{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8afb9d33-ed99-593f-aaac-3e2827e470fc", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "create-astro", "purl": "pkg:npm/create-astro@3.6.5-tuxcare.8", "type": "library", "bom-ref": "pkg:npm/create-astro@3.6.5-tuxcare.8", "version": "3.6.5-tuxcare.8", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-47885", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:e6e93390-fd29-58d2-ad72-aa2378be3ef9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47885 is fixed in version 3.6.5-tuxcare.8 of create-astro." } }, { "id": "CVE-2024-56140", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:949db18a-f69b-58be-b398-21a65d7d5e92", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56140 is fixed in version 3.6.5-tuxcare.8 of create-astro." } }, { "id": "CVE-2024-56159", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:cac80df7-201c-5252-90d7-8c802202134e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56159 is fixed in version 3.6.5-tuxcare.8 of create-astro." } }, { "id": "CVE-2025-55303", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:a9815517-9aba-5f47-a9b5-ac8e8850db98", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55303 is fixed in version 3.6.5-tuxcare.8 of create-astro." } }, { "id": "CVE-2025-61925", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:ef0faaaa-f53f-5b5f-a5bd-0b9564415515", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61925 is fixed in version 3.6.5-tuxcare.8 of create-astro." } }, { "id": "CVE-2025-64525", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:56593ddf-0b1c-5543-98d9-6c7081a51304", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64525 is fixed in version 3.6.5-tuxcare.8 of create-astro." } }, { "id": "CVE-2025-64757", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:e4030670-5dd0-5395-887d-37526e33b844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64757 is fixed in version 3.6.5-tuxcare.8 of create-astro." } }, { "id": "CVE-2025-64764", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:45fe5d1e-96b7-5e06-be60-19946ff5dc98", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64764 is fixed in version 3.6.5-tuxcare.8 of create-astro." } }, { "id": "CVE-2025-64765", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:8ce415b7-94ef-535b-9f6f-fed59b21f65e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-64765 is fixed in version 3.6.5-tuxcare.8 of create-astro." } }, { "id": "CVE-2025-65019", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:06bcc3ca-86e5-5a42-8672-1ffb33a2c77a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-65019 is fixed in version 3.6.5-tuxcare.8 of create-astro." } }, { "id": "CVE-2025-66202", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:74756974-9541-5b13-8bfa-ce25b02ae60d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66202 is fixed in version 3.6.5-tuxcare.8 of create-astro." } }, { "id": "CVE-2026-33769", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:52a515fe-1077-5c9a-a250-54f4bdc64e2d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33769 is fixed in version 3.6.5-tuxcare.8 of create-astro." } }, { "id": "CVE-2026-41067", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:735e2ffc-fa58-5711-a0cc-92a6908e2e3a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41067 is fixed in version 3.6.5-tuxcare.8 of create-astro." } }, { "id": "CVE-2026-45028", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:49f268ab-ebb8-5070-b04f-633e63a12300", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-45028 does not affect version 3.6.5-tuxcare.8 of create-astro. not_affected \u2014 Astro version 3.6.5 is NOT AFFECTED by CVE-2026-45028. The vulnerability concerns server islands encryption (AES-GCM ciphertext replay between props and slots), but server islands functionality does not exist in version 3.6.5. The feature was introduced in later versions (~May 2025, v5.x/6.x), and the vulnerability was fixed in v6.1.10 (April 2026). Exhaustive search across 327 source files con...", "justification": "code_not_present" } }, { "id": "CVE-2026-50146", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:47ddad2f-8d13-5e0c-b456-baa3ae211cab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50146 is fixed in version 3.6.5-tuxcare.8 of create-astro." } }, { "id": "CVE-2026-54298", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:1a82abc4-db47-56d3-a9f8-19d8e61dcf50", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54298 is fixed in version 3.6.5-tuxcare.8 of create-astro." } }, { "id": "CVE-2026-54299", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:c07e76f6-3bf7-5c9a-97ee-e128c9976d0f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54299 is fixed in version 3.6.5-tuxcare.8 of create-astro." } }, { "id": "CVE-2026-59728", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:92e6cd53-c409-54eb-a607-9704f71feca4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59728 is fixed in version 3.6.5-tuxcare.8 of create-astro." } }, { "id": "CVE-2026-59729", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:6a060079-97cf-5547-92c7-689a5b2f4ec8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59729 is fixed in version 3.6.5-tuxcare.8 of create-astro." } }, { "id": "CVE-2026-73422", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:0cc7b3f3-e2e6-555e-a80f-801ef1063e4a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73422 is fixed in version 3.6.5-tuxcare.8 of create-astro." } }, { "id": "CVE-2026-84376", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:0b443b90-47ec-53a9-a2f1-a4d6667f3ec6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-84376 affects version 3.6.5-tuxcare.8 of create-astro, and is fixed in 3.6.5-tuxcare.9." } }, { "id": "GHSA-26w7-cxv4-gfx2", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:a4c51d1d-45bd-5e3c-89ec-fcfab5049144", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 affects version 3.6.5-tuxcare.8 of create-astro, and is fixed in 3.6.5-tuxcare.9." } }, { "id": "GHSA-4g3v-8h47-v7g6", "affects": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.8" } ], "bom-ref": "urn:uuid:ad1300ea-ae1f-594d-a278-ff77786003b8", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 is fixed in version 3.6.5-tuxcare.8 of create-astro." } } ], "dependencies": [ { "ref": "pkg:npm/create-astro@3.6.5-tuxcare.8" } ] }