{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:685ef0df-45a7-55d7-b8db-76e730a23426",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.12",
      "type": "library",
      "name": "@angular/upgrade",
      "version": "5.2.11-tuxcare.12",
      "purl": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.12"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:b384df38-ce62-5ed1-9c6d-da579483c1af",
      "id": "CVE-2021-4231",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82b41980-7342-50b4-95c1-b4a14647a112",
      "id": "CVE-2025-66035",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef41be90-e4ba-5d28-a314-26dea3a58cbb",
      "id": "CVE-2025-66412",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52d22251-0118-5de3-aae3-4d9c66f08ac0",
      "id": "CVE-2026-22610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:479d93c0-e5a6-546b-8d9d-ed0f19c00089",
      "id": "CVE-2026-27970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49e941bf-5522-51f3-9d5a-c2dff8fc3c02",
      "id": "CVE-2026-41423",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1580d6e5-ebeb-593d-8bdb-4abbabe6172c",
      "id": "CVE-2026-46417",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9875a06-d355-5d7d-81f3-18c698586a1f",
      "id": "CVE-2026-50168",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30c1a584-9c78-510d-be32-347d23ae5ae4",
      "id": "CVE-2026-50169",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aadfde34-6b34-5a5e-96db-1a3f89d3453f",
      "id": "CVE-2026-50170",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50b9e3bf-48a3-5807-a332-e4e2b595c731",
      "id": "CVE-2026-50171",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1a014df-b773-5ef2-afb7-f9c9270a1a86",
      "id": "CVE-2026-50184",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b648b9d0-626b-560d-9cbe-5c3158eefd96",
      "id": "CVE-2026-50555",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8fb3a595-e0a7-598e-90d4-f07115bea247",
      "id": "CVE-2026-50556",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc1d9b87-209a-55a9-8e57-a0452bec8e6f",
      "id": "CVE-2026-50557",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f22f2181-1249-5b29-a133-abd304c2c8d1",
      "id": "CVE-2026-52725",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d09db0a-c998-51a2-a6c6-e998aa738db9",
      "id": "CVE-2026-54264",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3b495e0a-9878-5984-ab99-6966a102c953",
      "id": "CVE-2026-54265",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2eaaefe9-3128-5e65-8bc3-4308b47d2c3f",
      "id": "CVE-2026-54266",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93dcf334-b81e-5795-b185-9947b6bc2e78",
      "id": "CVE-2026-54267",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fdc8762b-b00b-58cb-b551-f06ce34dc2e4",
      "id": "CVE-2026-54268",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ceb71c1-0ef9-56a2-ad94-b590d577b649",
      "id": "CVE-2026-68945",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.12 of @angular/upgrade. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65c7cb29-b6e3-5c1e-bd3e-8f054f2452b2",
      "id": "CVE-2026-69149",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69149 affects version 5.2.11-tuxcare.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93d17047-5934-59e5-a434-5a3b3ff4a8be",
      "id": "CVE-2026-69151",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69151 affects version 5.2.11-tuxcare.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.12"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/upgrade@5.2.11-tuxcare.12"
    }
  ]
}