{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e65fbd91-5c5b-5357-b507-2fb1d1195668", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "create-astro", "purl": "pkg:npm/create-astro@3.6.5-tuxcare.7", "type": "library", "bom-ref": "pkg:npm/create-astro@3.6.5-tuxcare.7", "version": "3.6.5-tuxcare.7", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-47885", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:4f7d50ae-701e-5d53-9d16-1ee41ee374c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47885 is fixed in version 3.6.5-tuxcare.7 of create-astro." } }, { "id": "CVE-2024-56140", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:f9382f8b-3b51-5c3c-bf9e-ef8a1d9a9ed2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 3.6.5-tuxcare.7 of create-astro." } }, { "id": "CVE-2024-56159", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:b363a2a0-012a-5f9f-a47c-87cab43876af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 3.6.5-tuxcare.7 of create-astro." } }, { "id": "CVE-2025-55303", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:f127ab54-9533-5a0c-9b35-69a0223defce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55303 is fixed in version 3.6.5-tuxcare.7 of create-astro." } }, { "id": "CVE-2025-61925", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:41c58cd9-d47b-590b-b50d-34b5760d7316", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 3.6.5-tuxcare.7 of create-astro." } }, { "id": "CVE-2025-64525", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:cb9e6776-c327-56e3-9f10-bc3bd1de5a6c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64525 is fixed in version 3.6.5-tuxcare.7 of create-astro." } }, { "id": "CVE-2025-64757", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:563b5f86-fc81-50fb-9808-c9d878b3e246", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 3.6.5-tuxcare.7 of create-astro." } }, { "id": "CVE-2025-64764", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:ca4da9c9-6a2a-5b87-b488-b9c7a6f5b832", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 3.6.5-tuxcare.7 of create-astro." } }, { "id": "CVE-2025-64765", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:9cbcc64b-c13e-5df8-bd1f-bf5d323959b5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 3.6.5-tuxcare.7 of create-astro." } }, { "id": "CVE-2025-65019", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:799c45ed-ea7b-5c9b-9a28-412d501e98bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 3.6.5-tuxcare.7 of create-astro." } }, { "id": "CVE-2025-66202", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:e1b48964-bc41-5fb4-93df-1d5c4a1fc975", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 3.6.5-tuxcare.7 of create-astro." } }, { "id": "CVE-2026-33769", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:c1db97dd-72fd-5ae4-9d9d-5830ed1e16c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 3.6.5-tuxcare.7 of create-astro." } }, { "id": "CVE-2026-41067", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:4e9997ae-34f5-501e-b4b8-5e32c297438a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 3.6.5-tuxcare.7 of create-astro." } }, { "id": "CVE-2026-45028", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:17229bcf-8db4-55c4-a834-f4ca53465848", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 3.6.5-tuxcare.7 of create-astro. not_affected \u2014 Astro version 3.6.5 is NOT AFFECTED by CVE-2026-45028. The vulnerability concerns server islands encryption (AES-GCM ciphertext replay between props and slots), but server islands functionality does not exist in version 3.6.5. The feature was introduced in later versions (~May 2025, v5.x/6.x), and the vulnerability was fixed in v6.1.10 (April 2026). Exhaustive search across 327 source files con...", "justification": "code_not_present" } }, { "id": "CVE-2026-50146", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:08909bcd-68fe-5637-a5a4-30a3fc987a03", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 3.6.5-tuxcare.7 of create-astro." } }, { "id": "CVE-2026-54298", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:63bcd0ea-3026-580f-a017-2b17aad6a110", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 3.6.5-tuxcare.7 of create-astro." } }, { "id": "CVE-2026-54299", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:f79285c1-b0a6-57f8-8fea-2c43608083b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 3.6.5-tuxcare.7 of create-astro." } }, { "id": "CVE-2026-59728", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:8697819f-c3af-5678-b346-268a7c3efa1b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 3.6.5-tuxcare.7 of create-astro." } }, { "id": "CVE-2026-59729", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:d1616c31-8e2e-5e45-9cc4-89d3864a920c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59729 is fixed in version 3.6.5-tuxcare.7 of create-astro." } }, { "id": "CVE-2026-73422", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:12515c5e-0321-5bba-830e-0889a9ef6d9a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-73422 affects version 3.6.5-tuxcare.7 of create-astro, and is fixed in 3.6.5-tuxcare.8." } }, { "id": "CVE-2026-84376", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:bb3a24c4-ca4f-5f58-a750-110a2389e2b1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-84376 affects version 3.6.5-tuxcare.7 of create-astro." } }, { "id": "GHSA-26w7-cxv4-gfx2", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:d99c2eb0-6304-50f3-b9d7-1ba50bfa289d", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 affects version 3.6.5-tuxcare.7 of create-astro." } }, { "id": "GHSA-4g3v-8h47-v7g6", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.7" } ], "bom-ref": "urn:uuid:49278609-5965-5f51-b712-985e3b847ed7", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 affects version 3.6.5-tuxcare.7 of create-astro, and is fixed in 3.6.5-tuxcare.8." } } ], "dependencies": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.7" } ] }