{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:959fa189-592a-5894-bddd-39bd3ecb3f74",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/platform-server",
      "purl": "pkg:npm/%40angular/platform-server@12.2.16-tuxcare.7",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/platform-server@12.2.16-tuxcare.7",
      "version": "12.2.16-tuxcare.7",
      "pedigree": {
        "ancestors": [
          {
            "name": "@angular/platform-server",
            "purl": "pkg:npm/%40angular/platform-server@12.2.16",
            "type": "library",
            "version": "12.2.16"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-59052",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.16-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:6cca80c1-2e5e-5f40-bf26-7d04cb9e16d5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59052 affects version 12.2.16-tuxcare.7 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-101895",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.16-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:f4f3e4e9-660f-5d74-bc7f-1a3f837c810f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-101895 is fixed in version 12.2.16-tuxcare.7 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-111754",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.16-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:eb1b20c5-2c17-579b-8643-2aefefb9193b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-111754 affects version 12.2.16-tuxcare.7 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-41423",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.16-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:15c032b1-a357-5dbc-8ca8-b64e39c8ef6a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41423 is fixed in version 12.2.16-tuxcare.7 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-46417",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.16-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:a7e52b2b-206c-58bd-b0cf-23b3cbcea20d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46417 is fixed in version 12.2.16-tuxcare.7 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-50168",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.16-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:f6668d24-1bf0-5636-b528-99936ef5efd8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50168 is fixed in version 12.2.16-tuxcare.7 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-50555",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.16-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:2692541c-6a0d-5285-9b44-65f65903f77f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50555 is fixed in version 12.2.16-tuxcare.7 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-50556",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.16-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:37ca88e7-4f42-5ce0-8b31-d3f8352b208e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50556 is fixed in version 12.2.16-tuxcare.7 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-69149",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.16-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:666af153-f18e-57d7-92b2-db79e0371c87",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69149 is fixed in version 12.2.16-tuxcare.7 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-88056",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.16-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:cde3663f-1dab-5567-9406-bcf2ed14ac61",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-88056 does not affect version 12.2.16-tuxcare.7 of @angular/platform-server. not_affected \u2014 Angular v12.2.16-tuxcare.4 is not affected by CVE-2026-88056. The vulnerability requires a `String.prototype.trim()` call in the parseUrl function that strips Unicode whitespace, converting same-origin validated URLs into cross-origin protocol-relative URLs. This vulnerable code pattern was introduced in Angular v22.x (May 2026) via commit 6e71049021, over 4 years after v12.2.16 was released (J...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-88058",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.16-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:17a854f7-c94a-5af9-ae5c-8d8e897c6a6a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88058 is fixed in version 12.2.16-tuxcare.7 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-88060",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.16-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:3800cec7-bfc3-5535-b227-3d094a7e0d06",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88060 is fixed in version 12.2.16-tuxcare.7 of @angular/platform-server."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/platform-server@12.2.16-tuxcare.7"
    }
  ]
}