{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:27c4f834-dfde-51af-8be6-ae05201ec9e4",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/platform-browser-dynamic",
      "purl": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.7",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.7",
      "version": "16.2.12-tuxcare.7",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-59052",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:3e930760-5d8c-5b04-972e-3ae107246151",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59052 is fixed in version 16.2.12-tuxcare.7 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2025-66035",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:4694c9da-ebdd-5c30-ad3d-9ca597d831d4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66035 is fixed in version 16.2.12-tuxcare.7 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2025-66412",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:bf9fd34d-5f2a-5a53-a755-154c3b077417",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66412 is fixed in version 16.2.12-tuxcare.7 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2026-22610",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:b7550e95-c8ab-5fd8-be81-af02ca852912",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22610 is fixed in version 16.2.12-tuxcare.7 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2026-27970",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:44544024-83f4-5e7c-bf12-8ee38eb214f1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-27970 affects version 16.2.12-tuxcare.7 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.8."
      }
    },
    {
      "id": "CVE-2026-46417",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:e626506a-f5ee-5592-bbd4-b0167b91918f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46417 affects version 16.2.12-tuxcare.7 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.10."
      }
    },
    {
      "id": "CVE-2026-50168",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:44046c90-272e-5c54-a355-487388da8363",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50168 affects version 16.2.12-tuxcare.7 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50169",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:a69b9f81-cfc7-5ed5-83c7-be18e8dee4f4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50169 affects version 16.2.12-tuxcare.7 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50170",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:f473feaf-d807-5af8-a0a0-d0635ffe03fc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50170 affects version 16.2.12-tuxcare.7 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50171",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:cbaee66a-c509-5493-9a1c-86fbf62dffaf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50171 affects version 16.2.12-tuxcare.7 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50184",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:c0516295-2fa5-5403-a965-bf547bbd15d5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50184 affects version 16.2.12-tuxcare.7 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50555",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:eec63666-aab3-5175-a62c-3b3c9fa07020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50555 affects version 16.2.12-tuxcare.7 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50556",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:3a9bae2b-8203-59f6-8458-9fdd8f51467d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50556 affects version 16.2.12-tuxcare.7 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50557",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:9fd91948-6e96-5868-929f-557bd4a2d872",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50557 affects version 16.2.12-tuxcare.7 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-52725",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:cf7c36ca-2835-5814-8385-ae08531bed72",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-52725 affects version 16.2.12-tuxcare.7 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-54264",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:f83988fa-02b7-5fe4-96b5-7f5641528543",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54264 affects version 16.2.12-tuxcare.7 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-54265",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:409686c3-df45-5345-922b-6aa44469b866",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54265 affects version 16.2.12-tuxcare.7 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-54266",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:a08f7470-3f68-5214-9cdd-3a9d1dfdfb36",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54266 affects version 16.2.12-tuxcare.7 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-54267",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:6a443afa-38d3-518a-a7af-6fecdae8ba4c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54267 affects version 16.2.12-tuxcare.7 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-54268",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:84186067-3d51-50f6-b741-2ec512355d55",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54268 affects version 16.2.12-tuxcare.7 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-68945",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:211ea91f-2bcd-505d-b406-d93916188282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-68945 affects version 16.2.12-tuxcare.7 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-69149",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:f8d0c1c7-b02e-5cba-bec2-8c33c4d4973a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69149 affects version 16.2.12-tuxcare.7 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-69151",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:a6c4a0a2-b61f-5945-9644-bdfd28366c7c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69151 affects version 16.2.12-tuxcare.7 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-88056",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:7b5e8f3a-f6b8-555c-a466-d3d3303ebda9",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-88056 does not affect version 16.2.12-tuxcare.7 of @angular/platform-browser-dynamic. not_affected \u2014 CVE-2026-88056 affects Angular versions 20.3.x, 21.2.x, and 22.x where a refactored URL parsing utility added String.prototype.trim() that strips Unicode whitespace, enabling SSRF bypasses. The target (Angular 16.2.12-tuxcare.12) is based on Angular 16.2.x architecture, which predates the vulnerable code pattern entirely. TuxCare created url.ts fresh on June 24, 2026 for CVE-2026-50168, modelin...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-88057",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:ecb6bde3-7665-5857-a406-b1882413caf5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88057 affects version 16.2.12-tuxcare.7 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2026-88059",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:fad357ee-cdcd-5be1-9488-be4edb059c4c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88059 affects version 16.2.12-tuxcare.7 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2026-88060",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:e4ccb19c-a86e-5a68-bb4b-e7249d4a6804",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88060 affects version 16.2.12-tuxcare.7 of @angular/platform-browser-dynamic."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.7"
    }
  ]
}