{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2a433ed4-cc4a-56e4-9497-cf3f6ddd085b",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/upgrade",
      "purl": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.1",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.1",
      "version": "18.2.13-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "@angular/upgrade",
            "purl": "pkg:npm/%40angular/upgrade@18.2.13",
            "type": "library",
            "version": "18.2.13"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-59052",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b0245288-746d-52cb-9d64-79e43af41bea",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59052 affects version 18.2.13-tuxcare.1 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2025-66035",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1c13e4d8-bede-5121-9b50-ddaff2a1bb6f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66035 affects version 18.2.13-tuxcare.1 of @angular/upgrade, and is fixed in 18.2.13-tuxcare.2."
      }
    },
    {
      "id": "CVE-2025-66412",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1685182d-bca2-56bd-ac83-05a131b9fd79",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66412 affects version 18.2.13-tuxcare.1 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-101895",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9d12e975-3199-548c-acec-b08eb9a97c26",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-101895 affects version 18.2.13-tuxcare.1 of @angular/upgrade, and is fixed in 18.2.13-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-101896",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f7d063d8-df0b-5777-ab51-1eb5ae5170a8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-101896 affects version 18.2.13-tuxcare.1 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-22610",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:72aa75e5-1be1-5c4e-9c3b-50aed156919c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22610 affects version 18.2.13-tuxcare.1 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-27970",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:094d0856-688f-5b3f-a920-90285bf82633",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-27970 affects version 18.2.13-tuxcare.1 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-32635",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f4d5f6f4-1dd3-537e-9f77-b4e2d3a72416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32635 affects version 18.2.13-tuxcare.1 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-41423",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:61b23e9f-fe98-5264-ba65-976e51f04b29",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41423 affects version 18.2.13-tuxcare.1 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-46417",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a1873251-1464-51ac-9d16-272979a42a67",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46417 affects version 18.2.13-tuxcare.1 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-50168",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c6bb2378-8609-5963-94fc-9a61785aaae0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50168 affects version 18.2.13-tuxcare.1 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-50169",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:10177f49-db01-56ab-aa48-9b796baff9f6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50169 affects version 18.2.13-tuxcare.1 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-50170",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4bbe0ed5-09f9-54c0-b4e8-e15a8a8ed4e2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50170 affects version 18.2.13-tuxcare.1 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-50171",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a88cd230-4e27-5293-88a9-bd4b77770539",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50171 affects version 18.2.13-tuxcare.1 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-50184",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3b7e68e0-523c-5997-b467-59a5e326b1dd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50184 affects version 18.2.13-tuxcare.1 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-50555",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1e7154ee-ff56-53e7-b69b-9e1f709d42c7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50555 affects version 18.2.13-tuxcare.1 of @angular/upgrade, and is fixed in 18.2.13-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-50556",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3eb20dbb-2b97-507c-9b56-f03c1af66431",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50556 affects version 18.2.13-tuxcare.1 of @angular/upgrade, and is fixed in 18.2.13-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-50557",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e834904b-5fdb-5085-bb99-d08204beb588",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50557 affects version 18.2.13-tuxcare.1 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-52725",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:08b3e371-e4bf-52d4-83cd-d312104941d5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-52725 affects version 18.2.13-tuxcare.1 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-54264",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a7b8a1c2-79af-5733-bb04-e0ff9a2eb8c4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54264 affects version 18.2.13-tuxcare.1 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-54265",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f06ca120-6227-56e8-9f1b-18d67616d647",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54265 affects version 18.2.13-tuxcare.1 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-54266",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:02f2966c-5757-5775-bbf8-fc2d607dbffc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54266 affects version 18.2.13-tuxcare.1 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-54267",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8d7d54d3-1788-5c9f-a768-130c58972c40",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54267 affects version 18.2.13-tuxcare.1 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-54268",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b8a9683d-96d8-517c-b56d-d35ea048e9bb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54268 affects version 18.2.13-tuxcare.1 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-68945",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:127c06dd-38bc-5638-aad2-44744bea5652",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-68945 affects version 18.2.13-tuxcare.1 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-69149",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b2c00e36-2121-5461-aa08-92f9cd007045",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69149 affects version 18.2.13-tuxcare.1 of @angular/upgrade, and is fixed in 18.2.13-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-69151",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2024d6b0-cd58-57a1-bbe2-178a630f4834",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69151 affects version 18.2.13-tuxcare.1 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-88056",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8cbfe96e-f221-5d20-b93b-507fd874c1d8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88056 affects version 18.2.13-tuxcare.1 of @angular/upgrade, and is fixed in 18.2.13-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-88057",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7b68c627-3ab9-5924-967e-7054ca5e4cf2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88057 affects version 18.2.13-tuxcare.1 of @angular/upgrade, and is fixed in 18.2.13-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-88058",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5cb3964c-7382-53b4-a09e-d25938d31e20",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88058 affects version 18.2.13-tuxcare.1 of @angular/upgrade, and is fixed in 18.2.13-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-88059",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:74e62f91-67d2-5510-848a-179a45e95518",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88059 affects version 18.2.13-tuxcare.1 of @angular/upgrade, and is fixed in 18.2.13-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-88060",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8ce05ff9-c33f-5ddd-8a21-20f69058a8b3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88060 affects version 18.2.13-tuxcare.1 of @angular/upgrade, and is fixed in 18.2.13-tuxcare.2."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.1"
    }
  ]
}