{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:818211f1-81ee-5500-804e-e6803db1e320",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.1",
      "type": "library",
      "name": "@astrojs/telemetry",
      "version": "3.6.5-tuxcare.1",
      "purl": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:5a850484-d81e-5b15-a74e-8bd6bd39f793",
      "id": "CVE-2024-47885",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-47885 is fixed in version 3.6.5-tuxcare.1 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bfd72be1-e6b3-58e1-9f3c-673a8e122c32",
      "id": "CVE-2024-56140",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56140 is fixed in version 3.6.5-tuxcare.1 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90261941-fd5b-51bb-8264-5dd7e410cda8",
      "id": "CVE-2024-56159",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56159 is fixed in version 3.6.5-tuxcare.1 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31246cde-b369-5e0c-bd09-e9552f37a32f",
      "id": "CVE-2025-55303",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55303 is fixed in version 3.6.5-tuxcare.1 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5d6b79e-f1f8-5063-a90f-5f800c0ec356",
      "id": "CVE-2025-61925",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61925 is fixed in version 3.6.5-tuxcare.1 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e69dea6-117d-5918-85bd-56f24d4c1c0a",
      "id": "CVE-2025-64525",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64525 is fixed in version 3.6.5-tuxcare.1 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50b26b44-2a1f-5a2d-babf-f0b925d40f16",
      "id": "CVE-2025-64757",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64757 is fixed in version 3.6.5-tuxcare.1 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c37c14e1-7e38-56d6-9333-17497ddfd4ec",
      "id": "CVE-2025-64764",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64764 is fixed in version 3.6.5-tuxcare.1 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81774b95-dc39-51be-a7c5-e226c45d88c1",
      "id": "CVE-2025-64765",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64765 is fixed in version 3.6.5-tuxcare.1 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0915ab1-3de7-5f94-bb11-afbe4187602f",
      "id": "CVE-2025-65019",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-65019 is fixed in version 3.6.5-tuxcare.1 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe2607dc-24fd-5492-b4b3-6a5033189c20",
      "id": "CVE-2025-66202",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66202 is fixed in version 3.6.5-tuxcare.1 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b1bad1a9-f256-55bc-ac94-9974be5c7279",
      "id": "CVE-2026-33769",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33769 is fixed in version 3.6.5-tuxcare.1 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b3ba525-df17-57f6-9e88-b0909a2512b4",
      "id": "CVE-2026-41067",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41067 is fixed in version 3.6.5-tuxcare.1 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13d3a5c1-990c-58e6-8a5d-c471c64bdbef",
      "id": "CVE-2026-45028",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-45028 does not affect version 3.6.5-tuxcare.1 of @astrojs/telemetry. not_affected \u2014 Astro version 3.6.5 is NOT AFFECTED by CVE-2026-45028. The vulnerability concerns server islands encryption (AES-GCM ciphertext replay between props and slots), but server islands functionality does not exist in version 3.6.5. The feature was introduced in later versions (~May 2025, v5.x/6.x), and the vulnerability was fixed in v6.1.10 (April 2026). Exhaustive search across 327 source files con..."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13017cf3-1da4-5530-afb5-46a831d29467",
      "id": "CVE-2026-50146",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50146 affects version 3.6.5-tuxcare.1 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:855a0201-55d6-596e-9191-baf072178b4e",
      "id": "CVE-2026-54298",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54298 affects version 3.6.5-tuxcare.1 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cbd2fa98-edb9-53ef-bd28-707bf0c069f5",
      "id": "CVE-2026-54299",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54299 affects version 3.6.5-tuxcare.1 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14dfc377-8de7-5ace-a5de-f5d97202aa88",
      "id": "CVE-2026-59728",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59728 affects version 3.6.5-tuxcare.1 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc0c3796-9af5-52e4-9c38-43bce23b279a",
      "id": "CVE-2026-59729",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59729 affects version 3.6.5-tuxcare.1 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0758019d-30fe-58c9-a9ff-072bb46b645d",
      "id": "CVE-2026-73422",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73422 affects version 3.6.5-tuxcare.1 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a1cce0b1-45e9-5135-b589-ed2abb546229",
      "id": "GHSA-4g3v-8h47-v7g6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 affects version 3.6.5-tuxcare.1 of @astrojs/telemetry."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.1"
    }
  ]
}