{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:3dc736e3-0eac-5553-ac8d-eb643142d1bb",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/animations",
      "purl": "pkg:npm/%40angular/animations@18.2.14-tuxcare.3",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.3",
      "version": "18.2.14-tuxcare.3",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-66035",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e20a9466-eebe-5cba-b3fd-d2def43a84e4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.3 of @angular/animations."
      }
    },
    {
      "id": "CVE-2025-66412",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4e58d341-8a2e-5b82-970d-581e8c8da9b2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.3 of @angular/animations."
      }
    },
    {
      "id": "CVE-2026-22610",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7e5fbc71-d2f6-50e5-9d23-ac406d403d6f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22610 affects version 18.2.14-tuxcare.3 of @angular/animations, and is fixed in 18.2.14-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-27970",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5f22731d-af96-54ec-91cc-363621a4ef90",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-27970 affects version 18.2.14-tuxcare.3 of @angular/animations, and is fixed in 18.2.14-tuxcare.7."
      }
    },
    {
      "id": "CVE-2026-32635",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:05bf0b76-4576-5f5c-80a8-2528128da933",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32635 affects version 18.2.14-tuxcare.3 of @angular/animations, and is fixed in 18.2.14-tuxcare.5."
      }
    },
    {
      "id": "CVE-2026-46417",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:90596a89-f791-576f-8178-798aa57ae973",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46417 affects version 18.2.14-tuxcare.3 of @angular/animations, and is fixed in 18.2.14-tuxcare.10."
      }
    },
    {
      "id": "CVE-2026-50168",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:50a8100c-beed-5f72-ba62-0f529a3fe02f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50168 affects version 18.2.14-tuxcare.3 of @angular/animations, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50169",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:516b87f4-7325-5475-a2ac-b6e10ec8a702",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50169 affects version 18.2.14-tuxcare.3 of @angular/animations, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50170",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a8ef7f38-10ac-5f5b-b325-1f56bda07c7a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50170 affects version 18.2.14-tuxcare.3 of @angular/animations, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50171",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:02ea6db4-744b-5d6b-b5b2-404d398889c0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50171 affects version 18.2.14-tuxcare.3 of @angular/animations, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50184",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0c19de18-8bdc-5c46-a019-1d9293fdf9ec",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50184 affects version 18.2.14-tuxcare.3 of @angular/animations, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50555",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1eb16c58-8b82-5399-ac6a-88860fa80265",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50555 affects version 18.2.14-tuxcare.3 of @angular/animations, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50556",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:63861988-b8a6-5f05-94dc-2ef6b0d443b2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50556 affects version 18.2.14-tuxcare.3 of @angular/animations, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50557",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:708e4925-aeb3-5b60-b48f-31b919d8ed97",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50557 affects version 18.2.14-tuxcare.3 of @angular/animations, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-52725",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b8cb6684-6dba-5c11-9208-c01cda4b9440",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-52725 affects version 18.2.14-tuxcare.3 of @angular/animations, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-54264",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f1e76ac0-76ed-50ba-95b2-0e5fa827848b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54264 affects version 18.2.14-tuxcare.3 of @angular/animations, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-54265",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:069961f9-e9d8-52d1-a690-a4e4b815dcaa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54265 affects version 18.2.14-tuxcare.3 of @angular/animations, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-54266",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4c9ad4fe-c654-5999-b904-673c867a0580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54266 affects version 18.2.14-tuxcare.3 of @angular/animations, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-54267",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:693e23fb-bbda-5939-980d-4b68247fe205",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54267 affects version 18.2.14-tuxcare.3 of @angular/animations, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-54268",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:cf04a3ae-66f6-5e7a-bf54-50d222585cb1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54268 affects version 18.2.14-tuxcare.3 of @angular/animations, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-68945",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7adff457-75f4-5c97-82c7-9d417a2bf2ee",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-68945 affects version 18.2.14-tuxcare.3 of @angular/animations, and is fixed in 18.2.14-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-69149",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:610def78-8a4b-5b7f-9f7f-f5c70f96d0a6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69149 affects version 18.2.14-tuxcare.3 of @angular/animations, and is fixed in 18.2.14-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-69151",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:79cb6f09-e2b3-5a8f-8335-fc35de0cf702",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69151 affects version 18.2.14-tuxcare.3 of @angular/animations, and is fixed in 18.2.14-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-88056",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:210e9622-99b5-5535-885f-37f7b63c3d0a",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.3 of @angular/animations. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-88057",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:279aba1b-46fe-575c-93b6-a10d55b87dd8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.3 of @angular/animations."
      }
    },
    {
      "id": "CVE-2026-88059",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f38155cb-ec60-5932-a2e4-39d3d83d74c4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.3 of @angular/animations."
      }
    },
    {
      "id": "CVE-2026-88060",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f8653886-ac2f-5250-9868-db38c8a7254b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.3 of @angular/animations."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.3"
    }
  ]
}