{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e4b60b71-0308-566f-b77a-a8d41b54ba5e",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/core",
      "purl": "pkg:npm/%40angular/core@13.4.0-tuxcare.10",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/core@13.4.0-tuxcare.10",
      "version": "13.4.0-tuxcare.10",
      "pedigree": {
        "ancestors": [
          {
            "name": "@angular/core",
            "purl": "pkg:npm/%40angular/core@13.4.0",
            "type": "library",
            "version": "13.4.0"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2021-4231",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@13.4.0-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:e9f7bc1a-6892-5df6-a3e5-1008ff5460b5",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2021-4231 does not affect version 13.4.0-tuxcare.10 of @angular/core. not_affected \u2014 Angular 13.4.0 is not affected by CVE-2021-4231. The XSS vulnerability in comment handling was fixed by upstream maintainer Misko Hevery in commit 47d9b6d72dab (Dec 2020), which introduced the escapeCommentText() function to escape HTML comment delimiters. This fix shipped in the upstream release that TuxCare onboarded, predating the first TuxCare commit (fedd8f19). The vulnerable pattern (unes...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-22610",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@13.4.0-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:e9b194e4-ca60-5a52-9c46-3417255d980d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22610 is fixed in version 13.4.0-tuxcare.10 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-27970",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@13.4.0-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:eb868b9a-322a-55f0-8542-0da69638d9b4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27970 is fixed in version 13.4.0-tuxcare.10 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-32635",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@13.4.0-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:8b054174-47c6-542d-8347-8efdd5394d16",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32635 affects version 13.4.0-tuxcare.10 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-50557",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@13.4.0-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:cc9a7675-a9dc-5d0a-a9a8-da5cada732ff",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50557 is fixed in version 13.4.0-tuxcare.10 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-52725",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@13.4.0-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:d6500ee5-2afb-5f95-8af4-f409b422eeb5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-52725 is fixed in version 13.4.0-tuxcare.10 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-54267",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@13.4.0-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:dd3674f5-4b1d-5e6b-a447-49b404b7b2d6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54267 is fixed in version 13.4.0-tuxcare.10 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-69151",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@13.4.0-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:2a047897-8504-5b2b-a47c-b8719be9fe1b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69151 is fixed in version 13.4.0-tuxcare.10 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-88057",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@13.4.0-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:6df83b17-ad9e-5eb7-9d45-240ff25685ac",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88057 affects version 13.4.0-tuxcare.10 of @angular/core, and is fixed in 13.4.0-tuxcare.11."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/core@13.4.0-tuxcare.10"
    }
  ]
}