{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:c7fbf829-d5f4-505c-ba80-07db59c92d37", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@astrojs/telemetry", "purl": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.7", "type": "library", "bom-ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.7", "version": "3.6.5-tuxcare.7", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-47885", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:593459c6-3e0f-578f-869a-dfb0c2d8a783", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47885 is fixed in version 3.6.5-tuxcare.7 of @astrojs/telemetry." } }, { "id": "CVE-2024-56140", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:bfde4bd9-ad6d-5a5d-a4b6-ad21ec2a6070", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 3.6.5-tuxcare.7 of @astrojs/telemetry." } }, { "id": "CVE-2024-56159", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:ee34126c-c5fb-549f-a14c-0ce05f1a73c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 3.6.5-tuxcare.7 of @astrojs/telemetry." } }, { "id": "CVE-2025-55303", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:89ea78aa-3492-5c69-aad4-55480f15131e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55303 is fixed in version 3.6.5-tuxcare.7 of @astrojs/telemetry." } }, { "id": "CVE-2025-61925", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:c1474042-cc59-5b20-925a-dbb22fee2ef1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 3.6.5-tuxcare.7 of @astrojs/telemetry." } }, { "id": "CVE-2025-64525", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:2c1ee54a-9000-581e-bb1f-622660b2eb56", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64525 is fixed in version 3.6.5-tuxcare.7 of @astrojs/telemetry." } }, { "id": "CVE-2025-64757", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:05f198a0-61b4-5285-9c47-22748b231acc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 3.6.5-tuxcare.7 of @astrojs/telemetry." } }, { "id": "CVE-2025-64764", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:7b20b049-219d-545d-a20a-a84c289a988c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 3.6.5-tuxcare.7 of @astrojs/telemetry." } }, { "id": "CVE-2025-64765", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:68876ad5-74b7-54ef-b572-4f4e157de6b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 3.6.5-tuxcare.7 of @astrojs/telemetry." } }, { "id": "CVE-2025-65019", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:d2c54df2-8c94-5570-9d39-2313d610bcd7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 3.6.5-tuxcare.7 of @astrojs/telemetry." } }, { "id": "CVE-2025-66202", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:a52e5c86-0c74-5d2a-a262-e61041497d45", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 3.6.5-tuxcare.7 of @astrojs/telemetry." } }, { "id": "CVE-2026-33769", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:2a087e7d-d82e-53de-99e6-e59a8410a8f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 3.6.5-tuxcare.7 of @astrojs/telemetry." } }, { "id": "CVE-2026-41067", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:0ef03f05-bc06-50ed-863c-7abf448c114a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 3.6.5-tuxcare.7 of @astrojs/telemetry." } }, { "id": "CVE-2026-45028", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:ce9edfc3-4498-53fb-a54a-71e68c4619dd", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 3.6.5-tuxcare.7 of @astrojs/telemetry. not_affected \u2014 Astro version 3.6.5 is NOT AFFECTED by CVE-2026-45028. The vulnerability concerns server islands encryption (AES-GCM ciphertext replay between props and slots), but server islands functionality does not exist in version 3.6.5. The feature was introduced in later versions (~May 2025, v5.x/6.x), and the vulnerability was fixed in v6.1.10 (April 2026). Exhaustive search across 327 source files con...", "justification": "code_not_present" } }, { "id": "CVE-2026-50146", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:f173db5b-5eba-587c-a67f-7ce8140a1bbe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 3.6.5-tuxcare.7 of @astrojs/telemetry." } }, { "id": "CVE-2026-54298", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:9f3e167d-e4f8-52f6-98ff-928be8946c0d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 3.6.5-tuxcare.7 of @astrojs/telemetry." } }, { "id": "CVE-2026-54299", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:59d66511-ba56-53ac-a3dc-53a22cfd96a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 3.6.5-tuxcare.7 of @astrojs/telemetry." } }, { "id": "CVE-2026-59728", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:d23e770d-8ec2-5176-b764-658caeffa959", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 3.6.5-tuxcare.7 of @astrojs/telemetry." } }, { "id": "CVE-2026-59729", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:98d77704-ec25-5335-8966-9a033e9fa6ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59729 is fixed in version 3.6.5-tuxcare.7 of @astrojs/telemetry." } }, { "id": "CVE-2026-73422", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:0b196fe0-e8b1-5ac7-ba96-0a55e080c968", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73422 affects version 3.6.5-tuxcare.7 of @astrojs/telemetry, and is fixed in 3.6.5-tuxcare.8." } }, { "id": "CVE-2026-84376", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:678be537-d497-5e11-8fae-59292823d0e8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-84376 affects version 3.6.5-tuxcare.7 of @astrojs/telemetry." } }, { "id": "GHSA-26w7-cxv4-gfx2", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:abedeec9-d7e6-52ef-bbb0-706791ee3f25", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 affects version 3.6.5-tuxcare.7 of @astrojs/telemetry." } }, { "id": "GHSA-4g3v-8h47-v7g6", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:b3212e66-2c15-5770-b84f-405c7a931630", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 affects version 3.6.5-tuxcare.7 of @astrojs/telemetry, and is fixed in 3.6.5-tuxcare.8." } } ], "dependencies": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.7" } ] }