{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f95977c5-2a96-505b-aa6f-a701136ac2c7",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/localize",
      "purl": "pkg:npm/%40angular/localize@18.2.14-tuxcare.4",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.4",
      "version": "18.2.14-tuxcare.4",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-66035",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:06852897-ecef-5a04-a059-e7e4a2637db2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.4 of @angular/localize."
      }
    },
    {
      "id": "CVE-2025-66412",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:314ae708-b418-5647-aa41-7d0290175f1d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.4 of @angular/localize."
      }
    },
    {
      "id": "CVE-2026-22610",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:a5070b9c-4bbf-5660-a91d-f460f461c18a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.4 of @angular/localize."
      }
    },
    {
      "id": "CVE-2026-27970",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:bbcafc18-df1e-5428-a697-20d2f415005f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-27970 affects version 18.2.14-tuxcare.4 of @angular/localize, and is fixed in 18.2.14-tuxcare.7."
      }
    },
    {
      "id": "CVE-2026-32635",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:f76af720-3125-5157-9b02-fc2273dd5dc2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32635 affects version 18.2.14-tuxcare.4 of @angular/localize, and is fixed in 18.2.14-tuxcare.5."
      }
    },
    {
      "id": "CVE-2026-46417",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:f038795b-07e3-591e-93e1-d54e1f4515e3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46417 affects version 18.2.14-tuxcare.4 of @angular/localize, and is fixed in 18.2.14-tuxcare.10."
      }
    },
    {
      "id": "CVE-2026-50168",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:750aad02-7c32-5a33-bafc-8ced05393da4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50168 affects version 18.2.14-tuxcare.4 of @angular/localize, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50169",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:53818108-0cde-5f87-b5eb-cb079bac3d23",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50169 affects version 18.2.14-tuxcare.4 of @angular/localize, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50170",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:e847dd49-bd45-5fb0-ab13-7857654f57f7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50170 affects version 18.2.14-tuxcare.4 of @angular/localize, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50171",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:ce7ca8dc-6251-50bc-afc2-0e025dd2be64",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50171 affects version 18.2.14-tuxcare.4 of @angular/localize, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50184",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:38abe7db-f2ff-542f-bbbe-69b448eb8c02",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50184 affects version 18.2.14-tuxcare.4 of @angular/localize, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50555",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:7850e42c-a889-5060-a2d0-7785db8cfcb5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50555 affects version 18.2.14-tuxcare.4 of @angular/localize, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50556",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:5a70e76f-e3b0-5975-9adb-766308d441df",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50556 affects version 18.2.14-tuxcare.4 of @angular/localize, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50557",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:b6f1bb80-f64d-56a3-839f-21a00cf41188",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50557 affects version 18.2.14-tuxcare.4 of @angular/localize, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-52725",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:8ce2ca99-97ba-594e-bc28-71c511ee3f04",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-52725 affects version 18.2.14-tuxcare.4 of @angular/localize, and is fixed in 18.2.14-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-54264",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:4cdfb205-be51-5549-b994-c2f8fda06011",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54264 affects version 18.2.14-tuxcare.4 of @angular/localize, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-54265",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:b69c007b-9465-573a-8d53-899b8925db33",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54265 affects version 18.2.14-tuxcare.4 of @angular/localize, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-54266",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:163ac5cb-0dd5-57ae-b277-b6079891d38a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54266 affects version 18.2.14-tuxcare.4 of @angular/localize, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-54267",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:ec7f2b60-8036-5625-9d30-118ae42a5f4e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54267 affects version 18.2.14-tuxcare.4 of @angular/localize, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-54268",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:757f65d8-fd47-5428-a647-6089c2960bfc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54268 affects version 18.2.14-tuxcare.4 of @angular/localize, and is fixed in 18.2.14-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-68945",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:c6447c09-c6f5-5b34-8e55-af9f19ba0027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-68945 affects version 18.2.14-tuxcare.4 of @angular/localize, and is fixed in 18.2.14-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-69149",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:db6370ef-9b0d-5bce-8a69-2d028183626a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69149 affects version 18.2.14-tuxcare.4 of @angular/localize, and is fixed in 18.2.14-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-69151",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:b10b7384-30cf-5a8e-9c56-588fe44de3d1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69151 affects version 18.2.14-tuxcare.4 of @angular/localize, and is fixed in 18.2.14-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-88056",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:4b74896e-871e-55dc-ab3e-34680589c274",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.4 of @angular/localize. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-88057",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:f4518620-622d-528e-b73b-559d5766ffd5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.4 of @angular/localize."
      }
    },
    {
      "id": "CVE-2026-88059",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:398b3d42-639e-58c8-b494-8f2a515ab7e0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.4 of @angular/localize."
      }
    },
    {
      "id": "CVE-2026-88060",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:6a4f43b1-0066-5e79-a8ee-250664e12927",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.4 of @angular/localize."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.4"
    }
  ]
}