{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:48246722-a53f-5f48-89f4-84c0e584640c",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/upgrade",
      "purl": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.3",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.3",
      "version": "18.2.13-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "@angular/upgrade",
            "purl": "pkg:npm/%40angular/upgrade@18.2.13",
            "type": "library",
            "version": "18.2.13"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-59052",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:de473b52-6f96-5c64-92cc-3592b76a219e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59052 affects version 18.2.13-tuxcare.3 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2025-66035",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:02842f75-a917-541e-baad-943973b29d7e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.13-tuxcare.3 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2025-66412",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:42ccb1f9-0009-5ee6-a5b2-9a3a2f9c57b6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66412 affects version 18.2.13-tuxcare.3 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-101895",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2ee901db-a3c5-5335-aaea-62dc84b6304e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-101895 affects version 18.2.13-tuxcare.3 of @angular/upgrade, and is fixed in 18.2.13-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-101896",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3c2664ef-cf3b-5619-b9e4-bdd20f0a87bf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-101896 affects version 18.2.13-tuxcare.3 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-22610",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4e66977a-f567-5627-a302-245d88cbc055",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22610 affects version 18.2.13-tuxcare.3 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-27970",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d369ea65-ce51-5bf1-8080-dc566f60b13d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-27970 affects version 18.2.13-tuxcare.3 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-32635",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:fd99f3a5-a141-5bff-ad7d-7be88e270356",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32635 affects version 18.2.13-tuxcare.3 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-41423",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:967bc5e5-a74d-51d7-9ec9-ff340e0b29b4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41423 affects version 18.2.13-tuxcare.3 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-46417",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a4cef3f9-2266-5bb3-8ad3-8f1684fc37b3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46417 affects version 18.2.13-tuxcare.3 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-50168",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e082a8c1-d342-5468-8466-35a2b4cf7cae",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50168 affects version 18.2.13-tuxcare.3 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-50169",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5c8b9572-c26a-5ded-a8ce-6661fbc81988",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50169 affects version 18.2.13-tuxcare.3 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-50170",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8a127e19-c542-5041-a122-8c3abe0bc0c1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50170 affects version 18.2.13-tuxcare.3 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-50171",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6344c92a-68a0-52ab-b39a-eda83b1318e5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50171 affects version 18.2.13-tuxcare.3 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-50184",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:333d0bca-1155-53b0-ab15-27825541095d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50184 affects version 18.2.13-tuxcare.3 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-50555",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c8eb12e9-308e-5340-83ba-79676b6e77ac",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50555 is fixed in version 18.2.13-tuxcare.3 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-50556",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d168d91d-1561-56e0-be64-e961c75308f8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50556 is fixed in version 18.2.13-tuxcare.3 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-50557",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9d0efa77-3f8d-5da0-9ebb-297eeeca3b54",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50557 affects version 18.2.13-tuxcare.3 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-52725",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:717757c3-b675-57d4-9877-7edf42a3057e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-52725 affects version 18.2.13-tuxcare.3 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-54264",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:89d23097-ec26-5695-849d-f14fb08fac38",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54264 affects version 18.2.13-tuxcare.3 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-54265",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:fd5becba-c7e8-5fd0-93f1-47c45cd3f1e1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54265 affects version 18.2.13-tuxcare.3 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-54266",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7a20ab49-cb97-5883-8dcd-d6d5b83b97d1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54266 affects version 18.2.13-tuxcare.3 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-54267",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:19a424de-a662-51bb-99ca-7a8344d3aff1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54267 affects version 18.2.13-tuxcare.3 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-54268",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:75f6d232-c824-5597-a415-7b1e85aa44af",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54268 affects version 18.2.13-tuxcare.3 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-68945",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a0706167-2234-59c1-8414-c0879569f57e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-68945 affects version 18.2.13-tuxcare.3 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-69149",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4433814a-7056-5a30-85fb-044a710f24e1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69149 is fixed in version 18.2.13-tuxcare.3 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-69151",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7b0e9d74-ad53-5146-93f1-42825669a4fa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69151 affects version 18.2.13-tuxcare.3 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-88056",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:23ecd0d7-28b9-5c3f-89db-825e9fa4b307",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88056 is fixed in version 18.2.13-tuxcare.3 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-88057",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:bae5fa72-d0cb-5394-bb58-5b6bf7c5cb4b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88057 is fixed in version 18.2.13-tuxcare.3 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-88058",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3d4119d8-338a-5adf-a3a5-688994205813",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88058 is fixed in version 18.2.13-tuxcare.3 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-88059",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ae747cfd-cd9d-52b9-a42d-19d2808dbf23",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88059 is fixed in version 18.2.13-tuxcare.3 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-88060",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ebb8cf5a-08ef-551a-82cd-087b3d203d1f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88060 is fixed in version 18.2.13-tuxcare.3 of @angular/upgrade."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/upgrade@18.2.13-tuxcare.3"
    }
  ]
}