{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:381e7423-d9d3-56ef-b2d7-15a67bd3c90b",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/%40angular/upgrade@13.3.11-tuxcare.3",
      "type": "library",
      "name": "@angular/upgrade",
      "version": "13.3.11-tuxcare.3",
      "purl": "pkg:npm/%40angular/upgrade@13.3.11-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:a584703f-be25-5ab3-b106-c8ac1472edfc",
      "id": "CVE-2025-66035",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66035 is fixed in version 13.3.11-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@13.3.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07e6c25c-0134-50bd-aef1-1cce1d939ed1",
      "id": "CVE-2025-66412",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66412 is fixed in version 13.3.11-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@13.3.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:192131de-fbc4-5acd-841a-04f7b94be816",
      "id": "CVE-2026-22610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22610 is fixed in version 13.3.11-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@13.3.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c75703f5-43c1-53f7-aee0-3e32090fe80e",
      "id": "CVE-2026-27970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27970 is fixed in version 13.3.11-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@13.3.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b1581f3-e95c-55c2-8dcf-b415fc1438f5",
      "id": "CVE-2026-41423",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41423 is fixed in version 13.3.11-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@13.3.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71434957-28cf-57c9-8487-be5ebcbee72c",
      "id": "CVE-2026-46417",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46417 is fixed in version 13.3.11-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@13.3.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1b92a67-6929-590f-b4ab-4bc0c0050bad",
      "id": "CVE-2026-50168",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50168 is fixed in version 13.3.11-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@13.3.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:740187bd-0c0d-50c9-9c0e-d9f30a0309ab",
      "id": "CVE-2026-50169",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50169 is fixed in version 13.3.11-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@13.3.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d429d2cc-f282-53dd-9327-00640bdb6e7d",
      "id": "CVE-2026-50170",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50170 is fixed in version 13.3.11-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@13.3.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c56614f-bcf0-511a-87ff-25854067c3fc",
      "id": "CVE-2026-50171",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50171 is fixed in version 13.3.11-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@13.3.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7279c26-31f8-5f9c-bfcd-794c87bb035c",
      "id": "CVE-2026-50184",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50184 is fixed in version 13.3.11-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@13.3.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d361a44f-ad13-5825-a1e6-437902fdfb6c",
      "id": "CVE-2026-50555",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50555 is fixed in version 13.3.11-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@13.3.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:301026d4-1251-59c0-be17-3140467dec7e",
      "id": "CVE-2026-50556",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50556 is fixed in version 13.3.11-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@13.3.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2e31045-99c7-5ab1-848b-71e611e3559c",
      "id": "CVE-2026-50557",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50557 is fixed in version 13.3.11-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@13.3.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95db7fd8-81fc-54be-bd9d-8340eaa6d75a",
      "id": "CVE-2026-52725",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-52725 is fixed in version 13.3.11-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@13.3.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11dce30b-6418-526f-b9cd-e2baaf3778df",
      "id": "CVE-2026-54264",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54264 is fixed in version 13.3.11-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@13.3.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a260fb3b-5583-506e-9977-93841622b70d",
      "id": "CVE-2026-54265",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54265 is fixed in version 13.3.11-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@13.3.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a0ce239-9d45-558e-95e5-48ef275c8d0c",
      "id": "CVE-2026-54266",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54266 is fixed in version 13.3.11-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@13.3.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:335bab8f-7070-5f93-9747-d458cc02c3cc",
      "id": "CVE-2026-54267",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54267 is fixed in version 13.3.11-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@13.3.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:215d94e8-0f15-5534-9ef7-8cf709f2095c",
      "id": "CVE-2026-54268",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54268 is fixed in version 13.3.11-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@13.3.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa478fef-3225-5a6a-96e4-c304d7b096e2",
      "id": "CVE-2026-68945",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-68945 does not affect version 13.3.11-tuxcare.3 of @angular/upgrade. not_affected \u2014 Angular 13.3.11 is NOT affected by CVE-2026-68945. The vulnerable HttpTransferCache feature does not exist in this version. HttpTransferCache was introduced in Angular 16.0.0-next.0 (March 2023), approximately 3 years after Angular 13.3.11's release. The target version only contains the basic TransferState mechanism for generic state transfer, but lacks the automated HTTP request caching functi..."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@13.3.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20b46e85-f2a2-59d7-9610-c00cad7712e3",
      "id": "CVE-2026-69149",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69149 is fixed in version 13.3.11-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@13.3.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c846dbc5-bc47-593a-ae58-b7b5664618e2",
      "id": "CVE-2026-69151",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69151 is fixed in version 13.3.11-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@13.3.11-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/upgrade@13.3.11-tuxcare.3"
    }
  ]
}