{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:72c5912d-4138-5fb8-a890-24f26a5bd5a8",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/%40angular/platform-server@16.2.11-tuxcare.2",
      "type": "library",
      "name": "@angular/platform-server",
      "version": "16.2.11-tuxcare.2",
      "purl": "pkg:npm/%40angular/platform-server@16.2.11-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:e4fafe60-9255-58a8-9675-11b37e200c07",
      "id": "CVE-2025-59052",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59052 affects version 16.2.11-tuxcare.2 of @angular/platform-server."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37c0d58a-47b0-57d3-a8c9-badfb9fe54cf",
      "id": "CVE-2025-66035",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66035 is fixed in version 16.2.11-tuxcare.2 of @angular/platform-server."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ff2cb99-2809-5067-a320-f56b9fd527ce",
      "id": "CVE-2025-66412",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66412 is fixed in version 16.2.11-tuxcare.2 of @angular/platform-server."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:990fc621-4c04-5d83-9efd-78cd6b129011",
      "id": "CVE-2026-22610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22610 is fixed in version 16.2.11-tuxcare.2 of @angular/platform-server."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8762ba8a-ebb6-5a93-ac1a-213bf86b1fa7",
      "id": "CVE-2026-27970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27970 is fixed in version 16.2.11-tuxcare.2 of @angular/platform-server."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f505762-48e3-5930-8d4c-ec1ff2866898",
      "id": "CVE-2026-41423",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41423 is fixed in version 16.2.11-tuxcare.2 of @angular/platform-server."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d132b7c3-e5ee-5608-a7eb-13b0f107af85",
      "id": "CVE-2026-46417",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46417 is fixed in version 16.2.11-tuxcare.2 of @angular/platform-server."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:750161d6-f5d4-5317-bef0-7ccd92d07151",
      "id": "CVE-2026-50168",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50168 is fixed in version 16.2.11-tuxcare.2 of @angular/platform-server."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e61c53d6-8651-53a1-a3ca-303fcd1c09fe",
      "id": "CVE-2026-50169",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50169 is fixed in version 16.2.11-tuxcare.2 of @angular/platform-server."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9cd52c60-d590-55c8-97c5-72b8f7750a19",
      "id": "CVE-2026-50170",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50170 is fixed in version 16.2.11-tuxcare.2 of @angular/platform-server."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54845c1e-0377-54a9-8377-c0cf46b624bb",
      "id": "CVE-2026-50171",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50171 is fixed in version 16.2.11-tuxcare.2 of @angular/platform-server."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4dea4811-a8de-5f31-be98-746a5f679b8c",
      "id": "CVE-2026-50184",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50184 is fixed in version 16.2.11-tuxcare.2 of @angular/platform-server."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c569c7a4-ac58-5c09-a960-1cb14adb47fc",
      "id": "CVE-2026-50555",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50555 is fixed in version 16.2.11-tuxcare.2 of @angular/platform-server."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93fa1911-633b-5559-a9e1-6ccded86bdf0",
      "id": "CVE-2026-50556",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50556 is fixed in version 16.2.11-tuxcare.2 of @angular/platform-server."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e45929d-2a6d-598d-adf0-a4eccff294d9",
      "id": "CVE-2026-50557",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50557 is fixed in version 16.2.11-tuxcare.2 of @angular/platform-server."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7152f07c-5fab-5e83-ab6a-aa29f67526bf",
      "id": "CVE-2026-52725",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-52725 is fixed in version 16.2.11-tuxcare.2 of @angular/platform-server."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57b823e1-bb71-5d8d-8fb8-f106a2cd0666",
      "id": "CVE-2026-54264",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54264 is fixed in version 16.2.11-tuxcare.2 of @angular/platform-server."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d7583b0-23d8-58b0-b5a4-0580d2c3e806",
      "id": "CVE-2026-54265",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54265 is fixed in version 16.2.11-tuxcare.2 of @angular/platform-server."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f86dd76a-1363-54b7-bdae-9321da3f1417",
      "id": "CVE-2026-54266",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54266 is fixed in version 16.2.11-tuxcare.2 of @angular/platform-server."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa87981a-6da4-529e-93a1-d26460e4690f",
      "id": "CVE-2026-54267",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54267 is fixed in version 16.2.11-tuxcare.2 of @angular/platform-server."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c3e2586-8685-5e61-908c-d6a5bce5a9ff",
      "id": "CVE-2026-54268",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54268 is fixed in version 16.2.11-tuxcare.2 of @angular/platform-server."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64cf8ac7-5636-57c4-8f22-4f2e91dafc1f",
      "id": "CVE-2026-68945",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-68945 is fixed in version 16.2.11-tuxcare.2 of @angular/platform-server."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6224595-6b19-5069-bd1e-34882398ca7c",
      "id": "CVE-2026-69149",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69149 is fixed in version 16.2.11-tuxcare.2 of @angular/platform-server."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a997db41-01ed-540f-aeb0-828af73f8170",
      "id": "CVE-2026-69151",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69151 is fixed in version 16.2.11-tuxcare.2 of @angular/platform-server."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2430a52-e400-541c-9f93-3d571921e725",
      "id": "CVE-2026-88056",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-88056 does not affect version 16.2.11-tuxcare.2 of @angular/platform-server. not_affected \u2014 Angular 16.2.11-tuxcare.2 is NOT affected by CVE-2026-88056. The vulnerability requires WHATWG URL validation combined with String.prototype.trim() on URLs during SSR, creating a discrepancy that enables SSRF. While the target uses WHATWG URL parsing (backported in commit c03fbfd7cc for CVE-2026-50168), it does NOT call String.prototype.trim() on URLs. The attack chain is broken at the trim() s..."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9844a5e-facb-5984-bdb1-c3e07aba3237",
      "id": "CVE-2026-88057",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88057 affects version 16.2.11-tuxcare.2 of @angular/platform-server."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:438a207e-3fe6-5822-a272-2c6dc2b698e7",
      "id": "CVE-2026-88059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88059 affects version 16.2.11-tuxcare.2 of @angular/platform-server."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be73ac14-7bdf-5710-8a00-1f234e794778",
      "id": "CVE-2026-88060",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88060 affects version 16.2.11-tuxcare.2 of @angular/platform-server."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@16.2.11-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/platform-server@16.2.11-tuxcare.2"
    }
  ]
}