{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:12e614d6-7e47-5e29-9ad9-4da9d7bb1a32",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.7",
      "type": "library",
      "name": "@angular/upgrade",
      "version": "5.2.11-tuxcare.7",
      "purl": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.7"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:db1d3598-1b29-5fb3-a7f5-34345ff8493e",
      "id": "CVE-2021-4231",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.7 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1ada7bd-d88d-5809-b297-fa22d1a7c8cc",
      "id": "CVE-2025-66035",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66035 affects version 5.2.11-tuxcare.7 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19107868-b4cc-5271-8a2c-a26d4cce0a43",
      "id": "CVE-2025-66412",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.7 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dec0c639-476d-533b-8f87-bdccc139c752",
      "id": "CVE-2026-22610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.7 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:268e19f7-3aea-50e3-9181-cba56e7cac48",
      "id": "CVE-2026-27970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.7 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbbdef5d-add2-5300-a104-d889291f21d7",
      "id": "CVE-2026-41423",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.7 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2fb0d22-67b7-5f97-8fa1-484bda202a9b",
      "id": "CVE-2026-46417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46417 affects version 5.2.11-tuxcare.7 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b614a4e2-4e73-5608-8966-729ca2267ed8",
      "id": "CVE-2026-50168",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50168 affects version 5.2.11-tuxcare.7 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25a5ba76-ee72-593d-b51c-9479ea3a942e",
      "id": "CVE-2026-50169",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50169 affects version 5.2.11-tuxcare.7 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a624bcff-1279-557c-aa10-b98de14410a7",
      "id": "CVE-2026-50170",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50170 affects version 5.2.11-tuxcare.7 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cba0835d-a22f-524a-8389-51b417b73115",
      "id": "CVE-2026-50171",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50171 affects version 5.2.11-tuxcare.7 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:519fe24f-c346-5953-a4f3-6f5e82d0544f",
      "id": "CVE-2026-50184",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50184 affects version 5.2.11-tuxcare.7 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82868dc5-f4fb-57dc-a26b-84499ccea705",
      "id": "CVE-2026-50555",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50555 affects version 5.2.11-tuxcare.7 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f97f47a3-06cf-5f6f-86de-dada17b1e8d5",
      "id": "CVE-2026-50556",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50556 affects version 5.2.11-tuxcare.7 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:978c6a4c-e357-57cc-b8d7-3a3e8fc4290b",
      "id": "CVE-2026-50557",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50557 affects version 5.2.11-tuxcare.7 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1151456d-46d3-50d4-9294-85acc586f631",
      "id": "CVE-2026-52725",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-52725 affects version 5.2.11-tuxcare.7 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b23cdcbd-0dd9-5dfd-a840-30fdd6dd9231",
      "id": "CVE-2026-54264",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54264 affects version 5.2.11-tuxcare.7 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5c55baf-e134-5cb1-a9b8-919b25690216",
      "id": "CVE-2026-54265",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54265 affects version 5.2.11-tuxcare.7 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18dfa256-12e2-5212-93bc-80ad137bc7b6",
      "id": "CVE-2026-54266",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54266 affects version 5.2.11-tuxcare.7 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70001486-c0d9-5cf2-bab0-f2a5ce714baf",
      "id": "CVE-2026-54267",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54267 affects version 5.2.11-tuxcare.7 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a3d5f4f-591d-57f4-bc8b-2eb55db72aec",
      "id": "CVE-2026-54268",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54268 affects version 5.2.11-tuxcare.7 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dfe449bb-5a46-5cc7-b37d-46a18f93ba3b",
      "id": "CVE-2026-68945",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.7 of @angular/upgrade. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7ef007ad-f104-5fc3-8c58-a6b21c25b345",
      "id": "CVE-2026-69149",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69149 affects version 5.2.11-tuxcare.7 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:afa8745b-d324-540e-8f74-e874db9f61af",
      "id": "CVE-2026-69151",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69151 affects version 5.2.11-tuxcare.7 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.7"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.7"
    }
  ]
}