{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f7132ae7-b8d8-5b40-8d90-91623c04ea62",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/platform-server",
      "purl": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.9",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.9",
      "version": "16.2.12-tuxcare.9",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-59052",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:8cb3ddad-d0ac-5bb3-a059-0e5f5aee8496",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59052 is fixed in version 16.2.12-tuxcare.9 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2025-66035",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:59d37fe0-5fc6-555a-a29d-df1735694850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66035 is fixed in version 16.2.12-tuxcare.9 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2025-66412",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:05cf845b-f4e5-55f5-ae28-ae88acfbaa16",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66412 is fixed in version 16.2.12-tuxcare.9 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-22610",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:0b708f6a-976e-5c17-bf85-098428f2d7b0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22610 is fixed in version 16.2.12-tuxcare.9 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-27970",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:75681271-7aa5-56e8-ac61-59f7f087bfdb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27970 is fixed in version 16.2.12-tuxcare.9 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-46417",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:c4f626e6-bbc8-5680-b9c3-999ce2e851df",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46417 affects version 16.2.12-tuxcare.9 of @angular/platform-server, and is fixed in 16.2.12-tuxcare.10."
      }
    },
    {
      "id": "CVE-2026-50168",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:070a2427-c392-586b-8988-09eae04034c9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50168 affects version 16.2.12-tuxcare.9 of @angular/platform-server, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50169",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:5cef3087-0b5d-5f45-a515-8943aa46da75",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50169 affects version 16.2.12-tuxcare.9 of @angular/platform-server, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50170",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:1c1b25c0-9e67-572b-a92a-b6d84a2c63f2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50170 affects version 16.2.12-tuxcare.9 of @angular/platform-server, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50171",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:e48e6581-69eb-54fe-8846-877d33c23392",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50171 affects version 16.2.12-tuxcare.9 of @angular/platform-server, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50184",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:e0de85fb-cc13-5b84-80ac-18b845e9f79e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50184 affects version 16.2.12-tuxcare.9 of @angular/platform-server, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50555",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:8eb1b069-87ac-5ce2-a3ef-79b98d8bd2ef",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50555 affects version 16.2.12-tuxcare.9 of @angular/platform-server, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50556",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:b1c70828-7cee-5f49-8772-3897c70affaa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50556 affects version 16.2.12-tuxcare.9 of @angular/platform-server, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-50557",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:a9000220-ce33-53f4-92c0-84017372de94",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50557 affects version 16.2.12-tuxcare.9 of @angular/platform-server, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-52725",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:9266c5cc-f0ff-5487-9f30-8613e74dc6b7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-52725 affects version 16.2.12-tuxcare.9 of @angular/platform-server, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-54264",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:7988aa96-5a9b-5f50-9aa9-baae05dbf037",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54264 affects version 16.2.12-tuxcare.9 of @angular/platform-server, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-54265",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:37488017-6d4d-51de-a891-97d0719d151e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54265 affects version 16.2.12-tuxcare.9 of @angular/platform-server, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-54266",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:da210af6-0cfe-5c6e-95e7-5e0175ad2562",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54266 affects version 16.2.12-tuxcare.9 of @angular/platform-server, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-54267",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:12ff1e6d-25a2-5124-aa24-b2d7eb1c3e64",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54267 affects version 16.2.12-tuxcare.9 of @angular/platform-server, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-54268",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:46a3ea34-5bf2-500c-8216-18570f8fb1ca",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54268 affects version 16.2.12-tuxcare.9 of @angular/platform-server, and is fixed in 16.2.12-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-68945",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:27d8c3ba-2055-535e-83a7-b8d334b763d5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-68945 affects version 16.2.12-tuxcare.9 of @angular/platform-server, and is fixed in 16.2.12-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-69149",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:eaf1f873-0524-57c8-a4dd-dda02a189d0e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69149 affects version 16.2.12-tuxcare.9 of @angular/platform-server, and is fixed in 16.2.12-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-69151",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:dab88059-758d-5030-b4c7-511f666cd0bc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69151 affects version 16.2.12-tuxcare.9 of @angular/platform-server, and is fixed in 16.2.12-tuxcare.12."
      }
    },
    {
      "id": "CVE-2026-88056",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:6836f444-05ec-5028-af2a-dfa03f0dffe3",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-88056 does not affect version 16.2.12-tuxcare.9 of @angular/platform-server. not_affected \u2014 CVE-2026-88056 affects Angular versions 20.3.x, 21.2.x, and 22.x where a refactored URL parsing utility added String.prototype.trim() that strips Unicode whitespace, enabling SSRF bypasses. The target (Angular 16.2.12-tuxcare.12) is based on Angular 16.2.x architecture, which predates the vulnerable code pattern entirely. TuxCare created url.ts fresh on June 24, 2026 for CVE-2026-50168, modelin...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-88057",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:ada9168b-d3c3-5163-a740-26f43f62504d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88057 affects version 16.2.12-tuxcare.9 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-88059",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:090e6aac-726a-54bf-9073-179397e37169",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88059 affects version 16.2.12-tuxcare.9 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-88060",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:d86515b6-0523-5c41-a44a-f90a7b61d453",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88060 affects version 16.2.12-tuxcare.9 of @angular/platform-server."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.9"
    }
  ]
}