{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:d8bfb3fa-9d17-55e8-815f-518299c66cc9",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/%40angular/upgrade@7.2.16-tuxcare.11",
      "type": "library",
      "name": "@angular/upgrade",
      "version": "7.2.16-tuxcare.11",
      "purl": "pkg:npm/%40angular/upgrade@7.2.16-tuxcare.11"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:9ad3aa12-2219-5828-8490-7229776f2377",
      "id": "CVE-2021-4231",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-4231 is fixed in version 7.2.16-tuxcare.11 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@7.2.16-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b3b9be1-1ec8-5432-9b18-8ceadd3d104d",
      "id": "CVE-2025-66035",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66035 is fixed in version 7.2.16-tuxcare.11 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@7.2.16-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79effc1b-ff8e-531b-a1ab-83c8a0a5bcbb",
      "id": "CVE-2025-66412",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66412 is fixed in version 7.2.16-tuxcare.11 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@7.2.16-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7aa487d7-f086-5b86-a4c8-339299ff740f",
      "id": "CVE-2026-22610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22610 is fixed in version 7.2.16-tuxcare.11 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@7.2.16-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:696e95c0-9d9c-5ed6-832c-2dd7e6fcc80a",
      "id": "CVE-2026-27970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27970 is fixed in version 7.2.16-tuxcare.11 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@7.2.16-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5725c8f-75ca-595f-9669-3ff076b634e7",
      "id": "CVE-2026-41423",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41423 is fixed in version 7.2.16-tuxcare.11 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@7.2.16-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1de048b3-d403-58a8-8215-481e09e452a4",
      "id": "CVE-2026-46417",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46417 is fixed in version 7.2.16-tuxcare.11 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@7.2.16-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df0bf384-d7e0-586c-bf8d-4a3545a64b03",
      "id": "CVE-2026-50168",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50168 is fixed in version 7.2.16-tuxcare.11 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@7.2.16-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f14b42b4-6316-5e07-a0b6-628c5d34efae",
      "id": "CVE-2026-50169",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50169 is fixed in version 7.2.16-tuxcare.11 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@7.2.16-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3aa92594-5659-51cc-90d5-6915842443b8",
      "id": "CVE-2026-50170",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50170 is fixed in version 7.2.16-tuxcare.11 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@7.2.16-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:517dcff4-e378-5ee6-ad89-6e8e1d2e2385",
      "id": "CVE-2026-50171",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50171 is fixed in version 7.2.16-tuxcare.11 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@7.2.16-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43bf2d97-a3e1-5dee-a778-499a67faa3ac",
      "id": "CVE-2026-50184",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50184 is fixed in version 7.2.16-tuxcare.11 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@7.2.16-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:700e43b4-3589-5ab3-ab86-7d70f921c3f2",
      "id": "CVE-2026-50555",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50555 is fixed in version 7.2.16-tuxcare.11 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@7.2.16-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2fa54453-7886-5da1-8b89-3e2d7ae3162e",
      "id": "CVE-2026-50556",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50556 is fixed in version 7.2.16-tuxcare.11 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@7.2.16-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a12d26d5-38d6-59c6-b24e-fb43dee684c0",
      "id": "CVE-2026-50557",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50557 is fixed in version 7.2.16-tuxcare.11 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@7.2.16-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6541a90-aa12-5224-bb73-12d6be42b40a",
      "id": "CVE-2026-52725",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-52725 is fixed in version 7.2.16-tuxcare.11 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@7.2.16-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e50dff1f-2d59-5b59-9e0c-ba914d4aa946",
      "id": "CVE-2026-54264",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54264 is fixed in version 7.2.16-tuxcare.11 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@7.2.16-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:640e2732-bdcf-57cd-9405-3bb5e9f52106",
      "id": "CVE-2026-54265",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54265 is fixed in version 7.2.16-tuxcare.11 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@7.2.16-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:732071ab-9f91-5422-b5cf-e77587d2801e",
      "id": "CVE-2026-54266",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54266 is fixed in version 7.2.16-tuxcare.11 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@7.2.16-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2761da79-6ff2-5b03-8607-b4b5437a422f",
      "id": "CVE-2026-54267",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54267 is fixed in version 7.2.16-tuxcare.11 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@7.2.16-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7cbc7e9-6194-54cd-9832-a27cad6b4497",
      "id": "CVE-2026-54268",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54268 is fixed in version 7.2.16-tuxcare.11 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@7.2.16-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b316f5e5-6573-512a-857c-bb012e01cd0b",
      "id": "CVE-2026-68945",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-68945 does not affect version 7.2.16-tuxcare.11 of @angular/upgrade. not_affected \u2014 Angular 7.2.16 is not affected by CVE-2026-68945. The vulnerability concerns HttpTransferCache's cache key generation logic that treats repeated HTTP parameters (`?role=user&role=admin`) and comma-separated values (`?role=user,admin`) as identical, causing cache key collisions. However, the HttpTransferCache feature does not exist in version 7.2.16\u2014it was introduced in Angular v16. While v7.2.1..."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@7.2.16-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ebbde18-d406-50b5-b5df-3590cefd9fd5",
      "id": "CVE-2026-69149",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69149 is fixed in version 7.2.16-tuxcare.11 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@7.2.16-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ecc8b88-4a25-518f-86d1-321e5266491e",
      "id": "CVE-2026-69151",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69151 is fixed in version 7.2.16-tuxcare.11 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@7.2.16-tuxcare.11"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/upgrade@7.2.16-tuxcare.11"
    }
  ]
}