{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:dc690ebf-1910-560f-832e-9e46c16b00ba",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/common",
      "purl": "pkg:npm/%40angular/common@13.3.11-tuxcare.6",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/common@13.3.11-tuxcare.6",
      "version": "13.3.11-tuxcare.6",
      "pedigree": {
        "ancestors": [
          {
            "name": "@angular/common",
            "purl": "pkg:npm/%40angular/common@13.3.11",
            "type": "library",
            "version": "13.3.11"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-66035",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/common@13.3.11-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:d017cff5-ff0d-5891-9433-c8b824da3382",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66035 is fixed in version 13.3.11-tuxcare.6 of @angular/common."
      }
    },
    {
      "id": "CVE-2026-111753",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/common@13.3.11-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:8c751bf0-9aeb-5537-8827-2c1cbac3a45b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-111753 affects version 13.3.11-tuxcare.6 of @angular/common."
      }
    },
    {
      "id": "CVE-2026-50170",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/common@13.3.11-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:1024aaf1-52c0-5bc4-aed8-3caf8ef70665",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50170 is fixed in version 13.3.11-tuxcare.6 of @angular/common."
      }
    },
    {
      "id": "CVE-2026-50171",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/common@13.3.11-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:f902678b-5c99-543d-bb0e-2e8501ab5451",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50171 is fixed in version 13.3.11-tuxcare.6 of @angular/common."
      }
    },
    {
      "id": "CVE-2026-54266",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/common@13.3.11-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:961f325d-6caa-5cf3-8b21-fb4c1431718c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54266 is fixed in version 13.3.11-tuxcare.6 of @angular/common."
      }
    },
    {
      "id": "CVE-2026-54268",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/common@13.3.11-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:41da3473-9096-59ba-b041-2d792b12194c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54268 is fixed in version 13.3.11-tuxcare.6 of @angular/common."
      }
    },
    {
      "id": "CVE-2026-68945",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/common@13.3.11-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:28a89437-6b1f-57fd-87c9-d1b266c49abf",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-68945 does not affect version 13.3.11-tuxcare.6 of @angular/common. not_affected \u2014 Angular 13.3.11 is NOT affected by CVE-2026-68945. The vulnerable HttpTransferCache feature does not exist in this version. HttpTransferCache was introduced in Angular 16.0.0-next.0 (March 2023), approximately 3 years after Angular 13.3.11's release. The target version only contains the basic TransferState mechanism for generic state transfer, but lacks the automated HTTP request caching functi...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-88059",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/common@13.3.11-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:0e85b6aa-225c-51c2-857e-2e6e715ec791",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-88059 does not affect version 13.3.11-tuxcare.6 of @angular/common. not_affected \u2014 Angular 13.3.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache (an automatic HTTP response caching interceptor for SSR hydration) and the functional provider API (provideHttpClient, withRequestsMadeViaParent, provideClientHydration), none of which exist in this version. These features were introduced in Angular v16.0.0, three major versions after 13.3.11. The ta...",
        "justification": "code_not_present"
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/common@13.3.11-tuxcare.6"
    }
  ]
}