{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:13d44ae8-8a46-5377-ab4b-d21ce6c812d4",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/core",
      "purl": "pkg:npm/%40angular/core@6.0.1-tuxcare.6",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/core@6.0.1-tuxcare.6",
      "version": "6.0.1-tuxcare.6",
      "pedigree": {
        "ancestors": [
          {
            "name": "@angular/core",
            "purl": "pkg:npm/%40angular/core@6.0.1",
            "type": "library",
            "version": "6.0.1"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2021-4231",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@6.0.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:010ca094-c610-5217-ae92-7ca586031d69",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-4231 is fixed in version 6.0.1-tuxcare.6 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-22610",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@6.0.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:1dee2e24-1673-5e5d-8aee-4bb6b7d6239c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22610 is fixed in version 6.0.1-tuxcare.6 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-27970",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@6.0.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:1c3f74b9-043c-5e4e-b0e3-5a51a6403af5",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-27970 does not affect version 6.0.1-tuxcare.6 of @angular/core. not_affected \u2014 Angular 6.0.1 is not affected by CVE-2026-27970. This vulnerability is specific to Ivy/render3's runtime ICU message parsing, which does not exist in Angular 6.0.1. Angular 6.0.1 uses View Engine by default, where ICU messages are processed at compile time rather than runtime, eliminating the vulnerable code path.",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-32635",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@6.0.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:d5f208a1-0e91-59c1-9d11-9b55cac1fce0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32635 affects version 6.0.1-tuxcare.6 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-50557",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@6.0.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:92590f22-7b6d-5cae-ba2f-47f47a032240",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50557 is fixed in version 6.0.1-tuxcare.6 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-52725",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@6.0.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:ca8175a5-f8ab-557b-af60-bf8fab2f07a9",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-52725 does not affect version 6.0.1-tuxcare.6 of @angular/core. not_affected \u2014 Angular v6.0.1-tuxcare.3 is not affected by CVE-2026-52725 in its supported configuration. The vulnerability requires the public createComponent({hostElement}) API introduced in Angular v14+, which does not exist in this version. The default View Engine renderer does not use the vulnerable locateHostElement code path.",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-54267",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@6.0.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:912a5b71-66a9-5f03-afdc-1132d6416e60",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54267 is fixed in version 6.0.1-tuxcare.6 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-69151",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@6.0.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:5131fb04-fc52-53ae-9e25-8a3ec3ce9b95",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69151 is fixed in version 6.0.1-tuxcare.6 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-88057",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@6.0.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:8519b64d-d59f-5afd-91c0-0c5e97bcff80",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88057 is fixed in version 6.0.1-tuxcare.6 of @angular/core."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/core@6.0.1-tuxcare.6"
    }
  ]
}