{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2f56ae9b-a5e5-559b-be15-8f1f7f266eb3",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/language-service",
      "purl": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.15",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.15",
      "version": "12.2.17-tuxcare.15",
      "pedigree": {
        "ancestors": [
          {
            "name": "@angular/language-service",
            "purl": "pkg:npm/%40angular/language-service@12.2.17",
            "type": "library",
            "version": "12.2.17"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-66035",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:80a1dd93-d779-5f88-adaf-14c867c017c7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66035 is fixed in version 12.2.17-tuxcare.15 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2025-66412",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:7f7e61b9-64aa-5599-b260-dda2896a659b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66412 is fixed in version 12.2.17-tuxcare.15 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-101895",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:5e738f53-4ad3-5edf-9e36-8f190a2c04fb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-101895 is fixed in version 12.2.17-tuxcare.15 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-101896",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:84ba7433-f917-5957-9410-660add337498",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-101896 affects version 12.2.17-tuxcare.15 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-22610",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:d9fe3543-1c96-532a-b687-31a7ab5513a4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22610 is fixed in version 12.2.17-tuxcare.15 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-27970",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:15f00eab-6387-57f8-8bfd-bd9020a74387",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27970 is fixed in version 12.2.17-tuxcare.15 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-41423",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:c4eeaf6e-8652-5e14-ae95-a788bc938b30",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41423 is fixed in version 12.2.17-tuxcare.15 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-46417",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:c93c1180-0c92-55fd-8583-0aaae421a725",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46417 is fixed in version 12.2.17-tuxcare.15 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-50168",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:081e78ab-da18-5694-994d-f37ef6194aa0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50168 is fixed in version 12.2.17-tuxcare.15 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-50169",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:89e0f933-6726-5a17-8d0e-68b95d82dac4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50169 is fixed in version 12.2.17-tuxcare.15 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-50170",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:6ec76c2d-f06f-57af-afe8-2d9c84bcc271",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50170 is fixed in version 12.2.17-tuxcare.15 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-50171",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:06db1fa6-cc5e-589b-8e57-013b726123d4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50171 is fixed in version 12.2.17-tuxcare.15 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-50184",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:cad74c26-e87b-5de5-942c-78bf895b9bff",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50184 is fixed in version 12.2.17-tuxcare.15 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-50555",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:4440dbdb-68e7-5450-85bc-bc59870fc757",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50555 is fixed in version 12.2.17-tuxcare.15 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-50556",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:d0d1ae5c-6eb1-596e-918f-98e99267c877",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50556 is fixed in version 12.2.17-tuxcare.15 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-50557",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:9980b86e-98e2-5361-b282-1d937b8ab9ea",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50557 is fixed in version 12.2.17-tuxcare.15 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-52725",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:6d25419b-732e-509e-89f1-c4316cdc9e3c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-52725 is fixed in version 12.2.17-tuxcare.15 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-54264",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:d0563cda-0232-5bd3-976a-6831006a757e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54264 is fixed in version 12.2.17-tuxcare.15 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-54265",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:d72cf448-d4aa-5f05-a4c2-b0671c74ac61",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54265 is fixed in version 12.2.17-tuxcare.15 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-54266",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:00228758-0737-54a2-a53e-ae072d1f5403",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54266 is fixed in version 12.2.17-tuxcare.15 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-54267",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:035b3fc1-e5d7-5abc-9861-e144f14e4e09",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54267 is fixed in version 12.2.17-tuxcare.15 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-54268",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:8439c0fa-59c1-569f-bf3e-89ce86b011a3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54268 is fixed in version 12.2.17-tuxcare.15 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-68945",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:36b0c74b-6e27-5d37-8ce9-6af98cd0955e",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-68945 does not affect version 12.2.17-tuxcare.15 of @angular/language-service. not_affected \u2014 Angular 12.2.17 does not contain the HttpTransferCache feature affected by CVE-2026-68945. HttpTransferCache, which caches HTTP requests during Server-Side Rendering (SSR), was first introduced in Angular 16.0.0\u2014approximately 4 major versions after the target version. The vulnerability concerns cache-key collision when repeated HTTP parameters are serialized, but since the entire HttpTransferCa...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-69149",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:e7f83d97-cda7-5366-83b7-d5a4851b9de4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69149 is fixed in version 12.2.17-tuxcare.15 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-69151",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:0ba5a799-2a73-5f11-bc96-df3d4dc1c220",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69151 is fixed in version 12.2.17-tuxcare.15 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-88056",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:812337d4-c012-5326-89b0-71d31387392d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88056 is fixed in version 12.2.17-tuxcare.15 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-88057",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:de2b9406-ea6d-5009-89c1-21fb2e46355a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88057 is fixed in version 12.2.17-tuxcare.15 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-88058",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:2ea80d36-3405-59bb-ad2b-f187856583fc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88058 is fixed in version 12.2.17-tuxcare.15 of @angular/language-service."
      }
    },
    {
      "id": "CVE-2026-88059",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:7dc140a5-94a2-58f3-949d-262d087b8bd5",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-88059 does not affect version 12.2.17-tuxcare.15 of @angular/language-service. not_affected \u2014 Angular 12.2.17-tuxcare.9 is not affected by CVE-2026-88059. The vulnerability requires HttpTransferCache, withRequestsMadeViaParent(), and provideClientHydration() features which were introduced in Angular 16.0.0. This version uses the older module-based HttpClientModule system and lacks the entire SSR hydration transfer-cache infrastructure. The vulnerable code pattern described in the CVE do...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-88060",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:d95458ab-2f45-53f3-854e-50bb1c020622",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88060 is fixed in version 12.2.17-tuxcare.15 of @angular/language-service."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/language-service@12.2.17-tuxcare.15"
    }
  ]
}