{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:2e58ed96-f125-5186-b098-0a70aef2e153", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@astrojs/prism", "purl": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.7", "type": "library", "bom-ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.7", "version": "3.6.5-tuxcare.7", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-47885", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:e55f9862-cb4a-53cd-ada5-7614c3026b6b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47885 is fixed in version 3.6.5-tuxcare.7 of @astrojs/prism." } }, { "id": "CVE-2024-56140", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:66a2fdf0-32b3-5d87-bca0-75c8718a59e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 3.6.5-tuxcare.7 of @astrojs/prism." } }, { "id": "CVE-2024-56159", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:841cdead-d03e-57c0-baf4-5eb2980447ed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 3.6.5-tuxcare.7 of @astrojs/prism." } }, { "id": "CVE-2025-55303", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:ff2e9e0c-83a1-5e97-9afc-6994f0df69af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55303 is fixed in version 3.6.5-tuxcare.7 of @astrojs/prism." } }, { "id": "CVE-2025-61925", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:ab895e38-71a9-58ea-ab83-c0d89a93c576", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 3.6.5-tuxcare.7 of @astrojs/prism." } }, { "id": "CVE-2025-64525", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:3d211f33-43c0-593f-b11e-f48d02799f1b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64525 is fixed in version 3.6.5-tuxcare.7 of @astrojs/prism." } }, { "id": "CVE-2025-64757", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:f1f4ca83-94c4-5005-a709-5f026a7f832b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 3.6.5-tuxcare.7 of @astrojs/prism." } }, { "id": "CVE-2025-64764", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:985b1c11-acdb-5624-b8d0-5b47a1998350", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 3.6.5-tuxcare.7 of @astrojs/prism." } }, { "id": "CVE-2025-64765", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:8898cdd6-997c-5604-a1f2-d75fefa69924", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 3.6.5-tuxcare.7 of @astrojs/prism." } }, { "id": "CVE-2025-65019", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:ba188a72-ef34-5766-82b8-9c22f063d88d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 3.6.5-tuxcare.7 of @astrojs/prism." } }, { "id": "CVE-2025-66202", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:3b459e15-a369-5785-a8f6-e8b67cbec83d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 3.6.5-tuxcare.7 of @astrojs/prism." } }, { "id": "CVE-2026-33769", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:577fe5f3-9664-5a3f-8886-25760644a9d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 3.6.5-tuxcare.7 of @astrojs/prism." } }, { "id": "CVE-2026-41067", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:b8be1b6c-1005-5f6a-9840-79eeb14f7f22", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 3.6.5-tuxcare.7 of @astrojs/prism." } }, { "id": "CVE-2026-45028", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:52b64c71-0113-55ae-80c1-374354cdb9d8", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 3.6.5-tuxcare.7 of @astrojs/prism. not_affected \u2014 Astro version 3.6.5 is NOT AFFECTED by CVE-2026-45028. The vulnerability concerns server islands encryption (AES-GCM ciphertext replay between props and slots), but server islands functionality does not exist in version 3.6.5. The feature was introduced in later versions (~May 2025, v5.x/6.x), and the vulnerability was fixed in v6.1.10 (April 2026). Exhaustive search across 327 source files con...", "justification": "code_not_present" } }, { "id": "CVE-2026-50146", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:2ac71293-fdbd-540a-9cdc-1fe05858c815", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 3.6.5-tuxcare.7 of @astrojs/prism." } }, { "id": "CVE-2026-54298", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:71b7c57f-de04-5333-85b4-661ea7e986b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 3.6.5-tuxcare.7 of @astrojs/prism." } }, { "id": "CVE-2026-54299", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:5d8fb874-8bae-574d-985e-1385f45cc4f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 3.6.5-tuxcare.7 of @astrojs/prism." } }, { "id": "CVE-2026-59728", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:985be87b-463c-5d47-abac-98b66a4b0a5d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 3.6.5-tuxcare.7 of @astrojs/prism." } }, { "id": "CVE-2026-59729", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:5dc4350d-81cb-5e1b-8d75-58e130bf8763", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59729 is fixed in version 3.6.5-tuxcare.7 of @astrojs/prism." } }, { "id": "CVE-2026-73422", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:4b24db2c-f6e2-5b00-adb3-cedc1ccc1f16", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73422 affects version 3.6.5-tuxcare.7 of @astrojs/prism, and is fixed in 3.6.5-tuxcare.8." } }, { "id": "CVE-2026-84376", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:2462611e-bf75-51a6-9b5d-1f7b5855e247", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-84376 affects version 3.6.5-tuxcare.7 of @astrojs/prism." } }, { "id": "GHSA-26w7-cxv4-gfx2", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:8c97971c-8421-5f1a-b079-42765ed9eaff", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 affects version 3.6.5-tuxcare.7 of @astrojs/prism." } }, { "id": "GHSA-4g3v-8h47-v7g6", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:52184315-f583-5dc2-9950-5e4eca88893c", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 affects version 3.6.5-tuxcare.7 of @astrojs/prism, and is fixed in 3.6.5-tuxcare.8." } } ], "dependencies": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.7" } ] }