{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:9a8b1680-2ede-56f3-a72c-934544fd8a3f",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/core",
      "purl": "pkg:npm/%40angular/core@19.2.14-tuxcare.1",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/core@19.2.14-tuxcare.1",
      "version": "19.2.14-tuxcare.1",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-101895",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@19.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fa026a63-3c96-5dc7-9042-f26086cdcdce",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-101895 does not affect version 19.2.14-tuxcare.1 of @angular/core. not_affected \u2014 CVE-2026-101895 describes an infinite-loop DoS vulnerability in domino's HTML parser (lib/HTMLParser.js) when processing incomplete DOCTYPE declarations. While @angular/platform-server uses domino for SSR HTML parsing, the vulnerable source code is NOT present in this Angular repository. Domino is referenced only as a declared npm dependency (package.json line 115: external git repository). Exh...",
        "justification": "requires_dependency"
      }
    },
    {
      "id": "CVE-2026-50555",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@19.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9e04499b-a7f6-5af0-b7af-fb2f6cb67a87",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50555 is fixed in version 19.2.14-tuxcare.1 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-50556",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@19.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7f0e4f86-b6da-5512-96a7-2a25791c29de",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50556 is fixed in version 19.2.14-tuxcare.1 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-69149",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@19.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:85663214-5dc0-5924-9a9f-e826d68b49f1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69149 is fixed in version 19.2.14-tuxcare.1 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-88056",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@19.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:de0314cb-0af8-5192-a23a-81305b682d86",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88056 is fixed in version 19.2.14-tuxcare.1 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-88057",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@19.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:21ac49c7-12bf-5692-9cc7-b16b3d8dad0f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88057 is fixed in version 19.2.14-tuxcare.1 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-88058",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@19.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:baab18bc-9839-5139-b0b2-593e8793ee0f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88058 is fixed in version 19.2.14-tuxcare.1 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-88059",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@19.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:cbb5bb44-0eb1-55ed-af8b-8c1ac9ab575d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88059 is fixed in version 19.2.14-tuxcare.1 of @angular/core."
      }
    },
    {
      "id": "CVE-2026-88060",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/core@19.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9d5e2e40-c947-564b-b5aa-e6aff647aab4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88060 is fixed in version 19.2.14-tuxcare.1 of @angular/core."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/core@19.2.14-tuxcare.1"
    }
  ]
}