{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f8ea1a2a-34ee-5349-8d3f-a3b02334add5",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/%40angular/elements@19.2.21-tuxcare.5",
      "type": "library",
      "name": "@angular/elements",
      "version": "19.2.21-tuxcare.5",
      "purl": "pkg:npm/%40angular/elements@19.2.21-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:994ee44c-d9d8-5abb-b284-959bbd93bb55",
      "id": "CVE-2026-27970",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-27970 does not affect version 19.2.21-tuxcare.5 of @angular/elements. already_fixed \u2014 The target repository (Angular 19.2.21-tuxcare.4) already contains the fix for CVE-2026-27970. The vulnerability (XSS via unsanitized HTML attributes in ICU message translations) has been addressed by TuxCare in prior backports. The defense mechanism in packages/core/src/render3/i18n/i18n_parse.ts lines 829-843 implements the same attribute allowlist validation as the vendor patch, blocking URI..."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/elements@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33b946eb-3711-556c-bb61-5ea65bb0a202",
      "id": "CVE-2026-46417",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46417 is fixed in version 19.2.21-tuxcare.5 of @angular/elements."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/elements@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e69542f-0d9e-5c9c-89fd-d06d1b108534",
      "id": "CVE-2026-50168",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50168 is fixed in version 19.2.21-tuxcare.5 of @angular/elements."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/elements@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:595dee32-644a-52b1-a937-f7c8f126cf76",
      "id": "CVE-2026-50169",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50169 is fixed in version 19.2.21-tuxcare.5 of @angular/elements."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/elements@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2617a46-2363-5cc2-b6df-7449711fd0d8",
      "id": "CVE-2026-50170",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50170 is fixed in version 19.2.21-tuxcare.5 of @angular/elements."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/elements@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e734b109-fa01-5b12-b517-b49b2b4dffe0",
      "id": "CVE-2026-50171",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50171 is fixed in version 19.2.21-tuxcare.5 of @angular/elements."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/elements@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33ff7350-1464-5841-8052-068ab6c338d6",
      "id": "CVE-2026-50184",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50184 is fixed in version 19.2.21-tuxcare.5 of @angular/elements."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/elements@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a0c6bc1-c3cc-56c3-9e25-b1d59de9cc29",
      "id": "CVE-2026-50555",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50555 is fixed in version 19.2.21-tuxcare.5 of @angular/elements."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/elements@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3a5f361-a63c-5a75-a15b-ad30bc1c8bfc",
      "id": "CVE-2026-50556",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50556 is fixed in version 19.2.21-tuxcare.5 of @angular/elements."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/elements@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a18ba4e8-6035-598b-a323-9131e468b028",
      "id": "CVE-2026-50557",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50557 is fixed in version 19.2.21-tuxcare.5 of @angular/elements."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/elements@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c7ff665-06bf-51a4-b9c8-ddd31f286cad",
      "id": "CVE-2026-52725",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-52725 is fixed in version 19.2.21-tuxcare.5 of @angular/elements."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/elements@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:164c53a9-fefd-5d71-8521-79340207d519",
      "id": "CVE-2026-54264",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54264 is fixed in version 19.2.21-tuxcare.5 of @angular/elements."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/elements@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:66e33c82-0e5e-57b2-bad1-0765fe879b6b",
      "id": "CVE-2026-54265",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54265 is fixed in version 19.2.21-tuxcare.5 of @angular/elements."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/elements@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a5f91e4-8cf8-5a92-9076-417636f5ceef",
      "id": "CVE-2026-54266",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54266 is fixed in version 19.2.21-tuxcare.5 of @angular/elements."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/elements@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15b282cb-c67d-54a0-8242-aa2afc431cf0",
      "id": "CVE-2026-54267",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54267 is fixed in version 19.2.21-tuxcare.5 of @angular/elements."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/elements@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57d892ad-6f99-5350-aa6e-f9c87e682a3f",
      "id": "CVE-2026-54268",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54268 is fixed in version 19.2.21-tuxcare.5 of @angular/elements."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/elements@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:611954f9-9f74-5b4d-bc0b-7403da5c5a23",
      "id": "CVE-2026-68945",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-68945 is fixed in version 19.2.21-tuxcare.5 of @angular/elements."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/elements@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f23b18c5-81e6-535f-9b43-e9c5791f31a8",
      "id": "CVE-2026-69149",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69149 is fixed in version 19.2.21-tuxcare.5 of @angular/elements."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/elements@19.2.21-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24981d13-fb63-56d4-a3c8-03b819c085b2",
      "id": "CVE-2026-69151",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69151 is fixed in version 19.2.21-tuxcare.5 of @angular/elements."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/elements@19.2.21-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/elements@19.2.21-tuxcare.5"
    }
  ]
}