{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f78aa6ab-f7fa-5809-b063-5716e1fd0f84",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/%40angular/compiler-cli@19.2.21-tuxcare.5",
      "type": "library",
      "name": "@angular/compiler-cli",
      "version": "19.2.21-tuxcare.5",
      "purl": "pkg:npm/%40angular/compiler-cli@19.2.21-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:b7475a10-b663-5d1e-8cf5-1f466e1dd1fa",
      "id": "CVE-2026-27970",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-27970 does not affect version 19.2.21-tuxcare.5 of @angular/compiler-cli. already_fixed \u2014 The target repository (Angular 19.2.21-tuxcare.4) already contains the fix for CVE-2026-27970. The vulnerability (XSS via unsanitized HTML attributes in ICU message translations) has been addressed by TuxCare in prior backports. The defense mechanism in packages/core/src/render3/i18n/i18n_parse.ts lines 829-843 implements the same attribute allowlist validation as the vendor patch, blocking URI..."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a26e9a58-74bb-5457-9154-9b4648707680",
      "id": "CVE-2026-46417",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46417 is fixed in version 19.2.21-tuxcare.5 of @angular/compiler-cli."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db118957-3492-5274-a086-aa7d3518e65c",
      "id": "CVE-2026-50168",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50168 is fixed in version 19.2.21-tuxcare.5 of @angular/compiler-cli."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e50a74ec-a9e4-5c00-a15c-6fd179ef0962",
      "id": "CVE-2026-50169",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50169 is fixed in version 19.2.21-tuxcare.5 of @angular/compiler-cli."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95221113-2fcf-5df7-ae05-3c08eee89428",
      "id": "CVE-2026-50170",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50170 is fixed in version 19.2.21-tuxcare.5 of @angular/compiler-cli."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ec0e5342-ec5e-5267-942a-f8742d53c678",
      "id": "CVE-2026-50171",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50171 is fixed in version 19.2.21-tuxcare.5 of @angular/compiler-cli."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c1def7f-10d3-5219-9b87-3c9d082faa83",
      "id": "CVE-2026-50184",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50184 is fixed in version 19.2.21-tuxcare.5 of @angular/compiler-cli."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13c679cb-d381-5ed6-b389-cf1628cba0c0",
      "id": "CVE-2026-50555",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50555 is fixed in version 19.2.21-tuxcare.5 of @angular/compiler-cli."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f726dbb-a95a-59c8-b638-5b930e8e38fa",
      "id": "CVE-2026-50556",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50556 is fixed in version 19.2.21-tuxcare.5 of @angular/compiler-cli."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e78d6817-f580-5430-9827-5816be8bfeda",
      "id": "CVE-2026-50557",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50557 is fixed in version 19.2.21-tuxcare.5 of @angular/compiler-cli."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f752aa4-03dc-57de-bc53-168adda78da8",
      "id": "CVE-2026-52725",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-52725 is fixed in version 19.2.21-tuxcare.5 of @angular/compiler-cli."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46667fcb-9762-55db-8fe0-0548e18f52e4",
      "id": "CVE-2026-54264",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54264 is fixed in version 19.2.21-tuxcare.5 of @angular/compiler-cli."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ffc0173-2204-5e79-8c2c-2fa1f279198f",
      "id": "CVE-2026-54265",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54265 is fixed in version 19.2.21-tuxcare.5 of @angular/compiler-cli."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:190e8758-9180-5d51-b7c5-6a74f1b6da34",
      "id": "CVE-2026-54266",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54266 is fixed in version 19.2.21-tuxcare.5 of @angular/compiler-cli."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b0ea630-f660-551d-bc70-69a9bfdd20fc",
      "id": "CVE-2026-54267",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54267 is fixed in version 19.2.21-tuxcare.5 of @angular/compiler-cli."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad8dc6f2-eaf0-572a-b79c-cec390a2432e",
      "id": "CVE-2026-54268",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54268 is fixed in version 19.2.21-tuxcare.5 of @angular/compiler-cli."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e605430-124e-542c-8c74-40c80539a987",
      "id": "CVE-2026-68945",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-68945 is fixed in version 19.2.21-tuxcare.5 of @angular/compiler-cli."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:385496a9-6977-5aab-a740-34379cfefbb1",
      "id": "CVE-2026-69149",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69149 is fixed in version 19.2.21-tuxcare.5 of @angular/compiler-cli."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c85eeb3a-6469-5e5f-805b-a3d7f3998c71",
      "id": "CVE-2026-69151",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69151 is fixed in version 19.2.21-tuxcare.5 of @angular/compiler-cli."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.21-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/compiler-cli@19.2.21-tuxcare.5"
    }
  ]
}