{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:47dda347-f845-5593-bc2c-e36c59fe7cfa", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@astrojs/telemetry", "purl": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.8", "type": "library", "bom-ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.8", "version": "2.10.15-tuxcare.8", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-56140", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:80fc2ba6-7d58-5805-9ead-a54d88d611a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 2.10.15-tuxcare.8 of @astrojs/telemetry." } }, { "id": "CVE-2024-56159", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:4d7598ad-3938-56a9-ba4d-c64277756fad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 2.10.15-tuxcare.8 of @astrojs/telemetry." } }, { "id": "CVE-2025-55303", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:dcfa65a6-6e44-5408-87f6-d7a1f2f76b50", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55303 is fixed in version 2.10.15-tuxcare.8 of @astrojs/telemetry." } }, { "id": "CVE-2025-61925", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:ac33139e-e409-57d2-bce2-a875f5193522", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 2.10.15-tuxcare.8 of @astrojs/telemetry." } }, { "id": "CVE-2025-64757", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:d5ed15b9-a7c6-5c2d-b90c-b6d2fe1da2fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 2.10.15-tuxcare.8 of @astrojs/telemetry." } }, { "id": "CVE-2025-64764", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:f4594457-9c2d-59a6-a772-b69452e52345", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 2.10.15-tuxcare.8 of @astrojs/telemetry." } }, { "id": "CVE-2025-64765", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:da97abfd-866a-5b0c-a621-9fc80c0c03bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 2.10.15-tuxcare.8 of @astrojs/telemetry." } }, { "id": "CVE-2025-65019", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:aca6fecc-3ce8-5917-be24-f04d89f00c59", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 2.10.15-tuxcare.8 of @astrojs/telemetry." } }, { "id": "CVE-2025-66202", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:f3149740-7872-53be-8d77-00493ba3a5fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 2.10.15-tuxcare.8 of @astrojs/telemetry." } }, { "id": "CVE-2026-33769", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:bffc17b0-13ab-5118-bf89-b32cbda09af3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 2.10.15-tuxcare.8 of @astrojs/telemetry." } }, { "id": "CVE-2026-41067", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:e8260f22-b670-5f4b-b492-6a0eb83c7fe1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 2.10.15-tuxcare.8 of @astrojs/telemetry." } }, { "id": "CVE-2026-45028", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:95097198-7f7b-5e36-879d-31db45a9dc2d", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 2.10.15-tuxcare.8 of @astrojs/telemetry. not_affected \u2014 Astro version 2.10.14 is not affected by CVE-2026-45028. The server islands feature with encrypted parameter handling does not exist in this version. The vulnerability requires server islands (introduced in later versions) to be present, specifically the encryption/decryption of props and slots parameters via AES-GCM. Version 2.10.14 predates this feature entirely. While the repository contains...", "justification": "code_not_present" } }, { "id": "CVE-2026-50146", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:ab7cd874-2b05-5644-8bc5-f03e73961078", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 2.10.15-tuxcare.8 of @astrojs/telemetry." } }, { "id": "CVE-2026-54298", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:1d3f292c-1a57-596f-bfed-7473d35afb9a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 2.10.15-tuxcare.8 of @astrojs/telemetry." } }, { "id": "CVE-2026-54299", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:4828d4cb-baf0-5836-a2fc-c6dcf422849d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 2.10.15-tuxcare.8 of @astrojs/telemetry." } }, { "id": "CVE-2026-59728", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:250df46c-2a0e-520f-b3ff-902e439fe90b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 2.10.15-tuxcare.8 of @astrojs/telemetry." } }, { "id": "CVE-2026-59729", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:5a2c7795-deb1-5782-916d-2b5ec7a0ee33", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59729 is fixed in version 2.10.15-tuxcare.8 of @astrojs/telemetry." } }, { "id": "CVE-2026-73422", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:0ba2faec-df5d-58e9-8e5f-751d078f85a2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73422 is fixed in version 2.10.15-tuxcare.8 of @astrojs/telemetry." } }, { "id": "CVE-2026-84376", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:5321620d-bf38-5bfd-afd9-8191c299d49a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-84376 affects version 2.10.15-tuxcare.8 of @astrojs/telemetry." } }, { "id": "GHSA-26w7-cxv4-gfx2", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:303d9865-3c9d-5708-9496-3ee61c53776c", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 affects version 2.10.15-tuxcare.8 of @astrojs/telemetry." } }, { "id": "GHSA-4g3v-8h47-v7g6", "affects": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.8" } ], "bom-ref": "urn:uuid:893ae4d4-fb4a-5795-9f61-03589185b866", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 2.10.15-tuxcare.8 of @astrojs/telemetry." } } ], "dependencies": [ { "ref": "pkg:npm/%40astrojs/telemetry@2.10.15-tuxcare.8" } ] }