{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e2631666-f31f-5b25-9b24-3230bc38da95",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/core",
      "purl": "pkg:npm/%40angular/core@11.2.14-tuxcare.10",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/core@11.2.14-tuxcare.10",
      "version": "11.2.14-tuxcare.10",
      "pedigree": {
        "ancestors": [
          {
            "name": "@angular/core",
            "purl": "pkg:npm/%40angular/core@11.2.14",
            "type": "library",
            "version": "11.2.14"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2021-4231",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@11.2.14-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:38171a89-7b09-5a7b-8f9a-16317994c146",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2021-4231 does not affect version 11.2.14-tuxcare.10 of @angular/core. not_affected \u2014 CVE-2021-4231 (XSS via unescaped HTML comment text in SSR) is NOT present in Angular 11.2.14-tuxcare.15. The upstream fix from commit 373484bf (Dec 2020, by Misko Hevery) was already included in the Angular 11.2.14 release that TuxCare onboarded. All vulnerable comment-creation sites now use the escapeCommentText() function to prevent comment breakout attacks. The vulnerable pattern (raw user-c...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-22610",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@11.2.14-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:9250d12f-244b-54e0-a0fe-646e0935e0b1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22610 is fixed in version 11.2.14-tuxcare.10 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-27970",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@11.2.14-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:4bb67d0b-1b74-566c-8d91-8fb5f9a81290",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27970 is fixed in version 11.2.14-tuxcare.10 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-32635",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@11.2.14-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:d3fbec63-945b-53a6-ba3d-3ae14c5e8994",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32635 affects version 11.2.14-tuxcare.10 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-50557",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@11.2.14-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:0958c10c-dc32-556e-9f45-20098fdf45cd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50557 is fixed in version 11.2.14-tuxcare.10 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-52725",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@11.2.14-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:46ccaade-71fd-508c-bea9-e040473448a1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-52725 is fixed in version 11.2.14-tuxcare.10 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-54267",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@11.2.14-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:664d11da-67b6-5c01-b823-136865609977",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54267 is fixed in version 11.2.14-tuxcare.10 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-69151",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@11.2.14-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:f1045d4e-f299-59cb-a618-bcf4d8762918",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69151 is fixed in version 11.2.14-tuxcare.10 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-88057",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@11.2.14-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:e2ac0f28-30b1-5abb-8015-0782740a82c7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88057 affects version 11.2.14-tuxcare.10 of @angular/core, and is fixed in 11.2.14-tuxcare.11."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/core@11.2.14-tuxcare.10"
    }
  ]
}