{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e5510016-2796-5033-890e-120a3a1acfcf",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/compiler",
      "purl": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.14",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.14",
      "version": "18.2.14-tuxcare.14",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-66035",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:45121955-d70a-5438-92a9-15d554af27aa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler."
      }
    },
    {
      "id": "CVE-2025-66412",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:55884bbd-d880-5b06-b0be-9f4cb980a813",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler."
      }
    },
    {
      "id": "CVE-2026-22610",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:97ed4832-691a-5b1f-ba63-749e6eccaa36",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler."
      }
    },
    {
      "id": "CVE-2026-27970",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:d8c74603-9500-5874-8048-c26afb6c3b9f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler."
      }
    },
    {
      "id": "CVE-2026-32635",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:0006c090-b9f8-5490-89b5-a450e80c5220",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler."
      }
    },
    {
      "id": "CVE-2026-46417",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:bbbafef6-a531-59e3-b155-c5f6552a647e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46417 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler."
      }
    },
    {
      "id": "CVE-2026-50168",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:a3a2f976-0d86-5968-9ecd-74035fd64aef",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50168 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler."
      }
    },
    {
      "id": "CVE-2026-50169",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:da5d72b0-a112-521f-8e5f-c850baab736f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50169 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler."
      }
    },
    {
      "id": "CVE-2026-50170",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:b5461491-ca72-54b9-8658-e6f626d23b81",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50170 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler."
      }
    },
    {
      "id": "CVE-2026-50171",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:b3b1e1ad-8690-503f-8f65-1ea5f7ffce54",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50171 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler."
      }
    },
    {
      "id": "CVE-2026-50184",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:94563a44-3808-58e1-a4cd-5dd540df89fb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50184 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler."
      }
    },
    {
      "id": "CVE-2026-50555",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:421d68f4-7401-581d-ae38-4157fa1f2a11",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50555 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler."
      }
    },
    {
      "id": "CVE-2026-50556",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:92051f1c-89db-5969-ada0-d06a54c70378",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50556 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler."
      }
    },
    {
      "id": "CVE-2026-50557",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:058caf1c-31db-5497-bafc-1439652babbb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50557 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler."
      }
    },
    {
      "id": "CVE-2026-52725",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:c8d1806c-5eaf-5196-821d-4825bed5d26d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-52725 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler."
      }
    },
    {
      "id": "CVE-2026-54264",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:4ad4f10c-adff-509a-a4a2-d41cca673720",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54264 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler."
      }
    },
    {
      "id": "CVE-2026-54265",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:595e062b-5a1c-526a-a2bd-d42c21a6472c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54265 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler."
      }
    },
    {
      "id": "CVE-2026-54266",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:86a71794-2230-5bf1-91ec-54a2ad616a28",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54266 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler."
      }
    },
    {
      "id": "CVE-2026-54267",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:84fc9560-dc77-54df-9ef1-e7d98ca65758",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54267 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler."
      }
    },
    {
      "id": "CVE-2026-54268",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:7f7a7545-deed-55ef-a85f-aad97afb0178",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54268 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler."
      }
    },
    {
      "id": "CVE-2026-68945",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:20a0b352-559c-5bca-923a-7c2c7d855292",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-68945 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler."
      }
    },
    {
      "id": "CVE-2026-69149",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:cceeda65-37e3-5f64-82a0-4c0429e7b580",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69149 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler."
      }
    },
    {
      "id": "CVE-2026-69151",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:684177c4-b670-5a2d-810d-97ae55185a12",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69151 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler."
      }
    },
    {
      "id": "CVE-2026-88056",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:366e5923-f8c3-542d-bd7f-a5b0defb918a",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.14 of @angular/compiler. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-88057",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:3faa25ae-f161-5edd-8d63-b7e2ea91417c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.14 of @angular/compiler."
      }
    },
    {
      "id": "CVE-2026-88059",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:5f1ecb65-76e3-53c7-a982-d70aad2f877b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.14 of @angular/compiler."
      }
    },
    {
      "id": "CVE-2026-88060",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:541d8de5-14ef-5986-82dd-298866be7ec3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.14 of @angular/compiler."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.14"
    }
  ]
}