{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:35b85daa-f532-5fe3-a8d4-7b3895966709",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/compiler-cli",
      "purl": "pkg:npm/%40angular/compiler-cli@19.2.25-tuxcare.4",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/compiler-cli@19.2.25-tuxcare.4",
      "version": "19.2.25-tuxcare.4",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-59052",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.25-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:61068446-9389-5567-b143-fa234b23ba23",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59052 is fixed in version 19.2.25-tuxcare.4 of @angular/compiler-cli."
      }
    },
    {
      "id": "CVE-2026-101895",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.25-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:45521558-67cb-5cb7-b718-5483a4bcdf60",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-101895 affects version 19.2.25-tuxcare.4 of @angular/compiler-cli."
      }
    },
    {
      "id": "CVE-2026-101896",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.25-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:4ed3e37e-f479-5b4f-920f-74cb742e57be",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-101896 affects version 19.2.25-tuxcare.4 of @angular/compiler-cli."
      }
    },
    {
      "id": "CVE-2026-27970",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.25-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:b8ae1913-ceef-51a5-8e74-62023d522c06",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-27970 does not affect version 19.2.25-tuxcare.4 of @angular/compiler-cli. Angular 19.2.25 is NOT affected by CVE-2026-27970. The vulnerability (XSS via unsanitized attributes in ICU message translations) was fixed in upstream Angular v19.2.19 by commit 747548721d authored by Doug Parker (Angular team). The target version 19.2.25 is 6 patch releases after the fix. The defense code is present at packages/core/src/render3/i18n/i18n_parse.ts:843-867, implementing allowlist validation, URI attribute blocking, and unknown attribute dropping. This is an upstream vendor fix, not a TuxCare backport.",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-54264",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.25-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:1f932f66-027d-5565-9203-290c4aa71213",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54264 affects version 19.2.25-tuxcare.4 of @angular/compiler-cli."
      }
    },
    {
      "id": "CVE-2026-54265",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.25-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:04befe26-84a9-5956-afbd-2586b98c97b3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54265 affects version 19.2.25-tuxcare.4 of @angular/compiler-cli."
      }
    },
    {
      "id": "CVE-2026-54266",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.25-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:926e375b-88d2-5889-9558-8871fd7c4560",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54266 affects version 19.2.25-tuxcare.4 of @angular/compiler-cli."
      }
    },
    {
      "id": "CVE-2026-54267",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.25-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:da324a4e-176c-52ff-8575-75371eee6828",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54267 affects version 19.2.25-tuxcare.4 of @angular/compiler-cli."
      }
    },
    {
      "id": "CVE-2026-54268",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.25-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:7e73897c-2d42-592f-ae70-3311d92c04cd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54268 affects version 19.2.25-tuxcare.4 of @angular/compiler-cli."
      }
    },
    {
      "id": "CVE-2026-68945",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.25-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:6623a4b0-254f-5c3c-a981-9e38958ff56d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-68945 affects version 19.2.25-tuxcare.4 of @angular/compiler-cli."
      }
    },
    {
      "id": "CVE-2026-69149",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.25-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:2d16af73-c2d2-58fb-8ab0-3510345b06c1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69149 is fixed in version 19.2.25-tuxcare.4 of @angular/compiler-cli."
      }
    },
    {
      "id": "CVE-2026-69151",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.25-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:69331ae4-b933-5ec9-85ff-f647caa47a46",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69151 affects version 19.2.25-tuxcare.4 of @angular/compiler-cli."
      }
    },
    {
      "id": "CVE-2026-88056",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.25-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:a38cf787-368a-5f43-b13a-d74a2b26155f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88056 is fixed in version 19.2.25-tuxcare.4 of @angular/compiler-cli."
      }
    },
    {
      "id": "CVE-2026-88057",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.25-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:a207ae81-1721-5116-80a0-6902ba345f9e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88057 is fixed in version 19.2.25-tuxcare.4 of @angular/compiler-cli."
      }
    },
    {
      "id": "CVE-2026-88058",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.25-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:cb379f9f-1643-5edd-8054-83f0d2f275ab",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88058 affects version 19.2.25-tuxcare.4 of @angular/compiler-cli."
      }
    },
    {
      "id": "CVE-2026-88059",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.25-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:a9407bc6-fb26-5e18-b666-85c67f36807b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88059 affects version 19.2.25-tuxcare.4 of @angular/compiler-cli."
      }
    },
    {
      "id": "CVE-2026-88060",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/compiler-cli@19.2.25-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:f5345518-74b7-51df-bd8f-f6220c037e90",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88060 is fixed in version 19.2.25-tuxcare.4 of @angular/compiler-cli."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/compiler-cli@19.2.25-tuxcare.4"
    }
  ]
}