{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f215534a-92e0-55f7-83e7-6bb18217671b",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/platform-server",
      "purl": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.12",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.12",
      "version": "12.2.17-tuxcare.12",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-66035",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:8b123679-f96b-54d0-92bb-3004821d6124",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66035 is fixed in version 12.2.17-tuxcare.12 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2025-66412",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:1f01a9e1-42ff-580c-b5d0-b0e202615e3d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66412 is fixed in version 12.2.17-tuxcare.12 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-101895",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:28eaf6ba-b47c-5dd2-8fda-fd53817e5629",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-101895 is fixed in version 12.2.17-tuxcare.12 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-101896",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:e547a119-6336-5ef7-b526-f0f9ee19ce25",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-101896 affects version 12.2.17-tuxcare.12 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-22610",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:8d8faa28-e3ac-5b1f-a85d-e60d451d5097",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22610 is fixed in version 12.2.17-tuxcare.12 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-27970",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:f258e767-6cff-55e2-802c-37e8735fe4a9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27970 is fixed in version 12.2.17-tuxcare.12 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-46417",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:8624e202-bcd8-50d1-81c4-ddde23281b3e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46417 is fixed in version 12.2.17-tuxcare.12 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-50168",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:70ecf73e-5ebd-5bed-ba8e-8bfec19d727f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50168 is fixed in version 12.2.17-tuxcare.12 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-50169",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:73ea37e4-de37-5f16-8116-b20eaa20b2a6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50169 is fixed in version 12.2.17-tuxcare.12 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-50170",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:50df5b3a-51c9-5543-824e-b6f223ce9d4b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50170 is fixed in version 12.2.17-tuxcare.12 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-50171",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:26fb9a0c-43b6-56f8-9a2c-312ed2b3b0c3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50171 is fixed in version 12.2.17-tuxcare.12 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-50184",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:e6d667a0-8162-55bb-935b-3bf3cf1bc7bb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50184 is fixed in version 12.2.17-tuxcare.12 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-50555",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:f6ea29b3-6891-594b-900b-24edd0149e9d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50555 is fixed in version 12.2.17-tuxcare.12 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-50556",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:c70ae7cd-f1f9-5402-a372-627090a4aebf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50556 is fixed in version 12.2.17-tuxcare.12 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-50557",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:49e43a5b-e69f-56ff-9e95-602c6b03ed18",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50557 is fixed in version 12.2.17-tuxcare.12 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-52725",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:b32959c1-245f-55de-a393-08bce0979efe",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-52725 is fixed in version 12.2.17-tuxcare.12 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-54264",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:3f5a99c8-00e7-545d-9658-40a8d9c32294",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54264 is fixed in version 12.2.17-tuxcare.12 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-54265",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:f22d0e86-62bd-5715-9cad-f320e05684d5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54265 is fixed in version 12.2.17-tuxcare.12 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-54266",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:5c35ffd5-163c-53dd-82b0-6b20b01dc1ec",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54266 is fixed in version 12.2.17-tuxcare.12 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-54267",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:12a10895-656a-5000-8143-edb634a5ae0b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54267 is fixed in version 12.2.17-tuxcare.12 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-54268",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:dbf24921-a5d9-5e6f-a14a-4f83ad963998",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54268 is fixed in version 12.2.17-tuxcare.12 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-68945",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:cab60aac-3878-5b9d-9689-ff85bb757773",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-68945 does not affect version 12.2.17-tuxcare.12 of @angular/platform-server. not_affected \u2014 Angular 12.2.17 does not contain the HttpTransferCache feature affected by CVE-2026-68945. HttpTransferCache, which caches HTTP requests during Server-Side Rendering (SSR), was first introduced in Angular 16.0.0\u2014approximately 4 major versions after the target version. The vulnerability concerns cache-key collision when repeated HTTP parameters are serialized, but since the entire HttpTransferCa...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-69149",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:0c37f8cd-1db3-5ab9-9327-f68d133afb04",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69149 is fixed in version 12.2.17-tuxcare.12 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-69151",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:98ce5413-c3dc-54b0-b7ac-292ee0046f66",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69151 is fixed in version 12.2.17-tuxcare.12 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-88056",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:5ab2cd8b-6e1e-59dc-ae22-93f5f7333be5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88056 is fixed in version 12.2.17-tuxcare.12 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-88057",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:9de781a3-c27d-5afc-a5e6-15db7a706435",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88057 is fixed in version 12.2.17-tuxcare.12 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-88058",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:a4fa0b5c-b6db-5ca3-9c22-75775a24c946",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88058 is fixed in version 12.2.17-tuxcare.12 of @angular/platform-server."
      }
    },
    {
      "id": "CVE-2026-88059",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:12ee574b-0330-50ff-8690-af3c3cc9fa40",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-88059 does not affect version 12.2.17-tuxcare.12 of @angular/platform-server. not_affected \u2014 Angular 12.2.17-tuxcare.9 is not affected by CVE-2026-88059. The vulnerability requires HttpTransferCache, withRequestsMadeViaParent(), and provideClientHydration() features which were introduced in Angular 16.0.0. This version uses the older module-based HttpClientModule system and lacks the entire SSR hydration transfer-cache infrastructure. The vulnerable code pattern described in the CVE do...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-88060",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:5c484d8a-17ad-56c4-b733-01179e161d2c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-88060 is fixed in version 12.2.17-tuxcare.12 of @angular/platform-server."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/platform-server@12.2.17-tuxcare.12"
    }
  ]
}