{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:cf2b32e9-0fd3-55b3-9863-3d2e26c2155f",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/core",
      "purl": "pkg:npm/%40angular/core@19.2.14-tuxcare.4",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/core@19.2.14-tuxcare.4",
      "version": "19.2.14-tuxcare.4",
      "pedigree": {
        "ancestors": [
          {
            "name": "@angular/core",
            "purl": "pkg:npm/%40angular/core@19.2.14",
            "type": "library",
            "version": "19.2.14"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2021-4231",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:dce3f5b9-06f0-50d9-b808-807497eefbf3",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2021-4231 does not affect version 19.2.14-tuxcare.4 of @angular/core. not_affected \u2014 CVE-2021-4231 affects Angular up to 11.0.4/11.1.0-next.2 and concerns XSS via unescaped HTML comment delimiters in Server-Side Rendering. The target (Angular 19.2.14-tuxcare.7) is not affected because the vulnerability was fixed by upstream Angular in December 2020 (commit 47d9b6d72d by Misko Hevery), long before this version. The fix introduced the escapeCommentText() function that wraps comme...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-22610",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:ab11d85c-2011-5b6e-a380-c78111ef4af2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22610 affects version 19.2.14-tuxcare.4 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-27970",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:e2a65993-5b05-5986-b5b6-fe37dfa49558",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-27970 affects version 19.2.14-tuxcare.4 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-32635",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:c3ff71bb-2d32-5974-a552-df23f0899e4c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32635 affects version 19.2.14-tuxcare.4 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-50557",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:6132a257-3405-51a1-82a9-d4f0bd86ccc0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50557 affects version 19.2.14-tuxcare.4 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-52725",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:d9183d14-c25a-53b4-bada-23d2ca0ae6f7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-52725 affects version 19.2.14-tuxcare.4 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-54267",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:7d4a39c2-24da-5986-983e-23a0b01e5abc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54267 is fixed in version 19.2.14-tuxcare.4 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-69151",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:727703c0-c947-56fc-945f-50d4c3f62a18",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69151 affects version 19.2.14-tuxcare.4 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-88057",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:5eb5917a-73e9-516c-bd59-b942d603a991",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88057 is fixed in version 19.2.14-tuxcare.4 of @angular/core."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/core@19.2.14-tuxcare.4"
    }
  ]
}