{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:451b6528-7f94-5cde-86e5-7ae62e5190b7", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@astrojs/telemetry", "purl": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.10", "type": "library", "bom-ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.10", "version": "3.6.5-tuxcare.10", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-47885", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:981478d8-e62e-58c4-a33e-4b7d20f99cfc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47885 is fixed in version 3.6.5-tuxcare.10 of @astrojs/telemetry." } }, { "id": "CVE-2024-56140", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:a7dc9886-6f48-5557-a69a-3478c3523114", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 3.6.5-tuxcare.10 of @astrojs/telemetry." } }, { "id": "CVE-2024-56159", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:9d002f7c-b571-5fbd-beba-42ae8f611fb5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 3.6.5-tuxcare.10 of @astrojs/telemetry." } }, { "id": "CVE-2025-55303", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:bf9cab60-e3ce-5cd6-9a15-9b4fb1e7534f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55303 is fixed in version 3.6.5-tuxcare.10 of @astrojs/telemetry." } }, { "id": "CVE-2025-61925", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:b4b4895a-197f-574e-8977-ca44d025b3af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 3.6.5-tuxcare.10 of @astrojs/telemetry." } }, { "id": "CVE-2025-64525", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:f0e52747-ed43-5afb-a888-e8c51c4c7ffa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64525 is fixed in version 3.6.5-tuxcare.10 of @astrojs/telemetry." } }, { "id": "CVE-2025-64757", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:1b961131-72c3-5757-bad4-851f75bcfbad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 3.6.5-tuxcare.10 of @astrojs/telemetry." } }, { "id": "CVE-2025-64764", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:4fce4dad-9a89-5f12-bd92-748caf5f7642", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 3.6.5-tuxcare.10 of @astrojs/telemetry." } }, { "id": "CVE-2025-64765", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:b4f2ce3d-d83e-5665-9328-7092ac39b274", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 3.6.5-tuxcare.10 of @astrojs/telemetry." } }, { "id": "CVE-2025-65019", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:a05a5f7f-c705-55d9-ae6c-63c3d2829df2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 3.6.5-tuxcare.10 of @astrojs/telemetry." } }, { "id": "CVE-2025-66202", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:c86935b8-ff5b-539f-96a4-00ac037712ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 3.6.5-tuxcare.10 of @astrojs/telemetry." } }, { "id": "CVE-2026-33769", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:509e72e4-f457-5dc2-96ca-e98cf2883785", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 3.6.5-tuxcare.10 of @astrojs/telemetry." } }, { "id": "CVE-2026-41067", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:766843d8-17f1-5c78-a428-7cbddc68cd30", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 3.6.5-tuxcare.10 of @astrojs/telemetry." } }, { "id": "CVE-2026-45028", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:7691edac-baf7-58bd-b866-a1f3a36afb0a", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 3.6.5-tuxcare.10 of @astrojs/telemetry. not_affected \u2014 Astro version 3.6.5 is NOT AFFECTED by CVE-2026-45028. The vulnerability concerns server islands encryption (AES-GCM ciphertext replay between props and slots), but server islands functionality does not exist in version 3.6.5. The feature was introduced in later versions (~May 2025, v5.x/6.x), and the vulnerability was fixed in v6.1.10 (April 2026). Exhaustive search across 327 source files con...", "justification": "code_not_present" } }, { "id": "CVE-2026-50146", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:edeff6a3-9b61-5c7d-9be2-975c40b017ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 3.6.5-tuxcare.10 of @astrojs/telemetry." } }, { "id": "CVE-2026-54298", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:b3c24217-763c-545a-8fac-9ea5a940946d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 3.6.5-tuxcare.10 of @astrojs/telemetry." } }, { "id": "CVE-2026-54299", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:252cd275-9971-5010-a77b-6ac0915b7f84", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 3.6.5-tuxcare.10 of @astrojs/telemetry." } }, { "id": "CVE-2026-59728", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:e2131988-de53-5e35-ba9c-cf0cde05d877", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 3.6.5-tuxcare.10 of @astrojs/telemetry." } }, { "id": "CVE-2026-59729", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:ae0ddcae-f3f9-5a5a-9253-015d96866bd9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59729 is fixed in version 3.6.5-tuxcare.10 of @astrojs/telemetry." } }, { "id": "CVE-2026-73422", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:458c6ffd-ccd3-5dae-94af-9af8b3bf8457", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73422 is fixed in version 3.6.5-tuxcare.10 of @astrojs/telemetry." } }, { "id": "CVE-2026-84376", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:5cf3e404-3f35-5e48-b8c2-ab63886b5fb2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-84376 is fixed in version 3.6.5-tuxcare.10 of @astrojs/telemetry." } }, { "id": "GHSA-26w7-cxv4-gfx2", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:bac9583f-b299-56e4-9733-5dbe4c82d55a", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 is fixed in version 3.6.5-tuxcare.10 of @astrojs/telemetry." } }, { "id": "GHSA-4g3v-8h47-v7g6", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:8f9d55d3-5ad5-5fbe-8c84-0f00bcf6624d", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 3.6.5-tuxcare.10 of @astrojs/telemetry." } } ], "dependencies": [ { "ref": "pkg:npm/%40astrojs/telemetry@3.6.5-tuxcare.10" } ] }