{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:43fc3515-65e8-581b-8980-1126cb9314d0", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@astrojs/rss", "purl": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.8", "type": "library", "bom-ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.8", "version": "2.10.15-tuxcare.8", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-56140", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:65baeb8a-3c33-556f-8733-ab52217e35ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 2.10.15-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2024-56159", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:d3a4fc5b-1721-5818-a158-76609819aa3f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 2.10.15-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2025-55303", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:87778970-9dcc-541f-b19c-3c94cd413ff8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55303 is fixed in version 2.10.15-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2025-61925", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:2d206459-8af5-51da-8172-1f622db76790", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 2.10.15-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2025-64757", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:abd00880-8298-5eeb-a0ca-df56cff4b288", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 2.10.15-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2025-64764", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:25a35df6-23fc-5482-bb9a-1184c2f73ed2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 2.10.15-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2025-64765", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:b8a17c2d-73e7-58ed-a475-1eafbe9095e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 2.10.15-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2025-65019", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:12e5cf22-38f5-567a-81c1-1f18ead528aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 2.10.15-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2025-66202", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:5a3ba47b-dc98-5e70-bdc3-823fbc8440fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 2.10.15-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2026-33769", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:7148bdac-32c5-526c-ae81-f169e3ee62a8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 2.10.15-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2026-41067", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:251b6c0a-ea4a-5cb0-bec8-3eed4ae82ac6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 2.10.15-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2026-45028", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:0ac60e17-c101-537b-af1d-f7ea3c892726", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 2.10.15-tuxcare.8 of @astrojs/rss. not_affected \u2014 Astro version 2.10.14 is not affected by CVE-2026-45028. The server islands feature with encrypted parameter handling does not exist in this version. The vulnerability requires server islands (introduced in later versions) to be present, specifically the encryption/decryption of props and slots parameters via AES-GCM. Version 2.10.14 predates this feature entirely. While the repository contains...", "justification": "code_not_present" } }, { "id": "CVE-2026-50146", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:8e7e9894-085d-57bc-9cb2-1dcda9530667", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 2.10.15-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2026-54298", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:a9430d67-cde5-5a5c-b0cc-ff0a738cbf25", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 2.10.15-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2026-54299", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:df867cae-f855-544f-bb9f-7888f53ac9f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 2.10.15-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2026-59728", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:558a74f5-d0be-53a5-ab34-4d5bcc2c51c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 2.10.15-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2026-59729", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:f5e3505a-c091-5e1e-854e-bd89534206e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59729 is fixed in version 2.10.15-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2026-73422", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:6b30bab5-6873-5683-a2f7-1f2f4ff7e7b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73422 is fixed in version 2.10.15-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2026-84376", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:e82c4aa1-e3dc-5134-a1e6-06c2be3b19ab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-84376 affects version 2.10.15-tuxcare.8 of @astrojs/rss, and is fixed in 2.10.15-tuxcare.9." } }, { "id": "GHSA-26w7-cxv4-gfx2", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:416f2562-2d07-50a6-b5df-89037f651e2b", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 affects version 2.10.15-tuxcare.8 of @astrojs/rss, and is fixed in 2.10.15-tuxcare.9." } }, { "id": "GHSA-4g3v-8h47-v7g6", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:3b08677c-aa13-5070-b0b0-f8688c35ad84", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 2.10.15-tuxcare.8 of @astrojs/rss." } } ], "dependencies": [ { "ref": "pkg:npm/%40astrojs/rss@2.10.15-tuxcare.8" } ] }