{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:13313949-21d0-56e5-b631-e7b26a288bf9", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@astrojs/prism", "purl": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.8", "type": "library", "bom-ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.8", "version": "2.10.15-tuxcare.8", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-56140", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:00171668-894f-5ded-b185-a5b29e63e1fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 2.10.15-tuxcare.8 of @astrojs/prism." } }, { "id": "CVE-2024-56159", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:7c3c5cdb-9006-5b6f-adfc-ac517022106d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 2.10.15-tuxcare.8 of @astrojs/prism." } }, { "id": "CVE-2025-55303", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:d043f571-12c0-5c0f-8a53-8c0ad8eae1e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55303 is fixed in version 2.10.15-tuxcare.8 of @astrojs/prism." } }, { "id": "CVE-2025-61925", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:ed30b44b-47b5-591a-af23-70f0e9951b25", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 2.10.15-tuxcare.8 of @astrojs/prism." } }, { "id": "CVE-2025-64757", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:5f85b668-cda9-5e49-bf4c-d3095ed6a271", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 2.10.15-tuxcare.8 of @astrojs/prism." } }, { "id": "CVE-2025-64764", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:889be1b5-bb8f-58dc-bf2c-3402c343193a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 2.10.15-tuxcare.8 of @astrojs/prism." } }, { "id": "CVE-2025-64765", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:c5ab634a-d72d-582d-8f03-608b2cc699e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 2.10.15-tuxcare.8 of @astrojs/prism." } }, { "id": "CVE-2025-65019", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:77872053-0a0c-5f7d-8311-7ec10f8fa146", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 2.10.15-tuxcare.8 of @astrojs/prism." } }, { "id": "CVE-2025-66202", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:085b2fe6-fd38-5502-97f8-47b89c706c46", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 2.10.15-tuxcare.8 of @astrojs/prism." } }, { "id": "CVE-2026-33769", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:752f7735-c581-5a61-bac3-e801b40be574", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 2.10.15-tuxcare.8 of @astrojs/prism." } }, { "id": "CVE-2026-41067", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:5dc4db68-0e0e-5f7a-a71b-8d4c28a33c43", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 2.10.15-tuxcare.8 of @astrojs/prism." } }, { "id": "CVE-2026-45028", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:47b4a940-229d-5352-960f-bbcef239151f", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 2.10.15-tuxcare.8 of @astrojs/prism. not_affected \u2014 Astro version 2.10.14 is not affected by CVE-2026-45028. The server islands feature with encrypted parameter handling does not exist in this version. The vulnerability requires server islands (introduced in later versions) to be present, specifically the encryption/decryption of props and slots parameters via AES-GCM. Version 2.10.14 predates this feature entirely. While the repository contains...", "justification": "code_not_present" } }, { "id": "CVE-2026-50146", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:fc370535-8615-53a3-812f-abb3499b6db7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 2.10.15-tuxcare.8 of @astrojs/prism." } }, { "id": "CVE-2026-54298", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:3b467b02-0371-5f91-a94d-779a6723b2ea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 2.10.15-tuxcare.8 of @astrojs/prism." } }, { "id": "CVE-2026-54299", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:75a27590-4a37-543a-8afd-71e3d906ff8c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 2.10.15-tuxcare.8 of @astrojs/prism." } }, { "id": "CVE-2026-59728", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:52f6e3fc-efb9-56e3-9153-6e32cac481d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 2.10.15-tuxcare.8 of @astrojs/prism." } }, { "id": "CVE-2026-59729", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:8536a0f8-4165-5df7-aae2-d9c4924b9406", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59729 is fixed in version 2.10.15-tuxcare.8 of @astrojs/prism." } }, { "id": "CVE-2026-73422", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:f3e8bda8-ce50-5f9e-94f8-007d0db4619d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73422 is fixed in version 2.10.15-tuxcare.8 of @astrojs/prism." } }, { "id": "CVE-2026-84376", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:c5c795d7-7444-5a3b-80b0-205acbc369cf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-84376 affects version 2.10.15-tuxcare.8 of @astrojs/prism." } }, { "id": "GHSA-26w7-cxv4-gfx2", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:1e9005f2-b58b-5274-9aec-521c1fceb2d5", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 affects version 2.10.15-tuxcare.8 of @astrojs/prism." } }, { "id": "GHSA-4g3v-8h47-v7g6", "affects": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:58a8bdda-2918-5923-a2fc-6fa179394a50", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 2.10.15-tuxcare.8 of @astrojs/prism." } } ], "dependencies": [ { "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.8" } ] }