{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:c67124e1-e58a-5473-b778-f5b940efa10e",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/%40angular/platform-browser@7.2.16-tuxcare.9",
      "type": "library",
      "name": "@angular/platform-browser",
      "version": "7.2.16-tuxcare.9",
      "purl": "pkg:npm/%40angular/platform-browser@7.2.16-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:dd95fde4-d8e8-5f7f-82ec-6400f3e1f0f0",
      "id": "CVE-2021-4231",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-4231 is fixed in version 7.2.16-tuxcare.9 of @angular/platform-browser."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser@7.2.16-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a45d9427-7c53-56e8-92ce-935dbf7b62ea",
      "id": "CVE-2025-66035",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66035 affects version 7.2.16-tuxcare.9 of @angular/platform-browser."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser@7.2.16-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2cabe326-8757-5259-9f23-6192e0654b80",
      "id": "CVE-2025-66412",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66412 is fixed in version 7.2.16-tuxcare.9 of @angular/platform-browser."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser@7.2.16-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6c75bac-4465-590e-8a67-65abf62fdc13",
      "id": "CVE-2026-22610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22610 is fixed in version 7.2.16-tuxcare.9 of @angular/platform-browser."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser@7.2.16-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd8913dd-d1da-563f-8b27-92376265abdb",
      "id": "CVE-2026-27970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27970 is fixed in version 7.2.16-tuxcare.9 of @angular/platform-browser."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser@7.2.16-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad518aa9-1862-5c22-aacf-8ee55022ccf3",
      "id": "CVE-2026-41423",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41423 is fixed in version 7.2.16-tuxcare.9 of @angular/platform-browser."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser@7.2.16-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8add1ba5-90ec-55b6-888f-a36b4516f536",
      "id": "CVE-2026-46417",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46417 is fixed in version 7.2.16-tuxcare.9 of @angular/platform-browser."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser@7.2.16-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29c46f76-f5b8-5cd3-a8bc-604da30ea39b",
      "id": "CVE-2026-50168",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50168 is fixed in version 7.2.16-tuxcare.9 of @angular/platform-browser."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser@7.2.16-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:168e8dd0-23df-5433-8546-5b06cb9a1c0d",
      "id": "CVE-2026-50169",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50169 is fixed in version 7.2.16-tuxcare.9 of @angular/platform-browser."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser@7.2.16-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23716d67-83d9-560a-9ddd-97b3af1426c0",
      "id": "CVE-2026-50170",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50170 is fixed in version 7.2.16-tuxcare.9 of @angular/platform-browser."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser@7.2.16-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ef1f164-f770-503c-b77d-b7bc4f7dc176",
      "id": "CVE-2026-50171",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50171 is fixed in version 7.2.16-tuxcare.9 of @angular/platform-browser."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser@7.2.16-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65b02cac-587d-55ff-b9e9-c0b118735853",
      "id": "CVE-2026-50184",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50184 is fixed in version 7.2.16-tuxcare.9 of @angular/platform-browser."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser@7.2.16-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b5b97aba-c464-5bdd-8ed8-a2dacb6d5def",
      "id": "CVE-2026-50555",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50555 is fixed in version 7.2.16-tuxcare.9 of @angular/platform-browser."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser@7.2.16-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b42d714-6cec-50d1-a747-e836aa51a7b1",
      "id": "CVE-2026-50556",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50556 is fixed in version 7.2.16-tuxcare.9 of @angular/platform-browser."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser@7.2.16-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:061a1ba4-5de4-57e3-845a-0d9c1d39b006",
      "id": "CVE-2026-50557",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50557 is fixed in version 7.2.16-tuxcare.9 of @angular/platform-browser."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser@7.2.16-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3f368af-83bb-58bb-be2b-57e5a688048f",
      "id": "CVE-2026-52725",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-52725 is fixed in version 7.2.16-tuxcare.9 of @angular/platform-browser."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser@7.2.16-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0dab0422-845d-5bcb-b6af-7ee92d3c7327",
      "id": "CVE-2026-54264",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54264 is fixed in version 7.2.16-tuxcare.9 of @angular/platform-browser."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser@7.2.16-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:103bf00c-e1f2-5247-88da-93611cb90050",
      "id": "CVE-2026-54265",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54265 is fixed in version 7.2.16-tuxcare.9 of @angular/platform-browser."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser@7.2.16-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5e3d1a5-eaa0-5b3f-bac0-bb59c360f78b",
      "id": "CVE-2026-54266",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54266 is fixed in version 7.2.16-tuxcare.9 of @angular/platform-browser."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser@7.2.16-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2a7e059-73b5-577e-a986-09ec41955bbe",
      "id": "CVE-2026-54267",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54267 is fixed in version 7.2.16-tuxcare.9 of @angular/platform-browser."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser@7.2.16-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ce5b703-f42e-599b-a02f-4c59e072329f",
      "id": "CVE-2026-54268",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54268 is fixed in version 7.2.16-tuxcare.9 of @angular/platform-browser."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser@7.2.16-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84040c69-1efd-542f-8fd4-541bcc405de0",
      "id": "CVE-2026-68945",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-68945 does not affect version 7.2.16-tuxcare.9 of @angular/platform-browser. not_affected \u2014 Angular 7.2.16 is not affected by CVE-2026-68945. The vulnerability concerns HttpTransferCache's cache key generation logic that treats repeated HTTP parameters (`?role=user&role=admin`) and comma-separated values (`?role=user,admin`) as identical, causing cache key collisions. However, the HttpTransferCache feature does not exist in version 7.2.16\u2014it was introduced in Angular v16. While v7.2.1..."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser@7.2.16-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8aa60110-6591-5644-a153-a96cecc7aa98",
      "id": "CVE-2026-69149",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69149 affects version 7.2.16-tuxcare.9 of @angular/platform-browser."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser@7.2.16-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e50fd8f6-da61-5046-9e91-213a785acf63",
      "id": "CVE-2026-69151",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69151 affects version 7.2.16-tuxcare.9 of @angular/platform-browser."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser@7.2.16-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/platform-browser@7.2.16-tuxcare.9"
    }
  ]
}