{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:439d041b-2182-50d0-a290-5055a2c4346e",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/forms",
      "purl": "pkg:npm/%40angular/forms@18.2.14-tuxcare.3",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.3",
      "version": "18.2.14-tuxcare.3",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-66035",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5b78453c-ac95-55d1-b3cf-e85344a8d3a3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.3 of @angular/forms."
      }
    },
    {
      "id": "CVE-2025-66412",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:38021f42-4c53-5bdd-9ee8-eed4b0b93e73",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.3 of @angular/forms."
      }
    },
    {
      "id": "CVE-2026-22610",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9bd1383f-160e-5a83-8622-741fe4216a3e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22610 affects version 18.2.14-tuxcare.3 of @angular/forms, and is fixed in 18.2.14-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-27970",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d759b25e-115a-5e8c-af43-df30f9ccfe3b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-27970 affects version 18.2.14-tuxcare.3 of @angular/forms, and is fixed in 18.2.14-tuxcare.7."
      }
    },
    {
      "id": "CVE-2026-32635",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9c3077f5-c0fc-5b65-8dee-7aab675bc067",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32635 affects version 18.2.14-tuxcare.3 of @angular/forms, and is fixed in 18.2.14-tuxcare.5."
      }
    },
    {
      "id": "CVE-2026-46417",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1fa0b9e4-cf34-5334-924b-98f12e69ea23",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46417 affects version 18.2.14-tuxcare.3 of @angular/forms, and is fixed in 18.2.14-tuxcare.10."
      }
    },
    {
      "id": "CVE-2026-50168",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:fef3d73f-524c-5acc-b4d4-8fe073c5ebac",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50168 affects version 18.2.14-tuxcare.3 of @angular/forms, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50169",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:36517b9f-031d-5cf7-a27e-c1a18655e212",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50169 affects version 18.2.14-tuxcare.3 of @angular/forms, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50170",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2d7c79c2-b2aa-53f2-822b-4cc7e6677b44",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50170 affects version 18.2.14-tuxcare.3 of @angular/forms, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50171",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ca1546c6-7288-5dc5-bb6c-0701519b5bc4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50171 affects version 18.2.14-tuxcare.3 of @angular/forms, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50184",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:cbfeb8a2-bdd0-5fde-923b-5b9200fa8648",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50184 affects version 18.2.14-tuxcare.3 of @angular/forms, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50555",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:38bb7a5f-52b4-57a8-acfd-3f5880977df8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50555 affects version 18.2.14-tuxcare.3 of @angular/forms, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50556",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4ebb66dc-b937-5d27-b181-41391b9cefc9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50556 affects version 18.2.14-tuxcare.3 of @angular/forms, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50557",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f752fb83-3dec-53eb-966a-abc1426ed5ed",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50557 affects version 18.2.14-tuxcare.3 of @angular/forms, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-52725",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a6a4fccf-4fc4-502d-9cf2-c5f1e08347d3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-52725 affects version 18.2.14-tuxcare.3 of @angular/forms, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-54264",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6a7dbc27-8032-51ec-80cb-aa9ed3fbce17",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54264 affects version 18.2.14-tuxcare.3 of @angular/forms, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-54265",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ff95cf7c-4d66-52fa-8a5e-4a96fd186750",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54265 affects version 18.2.14-tuxcare.3 of @angular/forms, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-54266",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:34ad32a4-7f9f-5978-b433-cc79fe2a6d1b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54266 affects version 18.2.14-tuxcare.3 of @angular/forms, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-54267",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:00089ed1-880a-556f-8d2d-eccf33451ec7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54267 affects version 18.2.14-tuxcare.3 of @angular/forms, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-54268",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ce22fa91-02b7-547e-9954-dbdaa4d399e9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54268 affects version 18.2.14-tuxcare.3 of @angular/forms, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-68945",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:718913e5-70ee-580c-80e1-294ba0625e3a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-68945 affects version 18.2.14-tuxcare.3 of @angular/forms, and is fixed in 18.2.14-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-69149",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7ad3f1d3-38c5-5f4f-94ce-1023bd8867fa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69149 affects version 18.2.14-tuxcare.3 of @angular/forms, and is fixed in 18.2.14-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-69151",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:964e82c1-4eac-53f0-a0ab-3236c4b8cc8c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69151 affects version 18.2.14-tuxcare.3 of @angular/forms, and is fixed in 18.2.14-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-88056",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:cea475db-484d-57cd-9615-2e0c0a48a634",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.3 of @angular/forms. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-88057",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5b315601-37e7-5486-b514-4327254452d3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.3 of @angular/forms."
      }
    },
    {
      "id": "CVE-2026-88059",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:72188803-b055-5370-aac6-d552b04fb855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.3 of @angular/forms."
      }
    },
    {
      "id": "CVE-2026-88060",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0bb716ab-d95e-5c23-997a-07853aef5913",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.3 of @angular/forms."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.3"
    }
  ]
}