{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:6b68c2ec-a30d-59cd-9067-38c069d0a4e2",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/core",
      "purl": "pkg:npm/%40angular/core@14.3.0-tuxcare.11",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/core@14.3.0-tuxcare.11",
      "version": "14.3.0-tuxcare.11",
      "pedigree": {
        "ancestors": [
          {
            "name": "@angular/core",
            "purl": "pkg:npm/%40angular/core@14.3.0",
            "type": "library",
            "version": "14.3.0"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2021-4231",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@14.3.0-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:f92c49be-b9ca-5525-8780-a857dd18ae6c",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2021-4231 does not affect version 14.3.0-tuxcare.11 of @angular/core. not_affected \u2014 CVE-2021-4231 (XSS via comment injection) is not present in Angular 14.3.0-tuxcare.14. The vulnerability affected Angular up to 11.0.4/11.1.0-next.2 and was fixed upstream in Angular 11.1.0+ via the introduction of the escapeCommentText() function that wraps HTML comment delimiters with zero-width spaces. This upstream fix (commit 47d9b6d72dab) was already included in the Angular 14.3.0 release...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-22610",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@14.3.0-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:df17af3f-7b8a-594c-b932-323b983b5bf7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22610 is fixed in version 14.3.0-tuxcare.11 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-27970",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@14.3.0-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:89906366-2dd5-5b6c-ad75-ca1374b5a309",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27970 is fixed in version 14.3.0-tuxcare.11 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-32635",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@14.3.0-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:77f1c8c4-dd6f-5c20-a310-0b6848f76185",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32635 affects version 14.3.0-tuxcare.11 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-50557",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@14.3.0-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:f0c3e740-f0aa-5121-9f04-1ccfa7a80a1f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50557 is fixed in version 14.3.0-tuxcare.11 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-52725",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@14.3.0-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:02d432af-2bf3-596d-8e7f-2d1fce834ca4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-52725 is fixed in version 14.3.0-tuxcare.11 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-54267",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@14.3.0-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:f32f9ec4-6e8b-526c-a491-72bb84ceddd8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54267 is fixed in version 14.3.0-tuxcare.11 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-69151",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@14.3.0-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:2f48319b-c043-5ac2-ac94-83ed9dca58ac",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69151 is fixed in version 14.3.0-tuxcare.11 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-88057",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@14.3.0-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:36b0c814-ee3c-5780-9249-7c8cb39d74d3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88057 affects version 14.3.0-tuxcare.11 of @angular/core, and is fixed in 14.3.0-tuxcare.12."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/core@14.3.0-tuxcare.11"
    }
  ]
}