{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:872f30c4-a4d1-5fb6-86fd-73800987e914",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/service-worker",
      "purl": "pkg:npm/%40angular/service-worker@5.1.0-tuxcare.7",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/service-worker@5.1.0-tuxcare.7",
      "version": "5.1.0-tuxcare.7",
      "pedigree": {
        "ancestors": [
          {
            "name": "@angular/service-worker",
            "purl": "pkg:npm/%40angular/service-worker@5.1.0",
            "type": "library",
            "version": "5.1.0"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-50169",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/service-worker@5.1.0-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:de50c9ab-c121-5f7c-ab68-f16b4aff1438",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.1.0-tuxcare.7 of @angular/service-worker."
      }
    },
    {
      "id": "CVE-2026-50184",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/service-worker@5.1.0-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:215a5de5-a1d7-5097-bbad-0075787a198c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.1.0-tuxcare.7 of @angular/service-worker."
      }
    },
    {
      "id": "CVE-2026-54264",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/service-worker@5.1.0-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:65a8223c-a9ad-528b-8ee7-46a92e8b6ca7",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-54264 does not affect version 5.1.0-tuxcare.7 of @angular/service-worker. not_affected \u2014 Angular 5.1.0-tuxcare.1 is not affected by CVE-2026-54264. The service worker in this version does not preserve or forward request headers when reconstructing asset requests, eliminating the vulnerability pattern entirely. Asset requests are rebuilt from URLs only, with no header copying logic.",
        "justification": "code_not_present"
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/service-worker@5.1.0-tuxcare.7"
    }
  ]
}