{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:5a8c7f12-ff70-51df-8dd0-e82aac6b3c8d",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@astrojs/rss",
      "purl": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.7",
      "type": "library",
      "bom-ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.7",
      "version": "3.6.5-tuxcare.7",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-47885",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:7223c975-5b39-5fb6-af19-8b577985cf1a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47885 is fixed in version 3.6.5-tuxcare.7 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2024-56140",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:13ea39a4-9263-51ca-96f5-5d00a6654f97",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56140 is fixed in version 3.6.5-tuxcare.7 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2024-56159",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:5646c19b-8ffa-526c-bf98-4817fffde17b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56159 is fixed in version 3.6.5-tuxcare.7 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2025-55303",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:9bf202ae-0deb-51d2-b7f6-b77fe29aff2e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55303 is fixed in version 3.6.5-tuxcare.7 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2025-61925",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:8833a7be-5889-5aed-8842-03b1e73e8624",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61925 is fixed in version 3.6.5-tuxcare.7 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2025-64525",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:d10d7531-9c4b-5b18-a415-ce0b9c10c611",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64525 is fixed in version 3.6.5-tuxcare.7 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2025-64757",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:bdde5e03-f576-5117-a252-d5c3aa0d488b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64757 is fixed in version 3.6.5-tuxcare.7 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2025-64764",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:e70dfdc8-8984-514e-81c6-e496642080df",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64764 is fixed in version 3.6.5-tuxcare.7 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2025-64765",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:cbe49d4a-5fa2-55e6-ac69-3c30f6e23ec4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64765 is fixed in version 3.6.5-tuxcare.7 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2025-65019",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:4729ef97-2c1f-5a2d-b5a2-15b73c97d700",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-65019 is fixed in version 3.6.5-tuxcare.7 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2025-66202",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:20a548ec-c2b3-546b-a97d-18fd9bc2d339",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66202 is fixed in version 3.6.5-tuxcare.7 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2026-33769",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:b6d4611d-65d0-576d-90d9-88edca62bfcc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33769 is fixed in version 3.6.5-tuxcare.7 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2026-41067",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:9c4e52ed-77e5-5906-b04b-936c12fab2db",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41067 is fixed in version 3.6.5-tuxcare.7 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2026-45028",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:930eb3f8-1b47-5958-a3e7-26726b71f6cd",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-45028 does not affect version 3.6.5-tuxcare.7 of @astrojs/rss. not_affected \u2014 Astro version 3.6.5 is NOT AFFECTED by CVE-2026-45028. The vulnerability concerns server islands encryption (AES-GCM ciphertext replay between props and slots), but server islands functionality does not exist in version 3.6.5. The feature was introduced in later versions (~May 2025, v5.x/6.x), and the vulnerability was fixed in v6.1.10 (April 2026). Exhaustive search across 327 source files con...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-50146",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:08f2593b-ec42-5c47-9d21-458d51379d5e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50146 is fixed in version 3.6.5-tuxcare.7 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2026-54298",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:11f1488b-a0ce-5dec-97e7-abf58f0f16e3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54298 is fixed in version 3.6.5-tuxcare.7 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2026-54299",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:92636bf0-4f93-5246-b612-da886540d80e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54299 is fixed in version 3.6.5-tuxcare.7 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2026-59728",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:b0c5db6d-79bc-5a1e-b2e2-c7bd6fadaa2b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59728 is fixed in version 3.6.5-tuxcare.7 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2026-59729",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:f874935b-8421-5fc3-9bd6-c382895033d9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59729 is fixed in version 3.6.5-tuxcare.7 of @astrojs/rss."
      }
    },
    {
      "id": "CVE-2026-73422",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:d0e7aabe-4b2c-524c-9222-3ec946b8a0d0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73422 affects version 3.6.5-tuxcare.7 of @astrojs/rss, and is fixed in 3.6.5-tuxcare.8."
      }
    },
    {
      "id": "CVE-2026-84376",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:32d91c21-86e8-575e-8b68-2b04827fce02",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-84376 affects version 3.6.5-tuxcare.7 of @astrojs/rss."
      }
    },
    {
      "id": "GHSA-26w7-cxv4-gfx2",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:12c36673-b430-5e0d-8d8c-fa7fb4ea15d0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 affects version 3.6.5-tuxcare.7 of @astrojs/rss."
      }
    },
    {
      "id": "GHSA-4g3v-8h47-v7g6",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:850e1509-20f6-5f87-9300-6a56c18c5262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 affects version 3.6.5-tuxcare.7 of @astrojs/rss, and is fixed in 3.6.5-tuxcare.8."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.7"
    }
  ]
}