{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:0081038f-b840-5c02-b8ff-c38b6e10565b",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/%40angular/upgrade@12.2.17-tuxcare.6",
      "type": "library",
      "name": "@angular/upgrade",
      "version": "12.2.17-tuxcare.6",
      "purl": "pkg:npm/%40angular/upgrade@12.2.17-tuxcare.6"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:1f955fbb-4537-5a7c-a350-afec05753454",
      "id": "CVE-2025-66035",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66035 affects version 12.2.17-tuxcare.6 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@12.2.17-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d27dc063-bad9-5fc8-9762-9650ad314c4d",
      "id": "CVE-2025-66412",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66412 is fixed in version 12.2.17-tuxcare.6 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@12.2.17-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68c2df33-9edd-5cd2-86c3-816598fa106c",
      "id": "CVE-2026-22610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22610 is fixed in version 12.2.17-tuxcare.6 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@12.2.17-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e18cda6-bb65-5886-8e8f-b89aa265d91b",
      "id": "CVE-2026-27970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27970 is fixed in version 12.2.17-tuxcare.6 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@12.2.17-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee93faf7-9214-502e-88e1-7213a1b50524",
      "id": "CVE-2026-41423",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41423 is fixed in version 12.2.17-tuxcare.6 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@12.2.17-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e61e906-cbbc-5570-a481-079dc548c208",
      "id": "CVE-2026-46417",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46417 is fixed in version 12.2.17-tuxcare.6 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@12.2.17-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2aaf7b06-94bb-5ded-8fef-3adbcb65200b",
      "id": "CVE-2026-50168",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50168 affects version 12.2.17-tuxcare.6 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@12.2.17-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08dfec14-52f8-52bf-8dc4-5c1d415dfe8b",
      "id": "CVE-2026-50169",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50169 affects version 12.2.17-tuxcare.6 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@12.2.17-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a446120-10fc-5bec-9d46-14ff60fc159b",
      "id": "CVE-2026-50170",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50170 affects version 12.2.17-tuxcare.6 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@12.2.17-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4d4de06-80fd-529d-91a0-63565801824a",
      "id": "CVE-2026-50171",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50171 affects version 12.2.17-tuxcare.6 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@12.2.17-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5f6e425-ee81-5434-8e20-5c0ec08ea0af",
      "id": "CVE-2026-50184",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50184 affects version 12.2.17-tuxcare.6 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@12.2.17-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63e94f47-41c1-5c6d-b347-7bde6fc3b4e3",
      "id": "CVE-2026-50555",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50555 affects version 12.2.17-tuxcare.6 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@12.2.17-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2fdb9b0-1a79-5dfe-875c-0d787ac52bd6",
      "id": "CVE-2026-50556",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50556 affects version 12.2.17-tuxcare.6 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@12.2.17-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e50e213b-29ca-548e-a61a-3f0727793ed3",
      "id": "CVE-2026-50557",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50557 affects version 12.2.17-tuxcare.6 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@12.2.17-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aaf46d2d-7036-55d6-a4c2-d9d93b644afd",
      "id": "CVE-2026-52725",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-52725 affects version 12.2.17-tuxcare.6 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@12.2.17-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5487c6c-141a-5d98-8d7e-41d9472f6a12",
      "id": "CVE-2026-54264",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54264 affects version 12.2.17-tuxcare.6 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@12.2.17-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed3ddd89-8c46-58e9-abc9-09ab9c71db2b",
      "id": "CVE-2026-54265",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54265 affects version 12.2.17-tuxcare.6 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@12.2.17-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6905e2a-94fc-5164-b9e2-75d737e2fb84",
      "id": "CVE-2026-54266",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54266 affects version 12.2.17-tuxcare.6 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@12.2.17-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a032bc2-11dd-52b0-a66f-637d8cd7d07f",
      "id": "CVE-2026-54267",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54267 affects version 12.2.17-tuxcare.6 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@12.2.17-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ff0a34d3-366b-5060-b1d3-c861c54fd634",
      "id": "CVE-2026-54268",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54268 affects version 12.2.17-tuxcare.6 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@12.2.17-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a5ee752-e343-5f56-8857-5c334dd23074",
      "id": "CVE-2026-68945",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-68945 does not affect version 12.2.17-tuxcare.6 of @angular/upgrade. not_affected \u2014 Angular 12.2.17 does not contain the HttpTransferCache feature affected by CVE-2026-68945. HttpTransferCache, which caches HTTP requests during Server-Side Rendering (SSR), was first introduced in Angular 16.0.0\u2014approximately 4 major versions after the target version. The vulnerability concerns cache-key collision when repeated HTTP parameters are serialized, but since the entire HttpTransferCa..."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@12.2.17-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf2d8601-8e2e-53ee-bf90-e109fb91a90e",
      "id": "CVE-2026-69149",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69149 affects version 12.2.17-tuxcare.6 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@12.2.17-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a97993cc-2b0a-57e5-9ab1-6b5b9ef75a33",
      "id": "CVE-2026-69151",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69151 affects version 12.2.17-tuxcare.6 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@12.2.17-tuxcare.6"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/upgrade@12.2.17-tuxcare.6"
    }
  ]
}