{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:fbf17289-300d-5da7-a917-c72575a4e1ac", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "create-astro", "purl": "pkg:npm/create-astro@3.6.5-tuxcare.10", "type": "library", "bom-ref": "pkg:npm/create-astro@3.6.5-tuxcare.10", "version": "3.6.5-tuxcare.10", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-47885", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:d29c3d14-8dce-5a1e-9555-a2af2f1e04cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47885 is fixed in version 3.6.5-tuxcare.10 of create-astro." } }, { "id": "CVE-2024-56140", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:f151835e-8d9a-506e-b4b6-d6eb5ac47ef5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 3.6.5-tuxcare.10 of create-astro." } }, { "id": "CVE-2024-56159", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:53c9bf4f-1daa-54bf-a23f-6720f0e2a06a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 3.6.5-tuxcare.10 of create-astro." } }, { "id": "CVE-2025-55303", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:7bb3dfb6-23a1-55ca-be9c-32c0b3e8e4e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55303 is fixed in version 3.6.5-tuxcare.10 of create-astro." } }, { "id": "CVE-2025-61925", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:53a45fc9-8a71-5ffe-b404-44b11e951f2b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 3.6.5-tuxcare.10 of create-astro." } }, { "id": "CVE-2025-64525", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:551acec9-dda4-51b1-b588-c8c5d0b7efb0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64525 is fixed in version 3.6.5-tuxcare.10 of create-astro." } }, { "id": "CVE-2025-64757", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:56d45464-8224-583a-83a2-fd2599e06705", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 3.6.5-tuxcare.10 of create-astro." } }, { "id": "CVE-2025-64764", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:39c2cb04-a4c6-53d8-a8f8-afdabb199fa7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 3.6.5-tuxcare.10 of create-astro." } }, { "id": "CVE-2025-64765", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:362aafa2-d909-5a88-8078-f5b635569619", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 3.6.5-tuxcare.10 of create-astro." } }, { "id": "CVE-2025-65019", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:5bd2a487-b35b-5a46-a2bf-22be040ad814", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 3.6.5-tuxcare.10 of create-astro." } }, { "id": "CVE-2025-66202", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:a08b1838-a601-595f-9539-647ad37a5823", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 3.6.5-tuxcare.10 of create-astro." } }, { "id": "CVE-2026-33769", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:bc419542-8e98-56d8-b32e-6a225b1d7c51", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 3.6.5-tuxcare.10 of create-astro." } }, { "id": "CVE-2026-41067", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:e70deb91-7f6e-56e5-8d6a-56c67c059c93", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 3.6.5-tuxcare.10 of create-astro." } }, { "id": "CVE-2026-45028", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:bb8f531c-4b0d-5c22-bb52-369d753d02bd", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 3.6.5-tuxcare.10 of create-astro. not_affected \u2014 Astro version 3.6.5 is NOT AFFECTED by CVE-2026-45028. The vulnerability concerns server islands encryption (AES-GCM ciphertext replay between props and slots), but server islands functionality does not exist in version 3.6.5. The feature was introduced in later versions (~May 2025, v5.x/6.x), and the vulnerability was fixed in v6.1.10 (April 2026). Exhaustive search across 327 source files con...", "justification": "code_not_present" } }, { "id": "CVE-2026-50146", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:1e394291-fe79-5ba9-b90f-0298b8624768", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 3.6.5-tuxcare.10 of create-astro." } }, { "id": "CVE-2026-54298", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:9bb040b0-78b0-5509-b807-faf467a840b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 3.6.5-tuxcare.10 of create-astro." } }, { "id": "CVE-2026-54299", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:d8ba6433-5bd9-51f6-bc20-29d4f7377de0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 3.6.5-tuxcare.10 of create-astro." } }, { "id": "CVE-2026-59728", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:91f7c8b3-36cf-5db7-b739-b2eb91e8efe4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 3.6.5-tuxcare.10 of create-astro." } }, { "id": "CVE-2026-59729", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:d2234765-b9d4-5864-a7c2-179b89d86234", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59729 is fixed in version 3.6.5-tuxcare.10 of create-astro." } }, { "id": "CVE-2026-73422", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:564d06f6-c0bb-51cb-bada-5293362d5363", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73422 is fixed in version 3.6.5-tuxcare.10 of create-astro." } }, { "id": "CVE-2026-84376", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:4e00ac2b-381f-564e-9e5c-22e41c659ad9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-84376 is fixed in version 3.6.5-tuxcare.10 of create-astro." } }, { "id": "GHSA-26w7-cxv4-gfx2", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:6543ba71-0a8d-5bb0-b453-5bae75649fdf", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 is fixed in version 3.6.5-tuxcare.10 of create-astro." } }, { "id": "GHSA-4g3v-8h47-v7g6", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.10" } ], "bom-ref": "urn:uuid:5938ac34-6ee6-58a2-9611-c8303ac7c52f", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 3.6.5-tuxcare.10 of create-astro." } } ], "dependencies": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.10" } ] }