{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:1b134b33-a6a2-5432-bb06-84ee708a3150", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@astrojs/prism", "purl": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.10", "type": "library", "bom-ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.10", "version": "3.6.5-tuxcare.10", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-47885", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:f1609441-778e-5fc0-a8ef-192408d30ac6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47885 is fixed in version 3.6.5-tuxcare.10 of @astrojs/prism." } }, { "id": "CVE-2024-56140", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:c911e9b1-9b6b-5d6e-8716-0666cacc84dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 3.6.5-tuxcare.10 of @astrojs/prism." } }, { "id": "CVE-2024-56159", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:e0a6825a-435b-5e62-9bd2-6ce9c68b22df", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 3.6.5-tuxcare.10 of @astrojs/prism." } }, { "id": "CVE-2025-55303", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:620a4c43-f4dd-53f9-9201-679bf1b5cae7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55303 is fixed in version 3.6.5-tuxcare.10 of @astrojs/prism." } }, { "id": "CVE-2025-61925", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:3e26a5fc-3509-5244-959c-1a8c9fb6784f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 3.6.5-tuxcare.10 of @astrojs/prism." } }, { "id": "CVE-2025-64525", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:3110d947-b328-5ec0-b24f-d07e0d2de4f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64525 is fixed in version 3.6.5-tuxcare.10 of @astrojs/prism." } }, { "id": "CVE-2025-64757", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:ac2ca43e-d3cb-5faa-b24b-68e4b59ea067", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 3.6.5-tuxcare.10 of @astrojs/prism." } }, { "id": "CVE-2025-64764", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:a5b49bda-31e1-5518-8484-3f72b5ca254d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 3.6.5-tuxcare.10 of @astrojs/prism." } }, { "id": "CVE-2025-64765", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:5369ad05-0dd1-5956-a541-a9f6966da45e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 3.6.5-tuxcare.10 of @astrojs/prism." } }, { "id": "CVE-2025-65019", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:8b65cf14-55ef-5de9-abe4-60ebb7c455f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 3.6.5-tuxcare.10 of @astrojs/prism." } }, { "id": "CVE-2025-66202", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:a08ef05c-f39d-5390-9ab4-e49c1b5757d4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 3.6.5-tuxcare.10 of @astrojs/prism." } }, { "id": "CVE-2026-33769", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:5f249909-a86f-5623-93fa-f2fbe6e91c31", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 3.6.5-tuxcare.10 of @astrojs/prism." } }, { "id": "CVE-2026-41067", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:229acd25-c578-5799-8680-e1d1e7fcdbf4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 3.6.5-tuxcare.10 of @astrojs/prism." } }, { "id": "CVE-2026-45028", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:5d1eede1-bfe3-51a1-a059-1f69c8251b12", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 3.6.5-tuxcare.10 of @astrojs/prism. not_affected \u2014 Astro version 3.6.5 is NOT AFFECTED by CVE-2026-45028. The vulnerability concerns server islands encryption (AES-GCM ciphertext replay between props and slots), but server islands functionality does not exist in version 3.6.5. The feature was introduced in later versions (~May 2025, v5.x/6.x), and the vulnerability was fixed in v6.1.10 (April 2026). Exhaustive search across 327 source files con...", "justification": "code_not_present" } }, { "id": "CVE-2026-50146", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:85439300-2549-5415-8da5-29c9da397af6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 3.6.5-tuxcare.10 of @astrojs/prism." } }, { "id": "CVE-2026-54298", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:d845ff86-82a1-5750-b569-6f2f6c699730", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 3.6.5-tuxcare.10 of @astrojs/prism." } }, { "id": "CVE-2026-54299", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:0d3c746b-1713-56b2-a903-f8b738c3392d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 3.6.5-tuxcare.10 of @astrojs/prism." } }, { "id": "CVE-2026-59728", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:0de793a4-aaa9-5b56-90f1-ecb3dd0a10eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 3.6.5-tuxcare.10 of @astrojs/prism." } }, { "id": "CVE-2026-59729", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:550e9c7d-8122-5dee-af2e-9fc1f96849e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59729 is fixed in version 3.6.5-tuxcare.10 of @astrojs/prism." } }, { "id": "CVE-2026-73422", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:ea8b68ca-5192-5e39-be45-b53438659cfb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73422 is fixed in version 3.6.5-tuxcare.10 of @astrojs/prism." } }, { "id": "CVE-2026-84376", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:c698e18f-b044-5b2f-a390-22052b0189c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-84376 is fixed in version 3.6.5-tuxcare.10 of @astrojs/prism." } }, { "id": "GHSA-26w7-cxv4-gfx2", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:e70a44e1-43c4-5e97-9a8a-c541b32b4429", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 is fixed in version 3.6.5-tuxcare.10 of @astrojs/prism." } }, { "id": "GHSA-4g3v-8h47-v7g6", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:15005ad9-1244-51a8-b352-0529e86c61dc", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 3.6.5-tuxcare.10 of @astrojs/prism." } } ], "dependencies": [ { "ref": "pkg:npm/%40astrojs/prism@3.6.5-tuxcare.10" } ] }