{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2c1ace65-b0fe-59fa-93a7-4619db174165",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/animations",
      "purl": "pkg:npm/%40angular/animations@17.3.12-tuxcare.11",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.11",
      "version": "17.3.12-tuxcare.11",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-59052",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:0f2aad93-7ba0-523b-bb47-fa5aa6a25813",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59052 is fixed in version 17.3.12-tuxcare.11 of @angular/animations."
      }
    },
    {
      "id": "CVE-2025-66035",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:1538b41a-2e44-5f6f-9116-6b75e3b69481",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66035 is fixed in version 17.3.12-tuxcare.11 of @angular/animations."
      }
    },
    {
      "id": "CVE-2025-66412",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:5794ff43-3852-50db-b31f-f1a3be138776",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66412 is fixed in version 17.3.12-tuxcare.11 of @angular/animations."
      }
    },
    {
      "id": "CVE-2026-22610",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:368fbb69-5f21-53fe-8590-d34b074fc8d2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22610 is fixed in version 17.3.12-tuxcare.11 of @angular/animations."
      }
    },
    {
      "id": "CVE-2026-27970",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:ecaef746-69d2-5ac8-a7e2-b3277b55eaa5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27970 is fixed in version 17.3.12-tuxcare.11 of @angular/animations."
      }
    },
    {
      "id": "CVE-2026-32635",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:e109e3b9-bd59-50dd-a55e-cc319aa40d8c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-32635 is fixed in version 17.3.12-tuxcare.11 of @angular/animations."
      }
    },
    {
      "id": "CVE-2026-46417",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:e8f5479a-0fc5-54b9-91ab-6eaa02416832",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46417 affects version 17.3.12-tuxcare.11 of @angular/animations, and is fixed in 17.3.12-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-50168",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:68688d91-bfc2-50ab-b0a7-9b242473c61c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50168 affects version 17.3.12-tuxcare.11 of @angular/animations, and is fixed in 17.3.12-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-50169",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:f0ff5ff2-a8ee-596f-9e60-d4c3f4fd53aa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50169 affects version 17.3.12-tuxcare.11 of @angular/animations, and is fixed in 17.3.12-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-50170",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:d26f1b11-aeb4-559b-85df-3c9d594051cf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50170 affects version 17.3.12-tuxcare.11 of @angular/animations, and is fixed in 17.3.12-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-50171",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:4e9a1f2d-fc4d-500e-8e0e-68ae81aac5e1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50171 affects version 17.3.12-tuxcare.11 of @angular/animations, and is fixed in 17.3.12-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-50184",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:2c6fb7ba-4606-5f1f-a452-1b0ea9a9bce9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50184 affects version 17.3.12-tuxcare.11 of @angular/animations, and is fixed in 17.3.12-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-50555",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:d1271667-c560-554b-848a-d0e47c366405",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50555 affects version 17.3.12-tuxcare.11 of @angular/animations, and is fixed in 17.3.12-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-50556",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:528eaa22-db5e-506c-b0c5-993d044e789f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50556 affects version 17.3.12-tuxcare.11 of @angular/animations, and is fixed in 17.3.12-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-50557",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:d61961f2-8846-5fd1-8a27-b41bd8285165",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50557 affects version 17.3.12-tuxcare.11 of @angular/animations, and is fixed in 17.3.12-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-52725",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:9a368425-12d6-5414-b414-8cd0af7ad8d5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-52725 affects version 17.3.12-tuxcare.11 of @angular/animations, and is fixed in 17.3.12-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-54264",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:4296a15f-b2f9-5a91-afe7-db2c48df41aa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54264 affects version 17.3.12-tuxcare.11 of @angular/animations, and is fixed in 17.3.12-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-54265",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:32f19525-c8f3-5fe5-ae6c-757d204683c4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54265 affects version 17.3.12-tuxcare.11 of @angular/animations, and is fixed in 17.3.12-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-54266",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:349f725c-d410-5b69-a75f-38d34347651c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54266 affects version 17.3.12-tuxcare.11 of @angular/animations, and is fixed in 17.3.12-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-54267",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:9f133a87-a6cb-5450-b62b-55eccb8e19bc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54267 affects version 17.3.12-tuxcare.11 of @angular/animations, and is fixed in 17.3.12-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-54268",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:e01dcb95-cc5e-56f3-a236-29aa178a40a7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54268 affects version 17.3.12-tuxcare.11 of @angular/animations, and is fixed in 17.3.12-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-68945",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:67a81dba-2cd7-5248-9b5c-558fb823372d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-68945 affects version 17.3.12-tuxcare.11 of @angular/animations, and is fixed in 17.3.12-tuxcare.14."
      }
    },
    {
      "id": "CVE-2026-69149",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:cffa456d-9eb0-5775-9597-985b5716b3a7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69149 affects version 17.3.12-tuxcare.11 of @angular/animations, and is fixed in 17.3.12-tuxcare.14."
      }
    },
    {
      "id": "CVE-2026-69151",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:42f48e46-a165-56a4-b509-550e3324517b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69151 affects version 17.3.12-tuxcare.11 of @angular/animations, and is fixed in 17.3.12-tuxcare.14."
      }
    },
    {
      "id": "CVE-2026-88056",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:f4ea438c-eb91-5ebe-b8f0-555c6bc35256",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-88056 does not affect version 17.3.12-tuxcare.11 of @angular/animations. not_affected \u2014 Version 17.3.12 is not affected by CVE-2026-88056. The vulnerability involves String.prototype.trim() being applied during URL resolution in Angular's platform-server, converting validated same-origin URLs with Unicode whitespace into cross-origin protocol-relative URLs, leading to SSRF. This vulnerable code pattern was introduced in newer Angular versions (v20+) and does not exist in version 1...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-88057",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:d8ea4391-8119-5bc1-ac4e-1f6622f63c7e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88057 affects version 17.3.12-tuxcare.11 of @angular/animations."
      }
    },
    {
      "id": "CVE-2026-88059",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:ade577b0-347d-5910-8ecb-dd7e65c6e21c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88059 affects version 17.3.12-tuxcare.11 of @angular/animations."
      }
    },
    {
      "id": "CVE-2026-88060",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:f1605352-1a1f-5548-a42e-698e1ada9aa0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88060 affects version 17.3.12-tuxcare.11 of @angular/animations."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.11"
    }
  ]
}