{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:9faa68c4-cac8-5476-a6f7-6a5a233f95e5",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/platform-server",
      "purl": "pkg:npm/%40angular/platform-server@13.3.12-tuxcare.5",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/platform-server@13.3.12-tuxcare.5",
      "version": "13.3.12-tuxcare.5",
      "pedigree": {
        "ancestors": [
          {
            "name": "@angular/platform-server",
            "purl": "pkg:npm/%40angular/platform-server@13.3.12",
            "type": "library",
            "version": "13.3.12"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-59052",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@13.3.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:336f3179-d6b8-57a7-9913-33351a2cc8aa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59052 affects version 13.3.12-tuxcare.5 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-101895",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@13.3.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:63854958-77f7-5c99-8ee0-92900d881058",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-101895 affects version 13.3.12-tuxcare.5 of @angular/platform-server, and is fixed in 13.3.12-tuxcare.7."
      }
    },
    {
      "id": "CVE-2026-111754",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@13.3.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:2016eae1-3d70-5d42-a4d2-c908d8d1f6fb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-111754 affects version 13.3.12-tuxcare.5 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-41423",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@13.3.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:a556831d-9531-5be4-9ee4-f3ad3b535eb2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41423 is fixed in version 13.3.12-tuxcare.5 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-46417",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@13.3.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:739f6917-aaa7-55ec-ab66-5f1d7ab1782a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46417 is fixed in version 13.3.12-tuxcare.5 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-50168",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@13.3.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:8f6bbe56-970b-5a9a-8c6a-bf147d59322e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50168 is fixed in version 13.3.12-tuxcare.5 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-50555",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@13.3.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:5f8f594d-8259-5c43-833a-29f6ffb4748c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50555 is fixed in version 13.3.12-tuxcare.5 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-50556",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@13.3.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:b087aa25-8f8d-58f0-8fe2-d61632041640",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50556 is fixed in version 13.3.12-tuxcare.5 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-69149",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@13.3.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:c9ecd32e-6c4d-56ee-956f-4573b7b77a39",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69149 is fixed in version 13.3.12-tuxcare.5 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-88056",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@13.3.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:97c3450d-4b5d-5a5f-bdd8-c34a78214cf7",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-88056 does not affect version 13.3.12-tuxcare.5 of @angular/platform-server. not_affected \u2014 Angular v13.3.12 is NOT AFFECTED by CVE-2026-88056. The vulnerable code pattern (String.prototype.trim() call on URLs during server-side resolution) was introduced in Angular v22.x (May 2026, commit 6e71049021) and later fixed in Aug 2026 (commit 9339a7a2de). Version 13.3.12 predates this refactor by multiple major releases and never contained the vulnerable trim() call. Both parseUrl implement...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-88058",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@13.3.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:e8490960-b729-514c-a95e-2907a744aa2f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88058 affects version 13.3.12-tuxcare.5 of @angular/platform-server, and is fixed in 13.3.12-tuxcare.6."
      }
    },
    {
      "id": "CVE-2026-88060",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@13.3.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:795e803f-6a5a-573e-aa5d-ca4dc3123447",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88060 affects version 13.3.12-tuxcare.5 of @angular/platform-server, and is fixed in 13.3.12-tuxcare.6."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/platform-server@13.3.12-tuxcare.5"
    }
  ]
}