{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:6b97609d-6f37-59ed-a361-79dcc77aa82b",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/core",
      "purl": "pkg:npm/%40angular/core@11.2.0-tuxcare.5",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/core@11.2.0-tuxcare.5",
      "version": "11.2.0-tuxcare.5",
      "pedigree": {
        "ancestors": [
          {
            "name": "@angular/core",
            "purl": "pkg:npm/%40angular/core@11.2.0",
            "type": "library",
            "version": "11.2.0"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2021-4231",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@11.2.0-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:93af668f-bbc8-5d21-961a-72d12f9c1cab",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2021-4231 does not affect version 11.2.0-tuxcare.5 of @angular/core. not_affected \u2014 Angular 11.2.0 is NOT affected by CVE-2021-4231. The vulnerability (XSS through unescaped HTML comment text) was fixed by the upstream Angular team in commit 47d9b6d72dab (Dec 2020) before the 11.2.0 release. The fix introduced the escapeCommentText() function that prevents malicious comment delimiter sequences (-->, <!--, --!>, etc.) from breaking out of comment context by wrapping < and > cha...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-22610",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@11.2.0-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:12ee2774-3de2-5b4b-80b2-9fc688fcad2c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22610 is fixed in version 11.2.0-tuxcare.5 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-27970",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@11.2.0-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:2a0f1792-54d2-57e2-bdb0-d46d5290c09a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27970 is fixed in version 11.2.0-tuxcare.5 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-32635",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@11.2.0-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:2e8c6694-61eb-5b92-93d1-449aba1b333f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32635 affects version 11.2.0-tuxcare.5 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-50557",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@11.2.0-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:26a57dd4-8b30-56e1-a784-adfdfdd72a53",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50557 is fixed in version 11.2.0-tuxcare.5 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-52725",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@11.2.0-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:d9b54adf-9710-522c-a005-29556b279e01",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-52725 is fixed in version 11.2.0-tuxcare.5 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-54267",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@11.2.0-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:33d9c484-7afa-59a1-9fb6-44bef5d72a54",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54267 is fixed in version 11.2.0-tuxcare.5 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-69151",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@11.2.0-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:11a92663-48de-5891-ade0-7b6d97b1c7f3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69151 is fixed in version 11.2.0-tuxcare.5 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-88057",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@11.2.0-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:e50fe63b-7463-5e9c-b3e9-64b9689eeafb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88057 affects version 11.2.0-tuxcare.5 of @angular/core, and is fixed in 11.2.0-tuxcare.6."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/core@11.2.0-tuxcare.5"
    }
  ]
}