{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:cb5034f1-00ae-5ac2-8c15-42ae225d0bac",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/compiler",
      "purl": "pkg:npm/%40angular/compiler@14.2.8-tuxcare.7",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/compiler@14.2.8-tuxcare.7",
      "version": "14.2.8-tuxcare.7",
      "pedigree": {
        "ancestors": [
          {
            "name": "@angular/compiler",
            "purl": "pkg:npm/%40angular/compiler@14.2.8",
            "type": "library",
            "version": "14.2.8"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-66412",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@14.2.8-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:83657d6a-d5b0-587f-88a8-d318b4dec545",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66412 is fixed in version 14.2.8-tuxcare.7 of @angular/compiler."
      }
    },
    {
      "id": "CVE-2026-22610",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@14.2.8-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:681f42df-6922-5f77-b14a-b67dcd34d5d2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22610 is fixed in version 14.2.8-tuxcare.7 of @angular/compiler."
      }
    },
    {
      "id": "CVE-2026-32635",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@14.2.8-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:87cff959-d69e-58e4-90bf-cd275ff8e67b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32635 affects version 14.2.8-tuxcare.7 of @angular/compiler."
      }
    },
    {
      "id": "CVE-2026-50557",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@14.2.8-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:04cf661a-e6f3-5fdd-a680-6d2c49ee89e1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50557 is fixed in version 14.2.8-tuxcare.7 of @angular/compiler."
      }
    },
    {
      "id": "CVE-2026-54265",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@14.2.8-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:363c6c4c-474f-55bb-ad57-4848fe0d9517",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-54265 does not affect version 14.2.8-tuxcare.7 of @angular/compiler. not_affected \u2014 Angular 14.2.8 uses the render3 compiler architecture where two-way bindings are desugared to one-way property bindings before sanitization logic runs, automatically inheriting the same sanitizers. The upstream vulnerability is specific to the template pipeline architecture with TwoWayProperty operations, which does not exist in this version.",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-69151",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@14.2.8-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:3a12dc52-b5a7-5e83-8879-978e102ac0f0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69151 is fixed in version 14.2.8-tuxcare.7 of @angular/compiler."
      }
    },
    {
      "id": "CVE-2026-88057",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@14.2.8-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:f344530b-7a8f-5fda-b2c4-e1d81b38c481",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88057 is fixed in version 14.2.8-tuxcare.7 of @angular/compiler."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/compiler@14.2.8-tuxcare.7"
    }
  ]
}