{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:204f966e-54c9-5603-8cb8-b0355174b962",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/ssr",
      "purl": "pkg:npm/%40angular/ssr@20.3.42",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/ssr@20.3.42",
      "version": "20.3.42",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-59052",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/ssr@20.3.42"
        }
      ],
      "bom-ref": "urn:uuid:b22ffb6e-906f-54f9-8a7e-442e4c0e160c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59052 affects version 20.3.42 of @angular/ssr."
      }
    },
    {
      "id": "CVE-2025-62427",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/ssr@20.3.42"
        }
      ],
      "bom-ref": "urn:uuid:d391bc52-c8b3-5d08-b2e7-8a7d15fece82",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-62427 affects version 20.3.42 of @angular/ssr."
      }
    },
    {
      "id": "CVE-2026-104871",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/ssr@20.3.42"
        }
      ],
      "bom-ref": "urn:uuid:6c1968a2-d5ff-52bf-97fb-f2a06b1d841d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-104871 affects version 20.3.42 of @angular/ssr."
      }
    },
    {
      "id": "CVE-2026-27738",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/ssr@20.3.42"
        }
      ],
      "bom-ref": "urn:uuid:3234bd97-340b-57d9-92b0-a2d052b54929",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-27738 affects version 20.3.42 of @angular/ssr."
      }
    },
    {
      "id": "CVE-2026-27739",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/ssr@20.3.42"
        }
      ],
      "bom-ref": "urn:uuid:a587bf0c-f6d7-5e8d-ab0d-2ea46aa1d756",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-27739 affects version 20.3.42 of @angular/ssr."
      }
    },
    {
      "id": "CVE-2026-33397",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/ssr@20.3.42"
        }
      ],
      "bom-ref": "urn:uuid:5eabf092-fe68-5208-8936-b50cc07a31b4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33397 affects version 20.3.42 of @angular/ssr."
      }
    },
    {
      "id": "CVE-2026-44437",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/ssr@20.3.42"
        }
      ],
      "bom-ref": "urn:uuid:01595111-c6c0-5a98-b1f7-947b53d6d14f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44437 affects version 20.3.42 of @angular/ssr."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/ssr@20.3.42"
    }
  ]
}