{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f7b00d00-78cc-587c-bdc3-74563137d5d4",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/common",
      "purl": "pkg:npm/%40angular/common@18.2.14-tuxcare.5",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.5",
      "version": "18.2.14-tuxcare.5",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-66035",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:0f0651c2-da32-5837-956d-1fe2e41a7758",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.5 of @angular/common."
      }
    },
    {
      "id": "CVE-2025-66412",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:1bcbd19d-7860-5e42-8143-142a4aa2dc5f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.5 of @angular/common."
      }
    },
    {
      "id": "CVE-2026-22610",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:235fa6e0-be5c-526b-af7d-3f561af5761a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.5 of @angular/common."
      }
    },
    {
      "id": "CVE-2026-27970",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:e4cf6a32-1d2e-58d6-9e6d-aed425dca5ff",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-27970 affects version 18.2.14-tuxcare.5 of @angular/common, and is fixed in 18.2.14-tuxcare.7."
      }
    },
    {
      "id": "CVE-2026-32635",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:3e3e3fbc-5889-558f-87f4-93826cea0ba2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.5 of @angular/common."
      }
    },
    {
      "id": "CVE-2026-46417",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:65532457-8a9d-5618-8723-898117779c13",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46417 affects version 18.2.14-tuxcare.5 of @angular/common, and is fixed in 18.2.14-tuxcare.10."
      }
    },
    {
      "id": "CVE-2026-50168",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:d65f4f9e-4a9d-5639-9993-edb2cfdd561e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50168 affects version 18.2.14-tuxcare.5 of @angular/common, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50169",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:752839d8-d7ca-5a8f-93e3-849ef4fc8098",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50169 affects version 18.2.14-tuxcare.5 of @angular/common, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50170",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:797953d6-a309-5072-a80a-795d91896a6d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50170 affects version 18.2.14-tuxcare.5 of @angular/common, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50171",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:fc114e83-acea-566b-a09b-cff81abb9e6f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50171 affects version 18.2.14-tuxcare.5 of @angular/common, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50184",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:da1e94b0-b1d4-55ea-9fdb-5b871b57b281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50184 affects version 18.2.14-tuxcare.5 of @angular/common, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50555",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:a59e0f28-abae-560c-bc02-fdc989cadd58",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50555 affects version 18.2.14-tuxcare.5 of @angular/common, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50556",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:c4ac7fc8-1a15-514a-9320-6b44938b2a66",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50556 affects version 18.2.14-tuxcare.5 of @angular/common, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50557",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:fe326afe-3c41-5243-94e9-713e2bfef8d6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50557 affects version 18.2.14-tuxcare.5 of @angular/common, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-52725",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:ce51354b-a6f5-506b-91a0-fd551ca95c84",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-52725 affects version 18.2.14-tuxcare.5 of @angular/common, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-54264",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:dd2f04d4-2e2c-58fd-b6ea-6323ec6cd95a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54264 affects version 18.2.14-tuxcare.5 of @angular/common, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-54265",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:5158182f-e5aa-5a61-b2e4-95cac50eab29",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54265 affects version 18.2.14-tuxcare.5 of @angular/common, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-54266",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:ce0ddec0-235a-5cf2-ad1c-e8b9aa389d55",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54266 affects version 18.2.14-tuxcare.5 of @angular/common, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-54267",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:b52d1542-031d-595d-8989-f001ed03af3d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54267 affects version 18.2.14-tuxcare.5 of @angular/common, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-54268",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:0e818944-5f3f-574b-bed1-70cc5e222b78",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54268 affects version 18.2.14-tuxcare.5 of @angular/common, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-68945",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:610ed684-86cf-5e70-ae41-46c8b94f5cd6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-68945 affects version 18.2.14-tuxcare.5 of @angular/common, and is fixed in 18.2.14-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-69149",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:7aadcc65-46b8-568f-bcac-a712ed33791e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69149 affects version 18.2.14-tuxcare.5 of @angular/common, and is fixed in 18.2.14-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-69151",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:5b8ab17a-8042-567d-b6f4-b00ad185ebd2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69151 affects version 18.2.14-tuxcare.5 of @angular/common, and is fixed in 18.2.14-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-88056",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:fa76039c-b00b-59af-9afc-074382334d3b",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.5 of @angular/common. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-88057",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:d7b9df1b-205b-5d40-b29c-62b0014deca7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.5 of @angular/common."
      }
    },
    {
      "id": "CVE-2026-88059",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:0cb89300-dc0c-55db-aedb-44d84d522adc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.5 of @angular/common."
      }
    },
    {
      "id": "CVE-2026-88060",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:425b90db-a4aa-5ed3-9933-1981f99d37bb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.5 of @angular/common."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.5"
    }
  ]
}