{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:0c5667e1-5b6c-5ef1-90d4-1e10c85251c9",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/language-service",
      "purl": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.14",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.14",
      "version": "12.2.17-tuxcare.14",
      "pedigree": {
        "ancestors": [
          {
            "name": "@angular/language-service",
            "purl": "pkg:npm/%40angular/language-service@12.2.17",
            "type": "library",
            "version": "12.2.17"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-66035",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:91632077-c3cd-5e4f-b952-e31056842a0a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66035 is fixed in version 12.2.17-tuxcare.14 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2025-66412",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:d6f8514d-04b6-5766-a491-01e7c8dc8aba",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66412 is fixed in version 12.2.17-tuxcare.14 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-101895",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:8bfdcf21-ef41-53a4-94cc-b5b64b5e1c50",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-101895 is fixed in version 12.2.17-tuxcare.14 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-101896",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:bfb039b5-dc67-50aa-be3b-08115d95a99f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-101896 affects version 12.2.17-tuxcare.14 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-22610",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:d430c4be-0dda-5595-96a2-1ed1eac590cc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22610 is fixed in version 12.2.17-tuxcare.14 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-27970",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:d36db5b4-bd1f-5e1b-aed7-bd85dc7cf173",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27970 is fixed in version 12.2.17-tuxcare.14 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-41423",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:3ef647ab-49f3-5300-a397-71e7bafcb79b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41423 is fixed in version 12.2.17-tuxcare.14 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-46417",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:d87c6f12-00e3-5fb6-b9ca-dccf921ea8cc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46417 is fixed in version 12.2.17-tuxcare.14 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-50168",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:a8e595d9-866f-5e3c-b385-59b23d4e7fde",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50168 is fixed in version 12.2.17-tuxcare.14 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-50169",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:e7ee3c4b-2f2a-5181-a5a8-591a86050570",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50169 is fixed in version 12.2.17-tuxcare.14 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-50170",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:75b65913-03f3-5ef5-aea0-f80a2f5d6128",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50170 is fixed in version 12.2.17-tuxcare.14 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-50171",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:dba3ccd4-5e74-57db-81da-6338f328125d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50171 is fixed in version 12.2.17-tuxcare.14 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-50184",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:3fa958c1-0c62-5c39-add0-d94ceb19b711",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50184 is fixed in version 12.2.17-tuxcare.14 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-50555",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:2d0acd69-e339-5986-9021-51b09db2dfe2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50555 is fixed in version 12.2.17-tuxcare.14 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-50556",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:c56f8dc2-1f0a-59cc-8956-7ec42f2ef360",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50556 is fixed in version 12.2.17-tuxcare.14 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-50557",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:dc18a536-0293-5429-bdaf-d8e892889dae",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50557 is fixed in version 12.2.17-tuxcare.14 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-52725",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:8dabb986-8ad3-5608-a18f-15e6a6972bce",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-52725 is fixed in version 12.2.17-tuxcare.14 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-54264",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:240b096c-3d9d-5382-b078-722e9baf99a3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54264 is fixed in version 12.2.17-tuxcare.14 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-54265",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:57ff4333-1739-5c37-8f2d-abfe5aeb1e84",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54265 is fixed in version 12.2.17-tuxcare.14 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-54266",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:72fbb6c8-1b4b-52fa-b4b9-49e58baca0d1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54266 is fixed in version 12.2.17-tuxcare.14 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-54267",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:d1f4b129-bd58-5e90-b1ab-b48951fb85ba",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54267 is fixed in version 12.2.17-tuxcare.14 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-54268",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:e888cc85-a556-524a-961e-14b69649bfcb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54268 is fixed in version 12.2.17-tuxcare.14 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-68945",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:85e4bffb-b1c6-536a-a920-ddf1bca031c6",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-68945 does not affect version 12.2.17-tuxcare.14 of @angular/language-service. not_affected \u2014 Angular 12.2.17 does not contain the HttpTransferCache feature affected by CVE-2026-68945. HttpTransferCache, which caches HTTP requests during Server-Side Rendering (SSR), was first introduced in Angular 16.0.0\u2014approximately 4 major versions after the target version. The vulnerability concerns cache-key collision when repeated HTTP parameters are serialized, but since the entire HttpTransferCa...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-69149",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:13f127fb-b745-503d-9f59-e980d8dd9337",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69149 is fixed in version 12.2.17-tuxcare.14 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-69151",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:faf4e2bc-f991-5a7c-a32a-1e1eea0e472a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69151 is fixed in version 12.2.17-tuxcare.14 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-88056",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:36f332d3-b96b-5543-b8f2-bf4c033fde90",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88056 is fixed in version 12.2.17-tuxcare.14 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-88057",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:43ae2cd2-ca9e-55bc-b651-63e8a579a28d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88057 is fixed in version 12.2.17-tuxcare.14 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-88058",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:80a02c4e-0741-5989-80c1-a7f50db266de",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88058 is fixed in version 12.2.17-tuxcare.14 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-88059",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:8370a234-d1e8-53ac-8fa9-b6068a2067f5",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-88059 does not affect version 12.2.17-tuxcare.14 of @angular/language-service. not_affected \u2014 Angular 12.2.17-tuxcare.9 is not affected by CVE-2026-88059. The vulnerability requires HttpTransferCache, withRequestsMadeViaParent(), and provideClientHydration() features which were introduced in Angular 16.0.0. This version uses the older module-based HttpClientModule system and lacks the entire SSR hydration transfer-cache infrastructure. The vulnerable code pattern described in the CVE do...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-88060",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:15ef1e48-0ed7-5793-87d9-2d766e3718e9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88060 is fixed in version 12.2.17-tuxcare.14 of @angular/language-service."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.14"
    }
  ]
}