": "pkg:npm/astro@5.18.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d0ccedad-7002-507d-a96b-ca0f201b7c4a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54299 is fixed in version 5.18.2-tuxcare.1 of astro."
      }
    },
    {
      "id": "CVE-2026-59727",
      "affects": [
        {
          "ref": "pkg:npm/astro@5.18.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:05d0b3da-615c-59f9-abf8-9584b97eb006",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59727 is fixed in version 5.18.2-tuxcare.1 of astro."
      }
    },
    {
      "id": "CVE-2026-59729",
      "affects": [
        {
          "ref": "pkg:npm/astro@5.18.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1cc4c2ad-3112-58c0-9364-6339c4e6ccfb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59729 is fixed in version 5.18.2-tuxcare.1 of astro."
      }
    },
    {
      "id": "CVE-2026-59731",
      "affects": [
        {
          "ref": "pkg:npm/astro@5.18.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9f3b4e40-a0da-5686-aa31-136b611f262f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59731 affects version 5.18.2-tuxcare.1 of astro."
      }
    },
    {
      "id": "CVE-2026-73422",
      "affects": [
        {
          "ref": "pkg:npm/astro@5.18.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:bfe0c987-3586-523f-a214-b1c00deedd5d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73422 is fixed in version 5.18.2-tuxcare.1 of astro."
      }
    },
    {
      "id": "CVE-2026-73423",
      "affects": [
        {
          "ref": "pkg:npm/astro@5.18.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4c03885d-d265-5314-a1c9-d5c5ffdb232c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73423 affects version 5.18.2-tuxcare.1 of astro."
      }
    },
    {
      "id": "CVE-2026-84376",
      "affects": [
        {
          "ref": "pkg:npm/astro@5.18.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:710db6c7-3ad1-562a-a9b9-8dfd59d433e9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-84376 is fixed in version 5.18.2-tuxcare.1 of astro."
      }
    },
    {
      "id": "GHSA-26w7-cxv4-gfx2",
      "affects": [
        {
          "ref": "pkg:npm/astro@5.18.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0564167c-5c91-5bbd-9e26-b3159301a7ab",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 affects version 5.18.2-tuxcare.1 of astro, and is fixed in 5.18.2-tuxcare.2."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/astro@5.18.2-tuxcare.1"
    }
  ]
}