{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:9c705c0e-d01c-52f7-8165-3f8477f4460c", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@astrojs/rss", "purl": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.8", "type": "library", "bom-ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.8", "version": "3.6.5-tuxcare.8", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-47885", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:0f2a4aca-636d-55b8-8217-e21e220fbe3f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47885 is fixed in version 3.6.5-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2024-56140", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:5e079bec-0d18-54db-ae69-09954b08f462", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 3.6.5-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2024-56159", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:f59eace6-f39d-54b2-b4dc-465d7059fdb0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 3.6.5-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2025-55303", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:fdb1c3c7-8dc6-5b3a-bf95-f4497b470d52", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55303 is fixed in version 3.6.5-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2025-61925", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:ac7613dc-acad-55c0-8f38-ae35963cb7e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 3.6.5-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2025-64525", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:541250ae-7c52-58c0-b288-c29307701ba5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64525 is fixed in version 3.6.5-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2025-64757", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:edd7b17f-c479-56fd-acb4-2ca707e11401", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 3.6.5-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2025-64764", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:3d57671c-7aa6-5cab-af46-ef34dedb9afd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 3.6.5-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2025-64765", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:1627535a-f507-5ddf-bff7-4dadb4a001b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 3.6.5-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2025-65019", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:4688ad1e-d3d3-5414-bae6-418e98d6ca1e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 3.6.5-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2025-66202", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:73374f2d-2b5d-5f06-85ab-8615eacf8da2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 3.6.5-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2026-33769", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:30392d76-f9be-5222-ae77-7f3e88edd431", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 3.6.5-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2026-41067", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:1a77eb77-f0f2-556d-91b1-8e41c7fbd9f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 3.6.5-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2026-45028", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:2e2618c8-8a8d-553a-bb3f-47869543a8f8", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 3.6.5-tuxcare.8 of @astrojs/rss. not_affected \u2014 Astro version 3.6.5 is NOT AFFECTED by CVE-2026-45028. The vulnerability concerns server islands encryption (AES-GCM ciphertext replay between props and slots), but server islands functionality does not exist in version 3.6.5. The feature was introduced in later versions (~May 2025, v5.x/6.x), and the vulnerability was fixed in v6.1.10 (April 2026). Exhaustive search across 327 source files con...", "justification": "code_not_present" } }, { "id": "CVE-2026-50146", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:1a6b8e78-1d84-50d6-80d8-0a67e08b48da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 3.6.5-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2026-54298", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:57521295-81be-5f57-88c9-e8affe0d43b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 3.6.5-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2026-54299", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:d14c0a78-a2e4-5c8a-b803-4f2868c1aebe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 3.6.5-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2026-59728", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:46187cc0-b6a7-565b-af7c-555fcdc71899", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 3.6.5-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2026-59729", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:4e67f403-72fa-5186-a6f5-454dab93042b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59729 is fixed in version 3.6.5-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2026-73422", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:8344bb85-9be1-5e75-a0fb-5a7cd464554d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73422 is fixed in version 3.6.5-tuxcare.8 of @astrojs/rss." } }, { "id": "CVE-2026-84376", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:32edbe52-0630-50bf-823f-c1ce6509113c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-84376 affects version 3.6.5-tuxcare.8 of @astrojs/rss." } }, { "id": "GHSA-26w7-cxv4-gfx2", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:2eb13228-da21-5bef-8dd8-f3198677742f", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 affects version 3.6.5-tuxcare.8 of @astrojs/rss." } }, { "id": "GHSA-4g3v-8h47-v7g6", "affects": [ { "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:6b060a01-d732-5dda-9707-ccb06c93412e", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 3.6.5-tuxcare.8 of @astrojs/rss." } } ], "dependencies": [ { "ref": "pkg:npm/%40astrojs/rss@3.6.5-tuxcare.8" } ] }