{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:4f9583af-03db-550c-ae5d-9c4b09f3bf82",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/forms",
      "purl": "pkg:npm/%40angular/forms@18.2.14-tuxcare.6",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.6",
      "version": "18.2.14-tuxcare.6",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-66035",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:310c9232-f16d-5053-b52a-724946cd1a65",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.6 of @angular/forms."
      }
    },
    {
      "id": "CVE-2025-66412",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:85fad0b7-2529-57c2-a84f-1ed55b8022b3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.6 of @angular/forms."
      }
    },
    {
      "id": "CVE-2026-22610",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:6b7ba5a9-2eec-55f6-9849-fa24bc7a7e57",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.6 of @angular/forms."
      }
    },
    {
      "id": "CVE-2026-27970",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:bbd4eef5-89ba-547b-9cef-b2a56a38f3f6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-27970 affects version 18.2.14-tuxcare.6 of @angular/forms, and is fixed in 18.2.14-tuxcare.7."
      }
    },
    {
      "id": "CVE-2026-32635",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:5dc45642-e9b5-5c4c-9a0d-73d7fbb4542e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.6 of @angular/forms."
      }
    },
    {
      "id": "CVE-2026-46417",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:137a2da2-d939-5779-941a-7f96c81ef443",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46417 affects version 18.2.14-tuxcare.6 of @angular/forms, and is fixed in 18.2.14-tuxcare.10."
      }
    },
    {
      "id": "CVE-2026-50168",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:1044565c-e1cc-527b-8aa6-4f1922937368",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50168 affects version 18.2.14-tuxcare.6 of @angular/forms, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50169",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:1b16a22a-e801-5b87-9211-a6c384769db0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50169 affects version 18.2.14-tuxcare.6 of @angular/forms, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50170",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:a4ef680b-6d5a-5cca-bef5-7d503e748d05",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50170 affects version 18.2.14-tuxcare.6 of @angular/forms, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50171",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:2f725a0e-d3ff-55a8-a306-0350a41b0d62",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50171 affects version 18.2.14-tuxcare.6 of @angular/forms, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50184",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:145c390c-2080-5306-8b80-d537e14515af",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50184 affects version 18.2.14-tuxcare.6 of @angular/forms, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50555",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:1e8ebe80-16e9-529a-9d41-fba8c45ca340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50555 affects version 18.2.14-tuxcare.6 of @angular/forms, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50556",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:2a5888ed-8144-57a7-90a5-4e53a239f660",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50556 affects version 18.2.14-tuxcare.6 of @angular/forms, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50557",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:c7efc20f-e595-5b1e-a4f7-a4d1e38627a2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50557 affects version 18.2.14-tuxcare.6 of @angular/forms, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-52725",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:ae04bf01-eb50-5bc3-92f5-e522c5a2ec29",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-52725 affects version 18.2.14-tuxcare.6 of @angular/forms, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-54264",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:6008e6e0-8235-5fc9-ad01-60cc221760a5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54264 affects version 18.2.14-tuxcare.6 of @angular/forms, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-54265",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:cd21d89b-8b91-512d-840d-898b718dd914",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54265 affects version 18.2.14-tuxcare.6 of @angular/forms, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-54266",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:29232c73-5e93-5f9c-8cdb-76cc7094221c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54266 affects version 18.2.14-tuxcare.6 of @angular/forms, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-54267",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:936d37fa-b334-562e-8324-54005b4047ef",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54267 affects version 18.2.14-tuxcare.6 of @angular/forms, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-54268",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:1a60e34e-8f78-5ea6-b9aa-a8c633f12ed5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54268 affects version 18.2.14-tuxcare.6 of @angular/forms, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-68945",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:1149982e-e717-5d8f-9f21-8c12a8ac80c4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-68945 affects version 18.2.14-tuxcare.6 of @angular/forms, and is fixed in 18.2.14-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-69149",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:ec98efb9-813f-5b0a-8df3-79f2ea7ceed1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69149 affects version 18.2.14-tuxcare.6 of @angular/forms, and is fixed in 18.2.14-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-69151",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:2919846f-f6f5-5127-b0f2-65d14af74102",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69151 affects version 18.2.14-tuxcare.6 of @angular/forms, and is fixed in 18.2.14-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-88056",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:8085f768-c0bf-5aec-961f-effc2b46743b",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.6 of @angular/forms. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-88057",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:04cbd649-4ca1-5a45-8274-ce3bd53c7177",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.6 of @angular/forms."
      }
    },
    {
      "id": "CVE-2026-88059",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:ec1acd3c-d78b-5773-b2e3-59fbb828df9f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.6 of @angular/forms."
      }
    },
    {
      "id": "CVE-2026-88060",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:d8c5c742-059a-5d1a-902a-493e9f232d7b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.6 of @angular/forms."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.6"
    }
  ]
}