{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:9b158337-1cd8-5da8-aa8f-d8bb855a514c",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/localize",
      "purl": "pkg:npm/%40angular/localize@18.2.14-tuxcare.2",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.2",
      "version": "18.2.14-tuxcare.2",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-66035",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:32ad8b32-cd63-502d-9beb-0d3ab8252f0f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.2 of @angular/localize."
      }
    },
    {
      "id": "CVE-2025-66412",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:15a8f4a5-f91f-5a4d-98a9-0dbf195a7460",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66412 affects version 18.2.14-tuxcare.2 of @angular/localize, and is fixed in 18.2.14-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-22610",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e41dd151-6a27-5441-b8cc-3dc03f861d19",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22610 affects version 18.2.14-tuxcare.2 of @angular/localize, and is fixed in 18.2.14-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-27970",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ccef5da8-6b20-520f-9731-d3f98f4f9751",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-27970 affects version 18.2.14-tuxcare.2 of @angular/localize, and is fixed in 18.2.14-tuxcare.7."
      }
    },
    {
      "id": "CVE-2026-32635",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b10bb310-fa39-53ca-aca7-c62178606eae",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32635 affects version 18.2.14-tuxcare.2 of @angular/localize, and is fixed in 18.2.14-tuxcare.5."
      }
    },
    {
      "id": "CVE-2026-46417",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:06e05588-ca66-5774-9c99-2365611302da",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46417 affects version 18.2.14-tuxcare.2 of @angular/localize, and is fixed in 18.2.14-tuxcare.10."
      }
    },
    {
      "id": "CVE-2026-50168",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a6fc1c28-aeb6-531b-804c-aa6a9d2ca309",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50168 affects version 18.2.14-tuxcare.2 of @angular/localize, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50169",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:45161c59-4056-56f0-9a6c-4ce2fcc99f03",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50169 affects version 18.2.14-tuxcare.2 of @angular/localize, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50170",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8af8ab47-ec3d-556d-8368-0430b75db83c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50170 affects version 18.2.14-tuxcare.2 of @angular/localize, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50171",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:98bcb4b6-40ce-5138-ad82-a5813265ce60",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50171 affects version 18.2.14-tuxcare.2 of @angular/localize, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50184",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c9adc954-ae5d-5217-a434-9b8d6020c5ef",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50184 affects version 18.2.14-tuxcare.2 of @angular/localize, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50555",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4f44f18c-800a-54eb-bf18-c69b9a4737c1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50555 affects version 18.2.14-tuxcare.2 of @angular/localize, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50556",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9d627cb7-c1b6-5927-b512-9e78bf807419",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50556 affects version 18.2.14-tuxcare.2 of @angular/localize, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50557",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6c1a4807-882b-546a-b2b4-4a652aef2f70",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50557 affects version 18.2.14-tuxcare.2 of @angular/localize, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-52725",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:79e63e1e-1d09-5d59-b2c3-7b4da94230a2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-52725 affects version 18.2.14-tuxcare.2 of @angular/localize, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-54264",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8021d5b0-6bd7-565c-b54e-f08de63b1176",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54264 affects version 18.2.14-tuxcare.2 of @angular/localize, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-54265",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:64619336-b34b-5cd8-93e8-3e1dd93993c2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54265 affects version 18.2.14-tuxcare.2 of @angular/localize, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-54266",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:69dde145-5919-5235-9c18-efb0b46b196f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54266 affects version 18.2.14-tuxcare.2 of @angular/localize, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-54267",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0413b6ef-cebe-5e61-8322-fd9556210538",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54267 affects version 18.2.14-tuxcare.2 of @angular/localize, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-54268",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:598db839-7014-5918-80c3-3af938e78d66",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54268 affects version 18.2.14-tuxcare.2 of @angular/localize, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-68945",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b7a0f628-c3d9-55be-aa12-e09d06a12558",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-68945 affects version 18.2.14-tuxcare.2 of @angular/localize, and is fixed in 18.2.14-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-69149",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0191011b-de2c-59e6-9b24-a304e6a297be",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69149 affects version 18.2.14-tuxcare.2 of @angular/localize, and is fixed in 18.2.14-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-69151",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:998a3b63-17d4-5aa4-b5a1-1d2fbb501a4b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69151 affects version 18.2.14-tuxcare.2 of @angular/localize, and is fixed in 18.2.14-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-88056",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2b94fc05-c6ff-550d-8185-b1eed3f2dc37",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.2 of @angular/localize. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-88057",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:00b14245-7bf8-5678-898a-dd0e2356cf6c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.2 of @angular/localize."
      }
    },
    {
      "id": "CVE-2026-88059",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ccfab2cb-abb0-51e3-acc1-f45b8a9b635e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.2 of @angular/localize."
      }
    },
    {
      "id": "CVE-2026-88060",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c70d8295-cb87-5e6a-a61c-170d772139ca",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.2 of @angular/localize."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.2"
    }
  ]
}