{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2bad97a9-4d0f-5f28-8130-001b80c5fb81",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/core",
      "purl": "pkg:npm/%40angular/core@15.2.1-tuxcare.4",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/core@15.2.1-tuxcare.4",
      "version": "15.2.1-tuxcare.4",
      "pedigree": {
        "ancestors": [
          {
            "name": "@angular/core",
            "purl": "pkg:npm/%40angular/core@15.2.1",
            "type": "library",
            "version": "15.2.1"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2021-4231",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@15.2.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:60d3583e-6ed3-59d1-8050-7cccb65b0ce7",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2021-4231 does not affect version 15.2.1-tuxcare.4 of @angular/core. not_affected \u2014 Angular 15.2.1-tuxcare.7 is not affected by CVE-2021-4231. The vulnerability, which allows XSS through unescaped HTML comment delimiters, was fixed in upstream Angular by Misko Hevery on January 22, 2021 (commit 6bf99e0edaedc6b67e765faa996da867420bf3e7), well before the Angular 15.2.1 release. The fix introduces the escapeCommentText() function that wraps comment delimiters with zero-width spac...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-22610",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@15.2.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:4af2b302-d5a7-50e7-9d1a-9c61fed933d4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22610 is fixed in version 15.2.1-tuxcare.4 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-27970",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@15.2.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:06141272-e5b2-59dd-9f65-2a786d187669",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27970 is fixed in version 15.2.1-tuxcare.4 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-32635",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@15.2.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:abef01be-3438-54d9-8f19-5a3798130b22",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32635 affects version 15.2.1-tuxcare.4 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-50557",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@15.2.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:9c6bc075-3d8e-5d43-959c-b5f5db612d59",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50557 is fixed in version 15.2.1-tuxcare.4 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-52725",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@15.2.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:9222cf73-74f1-5837-8f3c-31c02915cbec",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-52725 is fixed in version 15.2.1-tuxcare.4 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-54267",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@15.2.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:07257011-b907-5c54-9d1e-8a6c70533c2a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54267 is fixed in version 15.2.1-tuxcare.4 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-69151",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@15.2.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:49dc95d3-fe43-5f04-bf3e-1ed99d91370e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69151 is fixed in version 15.2.1-tuxcare.4 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-88057",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@15.2.1-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:b832c1ce-d759-5959-8631-6fce27d1d27e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88057 is fixed in version 15.2.1-tuxcare.4 of @angular/core."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/core@15.2.1-tuxcare.4"
    }
  ]
}