{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:53054f16-f142-5374-8a05-c8b586ccbff2",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/http",
      "purl": "pkg:npm/%40angular/http@8.2.14-tuxcare.14",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/http@8.2.14-tuxcare.14",
      "version": "8.2.14-tuxcare.14",
      "pedigree": {
        "ancestors": [
          {
            "name": "@angular/http",
            "purl": "pkg:npm/%40angular/http@8.2.14",
            "type": "library",
            "version": "8.2.14"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-101895",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@8.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:e08b95bb-994f-5ee3-93eb-e2568aff7e7f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-101895 is fixed in version 8.2.14-tuxcare.14 of @angular/http."
      }
    },
    {
      "id": "CVE-2026-101896",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@8.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:e26ab135-7059-5d89-83ae-2a5e731727c6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-101896 affects version 8.2.14-tuxcare.14 of @angular/http."
      }
    },
    {
      "id": "CVE-2026-41423",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@8.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:f682a78c-78dd-58b7-927e-370f6018917b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41423 is fixed in version 8.2.14-tuxcare.14 of @angular/http."
      }
    },
    {
      "id": "CVE-2026-46417",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@8.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:42c8ff65-8bac-5ac0-8612-0789e3c2767a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46417 is fixed in version 8.2.14-tuxcare.14 of @angular/http."
      }
    },
    {
      "id": "CVE-2026-50168",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@8.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:064a7da3-7851-5aa3-a7ac-8447b1b7fff2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50168 is fixed in version 8.2.14-tuxcare.14 of @angular/http."
      }
    },
    {
      "id": "CVE-2026-50169",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@8.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:0097ee24-b0de-52c9-b5b8-041a44426587",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50169 is fixed in version 8.2.14-tuxcare.14 of @angular/http."
      }
    },
    {
      "id": "CVE-2026-50184",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@8.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:0ef21262-a31c-5116-9796-dd5ca765dc38",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50184 is fixed in version 8.2.14-tuxcare.14 of @angular/http."
      }
    },
    {
      "id": "CVE-2026-50555",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@8.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:bbb727ad-0c15-538f-8751-ab30c78d026a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50555 is fixed in version 8.2.14-tuxcare.14 of @angular/http."
      }
    },
    {
      "id": "CVE-2026-50556",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@8.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:2ed10056-2b26-5217-82fa-954576a2928f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50556 is fixed in version 8.2.14-tuxcare.14 of @angular/http."
      }
    },
    {
      "id": "CVE-2026-54264",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@8.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:e1c61cdd-ee5f-5d28-af90-4f1cac6c1ac3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54264 is fixed in version 8.2.14-tuxcare.14 of @angular/http."
      }
    },
    {
      "id": "CVE-2026-69149",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@8.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:0eeb4dcf-5963-5981-baaa-40ff765f10d3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69149 is fixed in version 8.2.14-tuxcare.14 of @angular/http."
      }
    },
    {
      "id": "CVE-2026-88056",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@8.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:856d1bad-b564-55d4-8a72-7713215f0280",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-88056 does not affect version 8.2.14-tuxcare.14 of @angular/http. not_affected \u2014 Angular 8.2.14 is NOT AFFECTED by CVE-2026-88056. The vulnerability requires a sophisticated URL resolution utility (`parseUrl` in `packages/platform-server/src/url.ts`) that calls `String.prototype.trim()` to strip Unicode whitespace, creating a discrepancy with WHATWG URL validation. This architecture was introduced in Angular v12+ (circa 2026 as TuxCare backports). Angular 8.2.14 (released N...",
        "justification": "code_not_reachable"
      }
    },
    {
      "id": "CVE-2026-88058",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@8.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:41bd1cdf-e380-55ff-bfd6-b71a8e730558",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88058 is fixed in version 8.2.14-tuxcare.14 of @angular/http."
      }
    },
    {
      "id": "CVE-2026-88060",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/http@8.2.14-tuxcare.14"
        }
      ],
      "bom-ref": "urn:uuid:e6bdf2f3-47ef-5404-b550-24d519e9eb29",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88060 is fixed in version 8.2.14-tuxcare.14 of @angular/http."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/http@8.2.14-tuxcare.14"
    }
  ]
}