{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:62bed04b-0ca1-5966-91da-398d92e71463",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/upgrade",
      "purl": "pkg:npm/%40angular/upgrade@22.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/upgrade@22.0.0",
      "version": "22.0.0",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-54264",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@22.0.0"
        }
      ],
      "bom-ref": "urn:uuid:a1f80359-5946-588e-9398-6352fb1b490d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54264 affects version 22.0.0 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-54265",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@22.0.0"
        }
      ],
      "bom-ref": "urn:uuid:958171ad-a3b5-5739-ad87-7dfd9b1ccf03",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54265 affects version 22.0.0 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-54266",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@22.0.0"
        }
      ],
      "bom-ref": "urn:uuid:1c637a78-e5b6-5307-8154-c80cd7e29733",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54266 affects version 22.0.0 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-54267",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@22.0.0"
        }
      ],
      "bom-ref": "urn:uuid:81627cb2-2791-59fe-be5b-581e45144a47",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54267 affects version 22.0.0 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-54268",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@22.0.0"
        }
      ],
      "bom-ref": "urn:uuid:98e789cd-7ef7-5691-a01c-8ca241f631c5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54268 affects version 22.0.0 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-68945",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@22.0.0"
        }
      ],
      "bom-ref": "urn:uuid:fcd978ab-89c3-51d1-818f-d6bb80baf968",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-68945 affects version 22.0.0 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-69149",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@22.0.0"
        }
      ],
      "bom-ref": "urn:uuid:9e0240f6-073d-53a8-b34c-6c9ea7839c00",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69149 affects version 22.0.0 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-69151",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@22.0.0"
        }
      ],
      "bom-ref": "urn:uuid:856fb558-fe0e-53cb-a130-f9cfbbcf5358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69151 affects version 22.0.0 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-88056",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@22.0.0"
        }
      ],
      "bom-ref": "urn:uuid:d3ba4377-b140-59a2-b1f8-e36c4468a21a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88056 affects version 22.0.0 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-88057",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@22.0.0"
        }
      ],
      "bom-ref": "urn:uuid:3cf41146-7b2a-57ac-99fd-bf9bdde76f3e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88057 affects version 22.0.0 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-88059",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@22.0.0"
        }
      ],
      "bom-ref": "urn:uuid:987adf36-9886-558b-a728-87f53cb9b121",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88059 affects version 22.0.0 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-88060",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@22.0.0"
        }
      ],
      "bom-ref": "urn:uuid:28a92c9e-9b97-5488-8da3-54c04a0b8075",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88060 affects version 22.0.0 of @angular/upgrade."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/upgrade@22.0.0"
    }
  ]
}