{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:6430bd44-4cf6-53cd-b8e0-f3170af8164d",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/platform-browser-dynamic",
      "purl": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.8",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.8",
      "version": "16.2.12-tuxcare.8",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-59052",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:5961368a-3d9f-5c4c-8bb2-1f6a7cc1c8a3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59052 is fixed in version 16.2.12-tuxcare.8 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2025-66035",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:66f2498b-d3a8-5e4e-bec4-a20359e4bc42",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66035 is fixed in version 16.2.12-tuxcare.8 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2025-66412",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:a6ea8d73-dfd7-5a30-ab0e-01c6022aa538",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66412 is fixed in version 16.2.12-tuxcare.8 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2026-22610",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:e15964fc-2172-5527-8e95-2b00e70857e8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22610 is fixed in version 16.2.12-tuxcare.8 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2026-27970",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:0af9b595-f616-52b5-9423-6c77f5c2161b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27970 is fixed in version 16.2.12-tuxcare.8 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2026-46417",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:48b995d8-43b0-5134-9e66-bba2e8e54335",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46417 affects version 16.2.12-tuxcare.8 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.10."
      }
    },
    {
      "id": "CVE-2026-50168",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:7dc961b9-64b9-5d8a-8390-e11517a2a889",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50168 affects version 16.2.12-tuxcare.8 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50169",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:df0bc97a-0fe2-5032-988d-3f0ddb7ba49c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50169 affects version 16.2.12-tuxcare.8 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50170",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:77ec333a-63f6-5354-a8e8-39bb3d8e1a70",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50170 affects version 16.2.12-tuxcare.8 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50171",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:149f554b-ed16-5846-b9bc-80b5bf5ace91",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50171 affects version 16.2.12-tuxcare.8 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50184",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:d1901ac8-3053-5264-b43b-9019438ced1e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50184 affects version 16.2.12-tuxcare.8 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50555",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:97a87e04-226e-5765-b633-cd2452ed04c4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50555 affects version 16.2.12-tuxcare.8 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50556",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:dfca7b60-a2bc-5563-ac87-ad9f6adefa54",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50556 affects version 16.2.12-tuxcare.8 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50557",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:75cd93ec-e95e-5e1d-8075-8102150282dc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50557 affects version 16.2.12-tuxcare.8 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-52725",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:71d3029f-f408-5f7c-b12c-8e4bc72a4c6a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-52725 affects version 16.2.12-tuxcare.8 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-54264",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:5a1d7596-ed6a-5d74-b022-84bb826bb54c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54264 affects version 16.2.12-tuxcare.8 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-54265",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:44cbcdc7-d9f4-5904-9968-a41e39613fae",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54265 affects version 16.2.12-tuxcare.8 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-54266",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:f4c68c5b-fe88-5f84-961a-babed66ac677",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54266 affects version 16.2.12-tuxcare.8 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-54267",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:479f3ba6-8108-5d46-8302-8d64d10e7ce5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54267 affects version 16.2.12-tuxcare.8 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-54268",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:f1fb9f6d-858d-5eaf-afb5-0c1531dd9057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54268 affects version 16.2.12-tuxcare.8 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-68945",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:3f3f5884-bde1-5196-9ef7-d03c39bddf73",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-68945 affects version 16.2.12-tuxcare.8 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-69149",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:b075dc63-e933-52be-9254-61b05f239cab",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69149 affects version 16.2.12-tuxcare.8 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-69151",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:a8835286-38a2-5f2b-ac07-f9289001980d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69151 affects version 16.2.12-tuxcare.8 of @angular/platform-browser-dynamic, and is fixed in 16.2.12-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-88056",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:43b8586f-9d7f-5826-b328-4008e5a3b16c",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-88056 does not affect version 16.2.12-tuxcare.8 of @angular/platform-browser-dynamic. not_affected \u2014 CVE-2026-88056 affects Angular versions 20.3.x, 21.2.x, and 22.x where a refactored URL parsing utility added String.prototype.trim() that strips Unicode whitespace, enabling SSRF bypasses. The target (Angular 16.2.12-tuxcare.12) is based on Angular 16.2.x architecture, which predates the vulnerable code pattern entirely. TuxCare created url.ts fresh on June 24, 2026 for CVE-2026-50168, modelin...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-88057",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:611ae3a1-e127-572f-a9e7-6c1eb9043d38",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88057 affects version 16.2.12-tuxcare.8 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2026-88059",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:f1cea9f1-7ba4-5c71-a66d-716c00e93f2f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88059 affects version 16.2.12-tuxcare.8 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2026-88060",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:ceb159f9-be83-5193-b075-5ba9188ab2eb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88060 affects version 16.2.12-tuxcare.8 of @angular/platform-browser-dynamic."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.8"
    }
  ]
}