{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:38175564-fec7-5d6f-b52c-48bf384b38f0",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/compiler",
      "purl": "pkg:npm/%40angular/compiler@15.2.10-tuxcare.16",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/compiler@15.2.10-tuxcare.16",
      "version": "15.2.10-tuxcare.16",
      "pedigree": {
        "ancestors": [
          {
            "name": "@angular/compiler",
            "purl": "pkg:npm/%40angular/compiler@15.2.10",
            "type": "library",
            "version": "15.2.10"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-66412",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@15.2.10-tuxcare.16"
        }
      ],
      "bom-ref": "urn:uuid:a4efed3b-c901-5f89-9309-a27fc9f52fc2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66412 is fixed in version 15.2.10-tuxcare.16 of @angular/compiler."
      }
    },
    {
      "id": "CVE-2026-22610",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@15.2.10-tuxcare.16"
        }
      ],
      "bom-ref": "urn:uuid:4b931288-b25e-568a-ba0f-673a37f34ba1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22610 is fixed in version 15.2.10-tuxcare.16 of @angular/compiler."
      }
    },
    {
      "id": "CVE-2026-32635",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@15.2.10-tuxcare.16"
        }
      ],
      "bom-ref": "urn:uuid:15efdf76-1d56-5e49-acd0-59dfbe57f04b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32635 affects version 15.2.10-tuxcare.16 of @angular/compiler."
      }
    },
    {
      "id": "CVE-2026-50557",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@15.2.10-tuxcare.16"
        }
      ],
      "bom-ref": "urn:uuid:4bc2ffa1-12b9-5d5e-bc78-47e21fdc12f9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50557 is fixed in version 15.2.10-tuxcare.16 of @angular/compiler."
      }
    },
    {
      "id": "CVE-2026-54265",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@15.2.10-tuxcare.16"
        }
      ],
      "bom-ref": "urn:uuid:3a88685b-4478-5cd0-bca0-08b3985108ed",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-54265 does not affect version 15.2.10-tuxcare.16 of @angular/compiler. not_affected \u2014 Angular 15.2.10 is not affected by CVE-2026-54265. This version uses a desugaring approach for two-way bindings that automatically applies sanitization through the standard property binding mechanism. The vulnerability specifically affects the TwoWayProperty operation kind in the template pipeline architecture, which was introduced in Angular 16+ and does not exist in this version.",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-69151",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@15.2.10-tuxcare.16"
        }
      ],
      "bom-ref": "urn:uuid:a7434a0e-e9bf-5e82-8c91-4b4956a34e8f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69151 is fixed in version 15.2.10-tuxcare.16 of @angular/compiler."
      }
    },
    {
      "id": "CVE-2026-88057",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@15.2.10-tuxcare.16"
        }
      ],
      "bom-ref": "urn:uuid:0fdb8c9a-bb65-5ad6-b453-619633774c50",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88057 is fixed in version 15.2.10-tuxcare.16 of @angular/compiler."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/compiler@15.2.10-tuxcare.16"
    }
  ]
}