{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:7e017521-cc11-5289-9085-81d83a098954",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/language-service",
      "purl": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.5",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.5",
      "version": "18.2.14-tuxcare.5",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-66035",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:05db348a-06cc-5dbc-b686-5122e24d30a4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.5 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2025-66412",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:dc4ec044-f293-5736-b610-90a4003375b4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.5 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-22610",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:bd7f5f00-6227-53a5-8024-a49ff5cd0eb8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.5 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-27970",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:9963bcae-fa7d-5c0b-b54c-282e5a065b0f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-27970 affects version 18.2.14-tuxcare.5 of @angular/language-service, and is fixed in 18.2.14-tuxcare.7."
      }
    },
    {
      "id": "CVE-2026-32635",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:d0df12ab-c3c1-5ab8-a572-6ff15b4b998e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.5 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-46417",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:f10854aa-a821-509e-979f-d2f23061f65b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46417 affects version 18.2.14-tuxcare.5 of @angular/language-service, and is fixed in 18.2.14-tuxcare.10."
      }
    },
    {
      "id": "CVE-2026-50168",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:8491a3c0-faf2-5bea-b6e1-526aa5220029",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50168 affects version 18.2.14-tuxcare.5 of @angular/language-service, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50169",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:fc2d8f71-53a5-5249-931a-627fc3fd6328",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50169 affects version 18.2.14-tuxcare.5 of @angular/language-service, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50170",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:90f1f95d-2dbd-579a-a6c2-98357d5c713c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50170 affects version 18.2.14-tuxcare.5 of @angular/language-service, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50171",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:a8c29da3-66f5-5efb-919a-13c4823a45b5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50171 affects version 18.2.14-tuxcare.5 of @angular/language-service, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50184",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:3d5d9a77-de81-5a5e-b1bd-2475ee504c46",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50184 affects version 18.2.14-tuxcare.5 of @angular/language-service, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50555",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:e5316bfa-db95-5a3b-b87e-50f86b5a13f5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50555 affects version 18.2.14-tuxcare.5 of @angular/language-service, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50556",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:c475cd4e-a4d6-554b-94bc-f56e23d0b1ca",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50556 affects version 18.2.14-tuxcare.5 of @angular/language-service, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50557",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:55a104f1-6b2e-5717-8a49-88260533c1a2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50557 affects version 18.2.14-tuxcare.5 of @angular/language-service, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-52725",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:d7d634c9-f947-5f4f-96a2-2b087a7cf1ea",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-52725 affects version 18.2.14-tuxcare.5 of @angular/language-service, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-54264",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:3943ea3f-acb4-5a66-af99-ad90994c744e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54264 affects version 18.2.14-tuxcare.5 of @angular/language-service, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-54265",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:f975ef2c-2d73-555e-9329-a66a9699130e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54265 affects version 18.2.14-tuxcare.5 of @angular/language-service, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-54266",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:bc8c118f-9b6a-5676-b5b0-bce8dd85222f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54266 affects version 18.2.14-tuxcare.5 of @angular/language-service, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-54267",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:60a2a207-4316-5a0a-9f33-f80ea802fe7a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54267 affects version 18.2.14-tuxcare.5 of @angular/language-service, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-54268",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:f2d7ef01-2057-543b-998d-efe9bd8c161c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54268 affects version 18.2.14-tuxcare.5 of @angular/language-service, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-68945",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:a9064bad-7070-51a4-825a-e925c21c9b0e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-68945 affects version 18.2.14-tuxcare.5 of @angular/language-service, and is fixed in 18.2.14-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-69149",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:2c329417-f7ac-5f23-96c5-e5ed88c65eaa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69149 affects version 18.2.14-tuxcare.5 of @angular/language-service, and is fixed in 18.2.14-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-69151",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:15cff413-fa38-5e57-8ecf-1e7371b46cc7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69151 affects version 18.2.14-tuxcare.5 of @angular/language-service, and is fixed in 18.2.14-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-88056",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:6d63b8b7-7586-5d27-a156-af0b696131da",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.5 of @angular/language-service. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-88057",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:30ca0569-6848-51d0-acd0-8d8a26e81f88",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.5 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-88059",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:a281521a-5d1d-575f-bf07-f7b3693f1fbe",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.5 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-88060",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:49fd463f-be3b-54b3-aef4-85a1c7df239b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.5 of @angular/language-service."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.5"
    }
  ]
}