{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:5763a9b9-2a56-53bf-b77c-5de8ee6dc06f",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/language-service",
      "purl": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.1",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.1",
      "version": "18.2.14-tuxcare.1",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-66035",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:97a20a22-1ebe-50f1-95c5-ed3de1128695",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.1 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2025-66412",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3ed0dccb-89e9-5eb8-8e37-31b779595545",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66412 affects version 18.2.14-tuxcare.1 of @angular/language-service, and is fixed in 18.2.14-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-22610",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6942bd80-3292-5567-80d1-4e3371f02606",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22610 affects version 18.2.14-tuxcare.1 of @angular/language-service, and is fixed in 18.2.14-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-27970",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:300c98f4-bbb9-58a3-a1e5-df12eae419f8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-27970 affects version 18.2.14-tuxcare.1 of @angular/language-service, and is fixed in 18.2.14-tuxcare.7."
      }
    },
    {
      "id": "CVE-2026-32635",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5f0775ba-6e81-5204-9e17-06ed29d0dd89",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32635 affects version 18.2.14-tuxcare.1 of @angular/language-service, and is fixed in 18.2.14-tuxcare.5."
      }
    },
    {
      "id": "CVE-2026-46417",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5699634f-1f7e-5041-8dbc-ed6d3d47d4e0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46417 affects version 18.2.14-tuxcare.1 of @angular/language-service, and is fixed in 18.2.14-tuxcare.10."
      }
    },
    {
      "id": "CVE-2026-50168",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:dfe82281-00f5-5ad6-a645-bde58a2a8158",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50168 affects version 18.2.14-tuxcare.1 of @angular/language-service, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50169",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:dc142587-48bf-56b1-a024-6e734ae73d0c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50169 affects version 18.2.14-tuxcare.1 of @angular/language-service, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50170",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5ab4b8e9-c872-5aaf-ab59-5a1f3e052327",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50170 affects version 18.2.14-tuxcare.1 of @angular/language-service, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50171",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:67b86754-264b-5f1b-beb8-a4e02806220d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50171 affects version 18.2.14-tuxcare.1 of @angular/language-service, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50184",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:511e8a48-d29d-5f60-92a1-22362447bde3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50184 affects version 18.2.14-tuxcare.1 of @angular/language-service, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50555",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c641b814-817e-505f-8f04-75f54db94ada",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50555 affects version 18.2.14-tuxcare.1 of @angular/language-service, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50556",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:682ca611-74c0-52bf-a972-1f61c98b5dc7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50556 affects version 18.2.14-tuxcare.1 of @angular/language-service, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50557",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b638d0ae-c3f0-55c0-a46c-d2af0b4a202d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50557 affects version 18.2.14-tuxcare.1 of @angular/language-service, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-52725",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:eba94a7f-3c3d-572b-b12f-09b9966ac1e0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-52725 affects version 18.2.14-tuxcare.1 of @angular/language-service, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-54264",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a8d51256-aad5-55fd-a3e0-30f1c8b7e33c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54264 affects version 18.2.14-tuxcare.1 of @angular/language-service, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-54265",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:22b7bb6a-12f6-58ee-9bf0-c229a0101176",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54265 affects version 18.2.14-tuxcare.1 of @angular/language-service, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-54266",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:19a8bf31-6385-5ecb-a10d-0a81ac103159",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54266 affects version 18.2.14-tuxcare.1 of @angular/language-service, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-54267",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:83fd96a1-2391-5e87-b334-4057a3179d36",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54267 affects version 18.2.14-tuxcare.1 of @angular/language-service, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-54268",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:aac65202-4d7c-5c3d-9ad6-1965fc4af50c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54268 affects version 18.2.14-tuxcare.1 of @angular/language-service, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-68945",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a6dc93b9-fa45-5492-b39f-eb98fd7e7d81",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-68945 affects version 18.2.14-tuxcare.1 of @angular/language-service, and is fixed in 18.2.14-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-69149",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:becc5339-d5a1-5b15-bcf3-a26a9a899ee6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69149 affects version 18.2.14-tuxcare.1 of @angular/language-service, and is fixed in 18.2.14-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-69151",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c88625f5-9a2e-5a7d-8119-f958b69dd93c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69151 affects version 18.2.14-tuxcare.1 of @angular/language-service, and is fixed in 18.2.14-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-88056",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:cb2172a2-5d97-558e-9b83-f67afb47dbfc",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.1 of @angular/language-service. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-88057",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:19cceb08-40ed-5b8c-9b10-9a1254858a02",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.1 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-88059",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6b703d1a-31d9-5cf1-a566-9deaf3c46eb6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.1 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-88060",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:10108d43-c43f-5a5b-8fb0-ad85395f6eef",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.1 of @angular/language-service."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.1"
    }
  ]
}