{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f0e40def-4c10-5d62-9225-f260f83baaf0",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/service-worker",
      "purl": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.15",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.15",
      "version": "12.2.17-tuxcare.15",
      "pedigree": {
        "ancestors": [
          {
            "name": "@angular/service-worker",
            "purl": "pkg:npm/%40angular/service-worker@12.2.17",
            "type": "library",
            "version": "12.2.17"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-66035",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:652594bb-ad4e-5d16-9b48-98fc58bc49e7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66035 is fixed in version 12.2.17-tuxcare.15 of @angular/service-worker."
      }
    },
    {
      "id": "CVE-2025-66412",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:e884c630-243f-5f33-b699-fbdff0a8ab33",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66412 is fixed in version 12.2.17-tuxcare.15 of @angular/service-worker."
      }
    },
    {
      "id": "CVE-2026-101895",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:b5f0552a-08b4-5333-8cb7-607fa86ae86d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-101895 is fixed in version 12.2.17-tuxcare.15 of @angular/service-worker."
      }
    },
    {
      "id": "CVE-2026-101896",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:7c38fa2c-e784-51ba-8f4f-cf9c4f45514f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-101896 affects version 12.2.17-tuxcare.15 of @angular/service-worker."
      }
    },
    {
      "id": "CVE-2026-22610",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:644991b3-34d5-5b39-9754-b1c5960b76bb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22610 is fixed in version 12.2.17-tuxcare.15 of @angular/service-worker."
      }
    },
    {
      "id": "CVE-2026-27970",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:e30d8185-1157-50cd-9d76-a576f4b9597d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27970 is fixed in version 12.2.17-tuxcare.15 of @angular/service-worker."
      }
    },
    {
      "id": "CVE-2026-46417",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:482b832a-4a4e-5bfd-a922-c818b5f79d72",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46417 is fixed in version 12.2.17-tuxcare.15 of @angular/service-worker."
      }
    },
    {
      "id": "CVE-2026-50168",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:8044d8a9-dfd6-58f4-9e2a-66eaf0176dd6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50168 is fixed in version 12.2.17-tuxcare.15 of @angular/service-worker."
      }
    },
    {
      "id": "CVE-2026-50169",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:07a6ec9f-10ab-560a-ba20-a5687dfe1212",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50169 is fixed in version 12.2.17-tuxcare.15 of @angular/service-worker."
      }
    },
    {
      "id": "CVE-2026-50170",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:04426799-1974-5f6f-948c-5ef00def91c4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50170 is fixed in version 12.2.17-tuxcare.15 of @angular/service-worker."
      }
    },
    {
      "id": "CVE-2026-50171",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:0640070f-662a-5ad3-aaf7-516d4c6ffb26",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50171 is fixed in version 12.2.17-tuxcare.15 of @angular/service-worker."
      }
    },
    {
      "id": "CVE-2026-50184",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:f72137ee-3367-5cb1-8553-c741c082c922",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50184 is fixed in version 12.2.17-tuxcare.15 of @angular/service-worker."
      }
    },
    {
      "id": "CVE-2026-50555",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:21540ebd-c028-5162-9e31-c8169786a5cd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50555 is fixed in version 12.2.17-tuxcare.15 of @angular/service-worker."
      }
    },
    {
      "id": "CVE-2026-50556",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:497dfbf2-caec-5558-8392-fb70571d25a7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50556 is fixed in version 12.2.17-tuxcare.15 of @angular/service-worker."
      }
    },
    {
      "id": "CVE-2026-50557",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:f73a545f-665a-58ed-ba2e-b52570f758b9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50557 is fixed in version 12.2.17-tuxcare.15 of @angular/service-worker."
      }
    },
    {
      "id": "CVE-2026-52725",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:d2ce953c-1201-5bc6-8802-84486f3b9143",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-52725 is fixed in version 12.2.17-tuxcare.15 of @angular/service-worker."
      }
    },
    {
      "id": "CVE-2026-54264",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:2660550a-492d-5ad3-a219-abf21c0acea4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54264 is fixed in version 12.2.17-tuxcare.15 of @angular/service-worker."
      }
    },
    {
      "id": "CVE-2026-54265",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:3689be5e-2c9a-5f75-8533-4db2f448f135",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54265 is fixed in version 12.2.17-tuxcare.15 of @angular/service-worker."
      }
    },
    {
      "id": "CVE-2026-54266",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:0f36e372-f2f8-585b-9244-47c339f4b29b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54266 is fixed in version 12.2.17-tuxcare.15 of @angular/service-worker."
      }
    },
    {
      "id": "CVE-2026-54267",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:363116f3-7964-50d3-8bc5-abcfd806f935",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54267 is fixed in version 12.2.17-tuxcare.15 of @angular/service-worker."
      }
    },
    {
      "id": "CVE-2026-54268",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:3cbb8273-013c-5970-8ded-fa2f739726f2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54268 is fixed in version 12.2.17-tuxcare.15 of @angular/service-worker."
      }
    },
    {
      "id": "CVE-2026-68945",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:16dcf5d4-bd84-5f5c-a4bd-4f6c2cf951b9",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-68945 does not affect version 12.2.17-tuxcare.15 of @angular/service-worker. not_affected \u2014 Angular 12.2.17 does not contain the HttpTransferCache feature affected by CVE-2026-68945. HttpTransferCache, which caches HTTP requests during Server-Side Rendering (SSR), was first introduced in Angular 16.0.0\u2014approximately 4 major versions after the target version. The vulnerability concerns cache-key collision when repeated HTTP parameters are serialized, but since the entire HttpTransferCa...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-69149",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:d90080bc-b72e-54bd-8f29-f5403000219d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69149 is fixed in version 12.2.17-tuxcare.15 of @angular/service-worker."
      }
    },
    {
      "id": "CVE-2026-69151",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:e2808f78-90b9-5ed4-a916-9e41c442efae",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69151 is fixed in version 12.2.17-tuxcare.15 of @angular/service-worker."
      }
    },
    {
      "id": "CVE-2026-88056",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:38225285-5e66-52b8-9519-049cf2e6f68c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88056 is fixed in version 12.2.17-tuxcare.15 of @angular/service-worker."
      }
    },
    {
      "id": "CVE-2026-88057",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:0f0d5997-6a3e-5f52-a4f1-8d7070af3171",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88057 is fixed in version 12.2.17-tuxcare.15 of @angular/service-worker."
      }
    },
    {
      "id": "CVE-2026-88058",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:ef2ca224-4152-5784-a06b-e3bcdbf02651",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88058 is fixed in version 12.2.17-tuxcare.15 of @angular/service-worker."
      }
    },
    {
      "id": "CVE-2026-88059",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:7f307f12-5091-500b-b5aa-420538d5bec6",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-88059 does not affect version 12.2.17-tuxcare.15 of @angular/service-worker. not_affected \u2014 Angular 12.2.17-tuxcare.9 is not affected by CVE-2026-88059. The vulnerability requires HttpTransferCache, withRequestsMadeViaParent(), and provideClientHydration() features which were introduced in Angular 16.0.0. This version uses the older module-based HttpClientModule system and lacks the entire SSR hydration transfer-cache infrastructure. The vulnerable code pattern described in the CVE do...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-88060",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:09ec8d7d-d3cb-5568-8628-c63192bdf82d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88060 is fixed in version 12.2.17-tuxcare.15 of @angular/service-worker."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/service-worker@12.2.17-tuxcare.15"
    }
  ]
}