{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:1432ccbb-1019-54b5-ae80-c0c1311ff5e8",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/%40angular/bazel@7.2.16-tuxcare.3",
      "type": "library",
      "name": "@angular/bazel",
      "version": "7.2.16-tuxcare.3",
      "purl": "pkg:npm/%40angular/bazel@7.2.16-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:7d108c4d-4b6e-571d-b1e2-4b47283ecb49",
      "id": "CVE-2021-4231",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-4231 affects version 7.2.16-tuxcare.3 of @angular/bazel."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@7.2.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7ca8890a-913e-5fb3-b731-077c411d18cc",
      "id": "CVE-2025-66035",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66035 affects version 7.2.16-tuxcare.3 of @angular/bazel."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@7.2.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b2d5162-7833-5384-ab05-e0d67f01bceb",
      "id": "CVE-2025-66412",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66412 affects version 7.2.16-tuxcare.3 of @angular/bazel."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@7.2.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b5f2568-7cf0-559f-a83c-1cf0fed79795",
      "id": "CVE-2026-22610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22610 is fixed in version 7.2.16-tuxcare.3 of @angular/bazel."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@7.2.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3efaafa7-1a0c-54f4-9c9f-3beb65ba746a",
      "id": "CVE-2026-27970",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-27970 affects version 7.2.16-tuxcare.3 of @angular/bazel."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@7.2.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b58eed4-c962-5e15-b3fa-76dc1fddd379",
      "id": "CVE-2026-41423",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41423 is fixed in version 7.2.16-tuxcare.3 of @angular/bazel."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@7.2.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1ec1d01-dafa-53ac-9503-b70e399e40e9",
      "id": "CVE-2026-46417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46417 affects version 7.2.16-tuxcare.3 of @angular/bazel."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@7.2.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c481a8c-9e38-570b-ab04-ad37448d2c6e",
      "id": "CVE-2026-50168",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50168 affects version 7.2.16-tuxcare.3 of @angular/bazel."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@7.2.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3892c08c-de03-53f9-b0d6-498d2db57033",
      "id": "CVE-2026-50169",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50169 affects version 7.2.16-tuxcare.3 of @angular/bazel."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@7.2.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:77759708-3fac-5fff-bb1e-f8bfd42dc4ec",
      "id": "CVE-2026-50170",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50170 affects version 7.2.16-tuxcare.3 of @angular/bazel."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@7.2.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac56042b-6b6e-50da-aea6-1d3b47384d35",
      "id": "CVE-2026-50171",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50171 affects version 7.2.16-tuxcare.3 of @angular/bazel."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@7.2.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42b909b6-fa4d-54a8-8ed2-8a85a63ef39b",
      "id": "CVE-2026-50184",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50184 affects version 7.2.16-tuxcare.3 of @angular/bazel."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@7.2.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2dba0a1-be2f-5ac5-bf4f-c85b3b33896b",
      "id": "CVE-2026-50555",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50555 affects version 7.2.16-tuxcare.3 of @angular/bazel."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@7.2.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2f0c701-67d6-52fe-aa69-92c84f68ca69",
      "id": "CVE-2026-50556",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50556 affects version 7.2.16-tuxcare.3 of @angular/bazel."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@7.2.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b94e4303-7499-5523-9423-a8a9236d9e32",
      "id": "CVE-2026-50557",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50557 affects version 7.2.16-tuxcare.3 of @angular/bazel."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@7.2.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2a60d43-c663-5930-9abf-b749f9764d29",
      "id": "CVE-2026-52725",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-52725 affects version 7.2.16-tuxcare.3 of @angular/bazel."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@7.2.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a61930f4-01a8-5382-924e-3bf0c7457dd3",
      "id": "CVE-2026-54264",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54264 affects version 7.2.16-tuxcare.3 of @angular/bazel."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@7.2.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4296c9ef-b534-55cc-a6e6-b4788681735a",
      "id": "CVE-2026-54265",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54265 affects version 7.2.16-tuxcare.3 of @angular/bazel."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@7.2.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cba4ffc5-5ca0-5ae5-a2f1-c56ef750d615",
      "id": "CVE-2026-54266",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54266 affects version 7.2.16-tuxcare.3 of @angular/bazel."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@7.2.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63386ff8-2162-541c-8d50-a3a85fa5e44c",
      "id": "CVE-2026-54267",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54267 affects version 7.2.16-tuxcare.3 of @angular/bazel."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@7.2.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ff33a4f2-37e9-513e-8842-b47235780ea0",
      "id": "CVE-2026-54268",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54268 affects version 7.2.16-tuxcare.3 of @angular/bazel."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@7.2.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:307042f7-40a7-520b-b6fc-1e1e87b3b726",
      "id": "CVE-2026-68945",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-68945 does not affect version 7.2.16-tuxcare.3 of @angular/bazel. not_affected \u2014 Angular 7.2.16 is not affected by CVE-2026-68945. The vulnerability concerns HttpTransferCache's cache key generation logic that treats repeated HTTP parameters (`?role=user&role=admin`) and comma-separated values (`?role=user,admin`) as identical, causing cache key collisions. However, the HttpTransferCache feature does not exist in version 7.2.16\u2014it was introduced in Angular v16. While v7.2.1..."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@7.2.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:329ff74a-4694-528c-83d8-733612f866f9",
      "id": "CVE-2026-69149",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69149 affects version 7.2.16-tuxcare.3 of @angular/bazel."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@7.2.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29605d6f-ecdd-541e-a5cd-d3de9c79d680",
      "id": "CVE-2026-69151",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69151 affects version 7.2.16-tuxcare.3 of @angular/bazel."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@7.2.16-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/bazel@7.2.16-tuxcare.3"
    }
  ]
}