{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:c16cf8e7-c373-588d-bd95-7aabe2613f0a",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/bazel",
      "purl": "pkg:npm/%40angular/bazel@19.2.25-tuxcare.6",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/bazel@19.2.25-tuxcare.6",
      "version": "19.2.25-tuxcare.6",
      "pedigree": {
        "ancestors": [
          {
            "name": "@angular/bazel",
            "purl": "pkg:npm/%40angular/bazel@19.2.25",
            "type": "library",
            "version": "19.2.25"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-59052",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@19.2.25-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:f3ae9a01-efa9-5154-ae4a-600860a45277",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59052 is fixed in version 19.2.25-tuxcare.6 of @angular/bazel."
      }
    },
    {
      "id": "CVE-2026-101895",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@19.2.25-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:cd96c69b-0710-5401-b167-4fcad569774a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-101895 is fixed in version 19.2.25-tuxcare.6 of @angular/bazel."
      }
    },
    {
      "id": "CVE-2026-101896",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@19.2.25-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:81d6202e-83a9-54df-9efd-c4c18bdcc521",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-101896 affects version 19.2.25-tuxcare.6 of @angular/bazel."
      }
    },
    {
      "id": "CVE-2026-27970",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@19.2.25-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:718a2b3b-a717-56c8-aa7f-4a7b68b18dc0",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-27970 does not affect version 19.2.25-tuxcare.6 of @angular/bazel. Angular 19.2.25 is NOT affected by CVE-2026-27970. The vulnerability (XSS via unsanitized attributes in ICU message translations) was fixed in upstream Angular v19.2.19 by commit 747548721d authored by Doug Parker (Angular team). The target version 19.2.25 is 6 patch releases after the fix. The defense code is present at packages/core/src/render3/i18n/i18n_parse.ts:843-867, implementing allowlist validation, URI attribute blocking, and unknown attribute dropping. This is an upstream vendor fix, not a TuxCare backport.",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-54264",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@19.2.25-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:4271e65a-bbf0-51d7-9834-bf3c2d0ee20a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54264 is fixed in version 19.2.25-tuxcare.6 of @angular/bazel."
      }
    },
    {
      "id": "CVE-2026-54265",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@19.2.25-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:2a71bd24-a3a6-5373-83a2-f2fb46dfac8f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54265 is fixed in version 19.2.25-tuxcare.6 of @angular/bazel."
      }
    },
    {
      "id": "CVE-2026-54266",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@19.2.25-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:bf59e6fd-ae6a-50a6-a9ea-b34f47fa261a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54266 is fixed in version 19.2.25-tuxcare.6 of @angular/bazel."
      }
    },
    {
      "id": "CVE-2026-54267",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@19.2.25-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:7f9afd90-6eeb-5a82-9ecf-8b025055416b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54267 is fixed in version 19.2.25-tuxcare.6 of @angular/bazel."
      }
    },
    {
      "id": "CVE-2026-54268",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@19.2.25-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:6246df26-f2d5-51f6-9b54-ccc9b2948862",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54268 is fixed in version 19.2.25-tuxcare.6 of @angular/bazel."
      }
    },
    {
      "id": "CVE-2026-68945",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@19.2.25-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:08a6429f-351e-59e7-9e9a-c73ccabb5033",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-68945 is fixed in version 19.2.25-tuxcare.6 of @angular/bazel."
      }
    },
    {
      "id": "CVE-2026-69149",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@19.2.25-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:c3c73b59-b0f5-5796-ae4e-ebce9abff680",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69149 is fixed in version 19.2.25-tuxcare.6 of @angular/bazel."
      }
    },
    {
      "id": "CVE-2026-69151",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@19.2.25-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:22a8df73-4c30-5ef6-873f-8f7923de770d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69151 is fixed in version 19.2.25-tuxcare.6 of @angular/bazel."
      }
    },
    {
      "id": "CVE-2026-88056",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@19.2.25-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:190996c9-ae65-5761-bb96-15443037446d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88056 is fixed in version 19.2.25-tuxcare.6 of @angular/bazel."
      }
    },
    {
      "id": "CVE-2026-88057",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@19.2.25-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:62bd678b-806b-5693-8ad7-c10807b3403f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88057 is fixed in version 19.2.25-tuxcare.6 of @angular/bazel."
      }
    },
    {
      "id": "CVE-2026-88058",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@19.2.25-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:ab62791c-78a4-58e1-8466-ead036d32d84",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88058 is fixed in version 19.2.25-tuxcare.6 of @angular/bazel."
      }
    },
    {
      "id": "CVE-2026-88059",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@19.2.25-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:1d1ff5aa-85ee-5d05-91b1-879c56ae713a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88059 is fixed in version 19.2.25-tuxcare.6 of @angular/bazel."
      }
    },
    {
      "id": "CVE-2026-88060",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/bazel@19.2.25-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:8250f464-6f5b-5898-8e5d-594f95762467",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88060 is fixed in version 19.2.25-tuxcare.6 of @angular/bazel."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/bazel@19.2.25-tuxcare.6"
    }
  ]
}