{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:43376258-015a-50fb-bdab-0db1e6974d64",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.16",
      "type": "library",
      "name": "@angular/http",
      "version": "5.2.11-tuxcare.16",
      "purl": "pkg:npm/%40angular/http@5.2.11-tuxcare.16"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:61673cc5-782c-52d8-a53c-0ea9281dca8d",
      "id": "CVE-2021-4231",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.16 of @angular/http."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.16"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:081099b6-043f-53b6-85b1-fd3902f3c1a6",
      "id": "CVE-2025-66035",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.16 of @angular/http."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.16"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06911cf6-5415-55b7-820c-947eadde825e",
      "id": "CVE-2025-66412",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.16 of @angular/http."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.16"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15be0d3b-bc49-5032-8264-444993635a2b",
      "id": "CVE-2026-22610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.16 of @angular/http."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.16"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:433e9ed6-e388-5c4d-ab91-6ce095147718",
      "id": "CVE-2026-27970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.16 of @angular/http."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.16"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:77ccea6c-e719-545c-9b5d-39ecdc0cbe4f",
      "id": "CVE-2026-41423",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.16 of @angular/http."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.16"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40f9fbf1-16bc-5e34-8285-444ac68b54dd",
      "id": "CVE-2026-46417",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.16 of @angular/http."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.16"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac18660a-e804-5920-8a58-9289eb308f3e",
      "id": "CVE-2026-50168",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.16 of @angular/http."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.16"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:343dd4fe-5312-5b99-8746-049493a98307",
      "id": "CVE-2026-50169",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.16 of @angular/http."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.16"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d89cb1ca-1932-5896-9e9e-313d7b43ff47",
      "id": "CVE-2026-50170",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.16 of @angular/http."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.16"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7456e7e-9bf8-57ca-93ca-7fcd85fe9428",
      "id": "CVE-2026-50171",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.16 of @angular/http."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.16"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:901d1f95-3582-5ea8-b0fa-f851fc5209a8",
      "id": "CVE-2026-50184",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.16 of @angular/http."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.16"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b402e21-7334-5bcc-8eb7-75620eaa5b0a",
      "id": "CVE-2026-50555",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.16 of @angular/http."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.16"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d49dec9-1855-543b-bb33-7a2954dce42e",
      "id": "CVE-2026-50556",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.16 of @angular/http."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.16"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68c0bfe9-2fd1-5fc0-8379-720bf7acfc09",
      "id": "CVE-2026-50557",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.16 of @angular/http."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.16"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:763b9d72-2c5f-52a7-9e09-22550e6c535a",
      "id": "CVE-2026-52725",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.16 of @angular/http."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.16"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac24f233-6bdc-521d-9c85-e4af561150fc",
      "id": "CVE-2026-54264",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.16 of @angular/http."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.16"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e8cfde8-0618-5736-b623-f6f64c16b068",
      "id": "CVE-2026-54265",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.16 of @angular/http."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.16"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ccb8c08b-5d11-532b-9422-8a19483213ff",
      "id": "CVE-2026-54266",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.16 of @angular/http."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.16"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ecb9a64-ee42-5651-91c2-b7d57aa4596a",
      "id": "CVE-2026-54267",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.16 of @angular/http."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.16"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84355b4c-5b0f-5878-9dc7-c1a2ddb1fa42",
      "id": "CVE-2026-54268",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.16 of @angular/http."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.16"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8b89d93-4c12-554c-a25e-9d0f66653d73",
      "id": "CVE-2026-68945",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.16 of @angular/http. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.16"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04952659-3750-5b31-ab15-2058b767be82",
      "id": "CVE-2026-69149",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.16 of @angular/http."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.16"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ec134ea-d9b6-5a2c-a3ee-3a2340c4d074",
      "id": "CVE-2026-69151",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.16 of @angular/http."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.16"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6762a894-95e5-57e3-aac8-f8a42cd02054",
      "id": "CVE-2026-88056",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.16 of @angular/http. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.16"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60c2edf2-5f8d-5922-b813-a8271ba50222",
      "id": "CVE-2026-88057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.16 of @angular/http."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.16"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9306b09d-e8db-5841-bf47-f9841376e6c0",
      "id": "CVE-2026-88059",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.16 of @angular/http. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.16"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:886711c2-f95e-51f5-bf55-332a766d8e7b",
      "id": "CVE-2026-88060",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.16 of @angular/http."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.16"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.16"
    }
  ]
}