{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:287f5cc0-a824-50d1-85e5-f5ba1c58e1b0",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@astrojs/prism",
      "purl": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.1",
      "type": "library",
      "bom-ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.1",
      "version": "2.10.15-tuxcare.1",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-56140",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1b797e74-d973-5c08-ae79-8192ee8a2c52",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56140 is fixed in version 2.10.15-tuxcare.1 of @astrojs/prism."
      }
    },
    {
      "id": "CVE-2024-56159",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:193d55c9-9c6b-5551-aeee-843a05b27901",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56159 is fixed in version 2.10.15-tuxcare.1 of @astrojs/prism."
      }
    },
    {
      "id": "CVE-2025-55303",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6221df03-c104-53a5-b8c3-9e55ef637cfd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55303 is fixed in version 2.10.15-tuxcare.1 of @astrojs/prism."
      }
    },
    {
      "id": "CVE-2025-61925",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2d1ea2d8-ba2b-564b-8f46-6777c4d8cb8f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61925 is fixed in version 2.10.15-tuxcare.1 of @astrojs/prism."
      }
    },
    {
      "id": "CVE-2025-64757",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5a2bfaa4-81b9-5b95-9867-73c0f001e4f7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64757 is fixed in version 2.10.15-tuxcare.1 of @astrojs/prism."
      }
    },
    {
      "id": "CVE-2025-64764",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c9fb0438-a0e3-501c-a7af-8dfc0b2908dc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64764 is fixed in version 2.10.15-tuxcare.1 of @astrojs/prism."
      }
    },
    {
      "id": "CVE-2025-64765",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b3f7b553-1572-55ca-8f0a-1bd5f6ee44e1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-64765 is fixed in version 2.10.15-tuxcare.1 of @astrojs/prism."
      }
    },
    {
      "id": "CVE-2025-65019",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:cee51e07-5314-5d19-bf50-4d30007440bf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-65019 is fixed in version 2.10.15-tuxcare.1 of @astrojs/prism."
      }
    },
    {
      "id": "CVE-2025-66202",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:36425423-53cf-5b25-b775-6fa06ddcd960",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66202 is fixed in version 2.10.15-tuxcare.1 of @astrojs/prism."
      }
    },
    {
      "id": "CVE-2026-33769",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9867943b-b9ef-5f93-a925-42a5acdcaabc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33769 is fixed in version 2.10.15-tuxcare.1 of @astrojs/prism."
      }
    },
    {
      "id": "CVE-2026-41067",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:574d9a71-3b5c-5af8-add1-db3a1bd3f3aa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41067 is fixed in version 2.10.15-tuxcare.1 of @astrojs/prism."
      }
    },
    {
      "id": "CVE-2026-45028",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6ea21baa-3c68-5193-be2f-8418dc2a4a08",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-45028 does not affect version 2.10.15-tuxcare.1 of @astrojs/prism. not_affected \u2014 Astro version 2.10.14 is not affected by CVE-2026-45028. The server islands feature with encrypted parameter handling does not exist in this version. The vulnerability requires server islands (introduced in later versions) to be present, specifically the encryption/decryption of props and slots parameters via AES-GCM. Version 2.10.14 predates this feature entirely. While the repository contains...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-50146",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e4772b24-bf84-5b54-97da-c3d0a36b980c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50146 affects version 2.10.15-tuxcare.1 of @astrojs/prism, and is fixed in 2.10.15-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-54298",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8cf76d8a-e052-5dcf-b115-8781a48e889c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54298 affects version 2.10.15-tuxcare.1 of @astrojs/prism, and is fixed in 2.10.15-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-54299",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ab328176-9751-5272-a900-7d89d24fea57",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54299 affects version 2.10.15-tuxcare.1 of @astrojs/prism, and is fixed in 2.10.15-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-59728",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d2914eed-5482-580e-ad80-7ff6b7c2832b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59728 affects version 2.10.15-tuxcare.1 of @astrojs/prism, and is fixed in 2.10.15-tuxcare.5."
      }
    },
    {
      "id": "CVE-2026-59729",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d31b2b04-921d-5a84-9068-2ae162645695",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59729 affects version 2.10.15-tuxcare.1 of @astrojs/prism."
      }
    },
    {
      "id": "CVE-2026-73422",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d3e963d8-982d-5a28-b694-ed9dd03f71ea",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-73422 affects version 2.10.15-tuxcare.1 of @astrojs/prism."
      }
    },
    {
      "id": "CVE-2026-84376",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2a811d8b-4cd5-5ed0-ba12-a3f1cdd654c3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-84376 affects version 2.10.15-tuxcare.1 of @astrojs/prism."
      }
    },
    {
      "id": "GHSA-26w7-cxv4-gfx2",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b629000c-6a9f-57c5-83dd-86f413c47ec9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-26w7-cxv4-gfx2 affects version 2.10.15-tuxcare.1 of @astrojs/prism."
      }
    },
    {
      "id": "GHSA-4g3v-8h47-v7g6",
      "affects": [
        {
          "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f666cc8d-8fe1-5e92-9ceb-25ad428e8e2f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-4g3v-8h47-v7g6 affects version 2.10.15-tuxcare.1 of @astrojs/prism."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40astrojs/prism@2.10.15-tuxcare.1"
    }
  ]
}