{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:70bd9221-4dc4-5120-b0b3-1508b661ae76",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/%40angular/upgrade@16.2.12-tuxcare.3",
      "type": "library",
      "name": "@angular/upgrade",
      "version": "16.2.12-tuxcare.3",
      "purl": "pkg:npm/%40angular/upgrade@16.2.12-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:94083579-c207-5ab2-85b8-8998cacb1b20",
      "id": "CVE-2025-59052",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59052 is fixed in version 16.2.12-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@16.2.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8816ffb0-b97f-5462-80cb-09cd01fc3742",
      "id": "CVE-2025-66035",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66035 is fixed in version 16.2.12-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@16.2.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a929bd1f-e936-5336-baaa-e507a4b2a332",
      "id": "CVE-2025-66412",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66412 affects version 16.2.12-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@16.2.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9136410-a3f6-56aa-b319-ce5dab35902b",
      "id": "CVE-2026-22610",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22610 affects version 16.2.12-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@16.2.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39a1d2a1-42ca-50de-8f72-ab2141bb4f5d",
      "id": "CVE-2026-27970",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-27970 affects version 16.2.12-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@16.2.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae48f1ef-3b31-5e07-bfec-3710566fffd7",
      "id": "CVE-2026-41423",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41423 is fixed in version 16.2.12-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@16.2.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3b63be99-3d47-5808-90bb-27e53a5ed402",
      "id": "CVE-2026-46417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46417 affects version 16.2.12-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@16.2.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e959ecf-3119-5bd8-b66c-a73fd928c21b",
      "id": "CVE-2026-50168",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50168 affects version 16.2.12-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@16.2.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ea4dde3-d144-5583-aaff-793e5618e5c7",
      "id": "CVE-2026-50169",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50169 affects version 16.2.12-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@16.2.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6ee51b6-7ad9-54bc-b2c9-33b3279cc374",
      "id": "CVE-2026-50170",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50170 affects version 16.2.12-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@16.2.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b864a9c7-64d0-51ca-89f7-d765c07ef0b0",
      "id": "CVE-2026-50171",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50171 affects version 16.2.12-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@16.2.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b2cb44b-fb67-5762-a2a2-b8ef4088fa25",
      "id": "CVE-2026-50184",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50184 affects version 16.2.12-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@16.2.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d8d6353-ff89-58cc-bf38-85ae0038fde9",
      "id": "CVE-2026-50555",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50555 affects version 16.2.12-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@16.2.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ba9f63f-c50a-588b-91e1-56da1f84bd11",
      "id": "CVE-2026-50556",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50556 affects version 16.2.12-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@16.2.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:908cce7f-e6ea-5424-a158-8f01671e374f",
      "id": "CVE-2026-50557",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50557 affects version 16.2.12-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@16.2.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4efcac56-753e-5da1-bedb-ef60ebf096b4",
      "id": "CVE-2026-52725",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-52725 affects version 16.2.12-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@16.2.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41b3dcad-e9b0-5d23-9c3a-f3b99396a150",
      "id": "CVE-2026-54264",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54264 affects version 16.2.12-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@16.2.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6473dd6-2fcb-58f9-a81c-d2a6633921eb",
      "id": "CVE-2026-54265",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54265 affects version 16.2.12-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@16.2.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27c3c639-7f69-5ca1-9f4f-0df9f626ac75",
      "id": "CVE-2026-54266",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54266 affects version 16.2.12-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@16.2.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:735508df-6a6e-5091-9f5c-4a64a7e34975",
      "id": "CVE-2026-54267",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54267 affects version 16.2.12-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@16.2.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:641e0fe4-e8c4-5eba-8e2f-4e4cbf5b0641",
      "id": "CVE-2026-54268",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54268 affects version 16.2.12-tuxcare.3 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@16.2.12-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/upgrade@16.2.12-tuxcare.3"
    }
  ]
}