{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:c1533f57-b32e-5501-999e-a5b963e01237",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/core",
      "purl": "pkg:npm/%40angular/core@15.2.10-tuxcare.16",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/core@15.2.10-tuxcare.16",
      "version": "15.2.10-tuxcare.16",
      "pedigree": {
        "ancestors": [
          {
            "name": "@angular/core",
            "purl": "pkg:npm/%40angular/core@15.2.10",
            "type": "library",
            "version": "15.2.10"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2021-4231",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@15.2.10-tuxcare.16"
        }
      ],
      "bom-ref": "urn:uuid:269af786-b0b3-59e2-87c3-4717ed8503b0",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2021-4231 does not affect version 15.2.10-tuxcare.16 of @angular/core. not_affected \u2014 CVE-2021-4231 (XSS via unescaped HTML comment delimiters) is not present in Angular 15.2.10-tuxcare.17. The upstream fix (commit 47d9b6d72d by Misko Hevery, 2020-12-15) introduced the `escapeCommentText()` function and applied it to vulnerable comment creation paths. This fix shipped in the upstream Angular release before TuxCare onboarding and is present in the current version. The CVE affects...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-22610",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@15.2.10-tuxcare.16"
        }
      ],
      "bom-ref": "urn:uuid:d1de1a9a-b3af-58b7-9c45-e1305cbc941e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22610 is fixed in version 15.2.10-tuxcare.16 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-27970",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@15.2.10-tuxcare.16"
        }
      ],
      "bom-ref": "urn:uuid:c23ade01-d6f7-5549-bb93-6e849f3758b8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27970 is fixed in version 15.2.10-tuxcare.16 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-32635",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@15.2.10-tuxcare.16"
        }
      ],
      "bom-ref": "urn:uuid:41405c0a-574c-5ebb-8db6-ef4609c716f7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32635 affects version 15.2.10-tuxcare.16 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-50557",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@15.2.10-tuxcare.16"
        }
      ],
      "bom-ref": "urn:uuid:bfcf39d1-d7a6-5f5e-b261-bb1fd18ce76e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50557 is fixed in version 15.2.10-tuxcare.16 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-52725",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@15.2.10-tuxcare.16"
        }
      ],
      "bom-ref": "urn:uuid:879614d2-1d74-5c14-84a9-e9b63449ba0b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-52725 is fixed in version 15.2.10-tuxcare.16 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-54267",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@15.2.10-tuxcare.16"
        }
      ],
      "bom-ref": "urn:uuid:eb956878-5340-5dea-85c2-6b24a7aa6dc5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54267 is fixed in version 15.2.10-tuxcare.16 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-69151",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@15.2.10-tuxcare.16"
        }
      ],
      "bom-ref": "urn:uuid:0784236b-f1ec-55c7-a511-cc33d95de751",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69151 is fixed in version 15.2.10-tuxcare.16 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-88057",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@15.2.10-tuxcare.16"
        }
      ],
      "bom-ref": "urn:uuid:19295b4a-a7ed-589a-b505-8ddb9ffc0b14",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88057 is fixed in version 15.2.10-tuxcare.16 of @angular/core."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/core@15.2.10-tuxcare.16"
    }
  ]
}