{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:31dd14dd-8fce-5274-afc1-c0fdacda2024",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/service-worker",
      "purl": "pkg:npm/%40angular/service-worker@10.1.0-tuxcare.7",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/service-worker@10.1.0-tuxcare.7",
      "version": "10.1.0-tuxcare.7",
      "pedigree": {
        "ancestors": [
          {
            "name": "@angular/service-worker",
            "purl": "pkg:npm/%40angular/service-worker@10.1.0",
            "type": "library",
            "version": "10.1.0"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-50169",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/service-worker@10.1.0-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:2a5f089e-6bd2-5ed7-b580-bdb53c1b6081",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50169 is fixed in version 10.1.0-tuxcare.7 of @angular/service-worker."
      }
    },
    {
      "id": "CVE-2026-50184",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/service-worker@10.1.0-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:3c673ca7-c4e2-5f37-994b-637b032535d0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50184 is fixed in version 10.1.0-tuxcare.7 of @angular/service-worker."
      }
    },
    {
      "id": "CVE-2026-54264",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/service-worker@10.1.0-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:0acea410-171e-5071-9b2e-522e58ec7753",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-54264 does not affect version 10.1.0-tuxcare.7 of @angular/service-worker. not_affected \u2014 Angular 10.1.0-tuxcare.2 is not affected by CVE-2026-54264. The vulnerability requires the Service Worker to preserve and forward credential headers on cross-origin redirects. In this version, AssetGroup creates fresh requests without any headers when following redirects, and DataGroup delegates to the browser's native fetch API which correctly implements the Fetch specification's header-stripp...",
        "justification": "code_not_present"
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/service-worker@10.1.0-tuxcare.7"
    }
  ]
}