{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b1c5293c-1a10-5a98-b05e-6b6bfb930b6f",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/upgrade",
      "purl": "pkg:npm/%40angular/upgrade@19.2.14-tuxcare.4",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/upgrade@19.2.14-tuxcare.4",
      "version": "19.2.14-tuxcare.4",
      "pedigree": {
        "ancestors": [
          {
            "name": "@angular/upgrade",
            "purl": "pkg:npm/%40angular/upgrade@19.2.14",
            "type": "library",
            "version": "19.2.14"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-59052",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:6b106bfd-68f8-5eb2-8cb2-582739a08b0e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59052 affects version 19.2.14-tuxcare.4 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2025-66035",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:56588fc8-9007-50c1-9389-1c14260becc6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66035 affects version 19.2.14-tuxcare.4 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2025-66412",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:9bcc1ee1-2751-5cb7-af1a-98bed978831b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66412 affects version 19.2.14-tuxcare.4 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-101895",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:f84a15c9-363a-5654-b4ab-6ede21581b81",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-101895 is fixed in version 19.2.14-tuxcare.4 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-101896",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:e871713c-db23-5f90-8431-9df175f97ea6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-101896 affects version 19.2.14-tuxcare.4 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-22610",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:603c5b92-d39d-5a89-9bcb-638fb526befa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22610 affects version 19.2.14-tuxcare.4 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-27970",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:b843336e-be39-53ca-a000-9446990a39fc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-27970 affects version 19.2.14-tuxcare.4 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-32635",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:dd34a483-3f73-52ca-808b-950026139543",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32635 affects version 19.2.14-tuxcare.4 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-41423",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:475881cc-8247-5c12-affe-eafdcd6b74eb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41423 affects version 19.2.14-tuxcare.4 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-46417",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:ef0068a3-5ecd-5c33-9030-1ed2f0f61bc1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46417 affects version 19.2.14-tuxcare.4 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-50168",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:bcd0b8e6-96bf-5137-9b59-5e143c08704c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50168 affects version 19.2.14-tuxcare.4 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-50169",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:439e3ac6-6c75-5b26-8b0c-6f57a5e8e083",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50169 affects version 19.2.14-tuxcare.4 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-50170",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:1f16e27e-5028-57f4-a105-cd982eee2e50",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50170 affects version 19.2.14-tuxcare.4 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-50171",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:77c0d4e4-2c1f-52bc-b534-e14dc5130b9c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50171 affects version 19.2.14-tuxcare.4 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-50184",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:b704c799-5bbf-59ca-9153-26d10a0e716d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50184 affects version 19.2.14-tuxcare.4 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-50555",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:cfe593ef-5086-5131-a7a7-d445c0457ccc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50555 is fixed in version 19.2.14-tuxcare.4 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-50556",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:f2493756-fa8f-5c0b-afca-502a07a0e8a1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50556 is fixed in version 19.2.14-tuxcare.4 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-50557",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:4048d664-f13a-5eaf-a74e-20104d170a2c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50557 affects version 19.2.14-tuxcare.4 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-52725",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:3b14414c-6775-5a57-9185-5663deeaa6ec",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-52725 affects version 19.2.14-tuxcare.4 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-54264",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:fe8c4963-1e5a-5fd9-bad0-2a674344502f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54264 affects version 19.2.14-tuxcare.4 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-54265",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:7a17f12a-baf5-5370-821b-8a20b7cb3629",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54265 affects version 19.2.14-tuxcare.4 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-54266",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:ed178673-ee26-57fc-9073-770958d76534",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54266 affects version 19.2.14-tuxcare.4 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-54267",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:c6ec01df-859b-58a0-9e89-3b16c1c82cc7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54267 is fixed in version 19.2.14-tuxcare.4 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-54268",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:f64193e6-6698-5b0a-9a5d-e324bad77ac2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54268 affects version 19.2.14-tuxcare.4 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-68945",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:d2cb9a2a-0593-50f6-91c1-369319eb93d7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-68945 affects version 19.2.14-tuxcare.4 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-69149",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:c557fa55-46d3-56ce-b3c4-a2fc569e9f1a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69149 is fixed in version 19.2.14-tuxcare.4 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-69151",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:30472504-4714-5d5b-877a-6e2c7113ea4b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69151 affects version 19.2.14-tuxcare.4 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-88056",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:bfc65b77-74c3-5998-a966-7219d0bfa99e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88056 is fixed in version 19.2.14-tuxcare.4 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-88057",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:316c535b-435f-5f79-8b37-921f7ea5cf15",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88057 is fixed in version 19.2.14-tuxcare.4 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-88058",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:63a8e7ce-42b4-52b9-b14e-778a170eae8e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88058 is fixed in version 19.2.14-tuxcare.4 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-88059",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:25f85edf-5b81-5c8a-8396-da71b286f4e3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88059 is fixed in version 19.2.14-tuxcare.4 of @angular/upgrade."
      }
    },
    {
      "id": "CVE-2026-88060",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@19.2.14-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:bfca706d-c646-54fd-a4f5-8c7edaa59161",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88060 is fixed in version 19.2.14-tuxcare.4 of @angular/upgrade."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/upgrade@19.2.14-tuxcare.4"
    }
  ]
}