{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:0b789f6a-550c-55e8-a684-84eba7f936ed",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "@angular/platform-browser-dynamic",
      "purl": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.15",
      "type": "library",
      "bom-ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.15",
      "version": "17.3.12-tuxcare.15",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-59052",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:7ea64f1f-e0fa-5bb4-b53c-9bc1a53f18be",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59052 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2025-66035",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:6f543ece-cc97-500d-b03a-5a73ce838078",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66035 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2025-66412",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:45ac146a-021e-5d2d-ab7a-2fae37530fea",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66412 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2026-22610",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:81ecd3c6-097c-52c2-b8c9-847a9cd81a29",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22610 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2026-27970",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:3657b417-8cd3-50f3-a784-8bf26f4dab8a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27970 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2026-32635",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:7204b354-810b-5688-bfee-b3645fd58341",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-32635 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2026-46417",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:e23badab-67d8-5175-83d7-9a0444ee705c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46417 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2026-50168",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:77f1cdaa-1900-587a-9c00-1cf2198b694e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50168 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2026-50169",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:80ccfa28-d0e7-5359-943f-45678d915dc0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50169 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2026-50170",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:c5826fb6-7932-518f-8199-13cc735994ca",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50170 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2026-50171",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:fd3b6669-8882-556a-8658-988a6f002bff",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50171 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2026-50184",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:2fadf61d-76da-52d0-ba04-6a7bd6f2dd85",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50184 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2026-50555",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:8a876fc6-c791-5435-8747-ef242815ad43",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50555 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2026-50556",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:afe3cdfe-891e-5659-8604-3fc9e12c7b0e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50556 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2026-50557",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:8bd9a2c1-3413-5fc1-9f2f-dde886ea05d4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50557 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2026-52725",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:ba333100-501f-5b64-a6fc-68ff9fa8672e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-52725 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2026-54264",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:1cc174f5-6b59-58d1-be55-dc7ec8b8d5c7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54264 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2026-54265",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:e70510a4-9a58-537b-a89f-9eb55732cd35",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54265 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2026-54266",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:87f81b5f-9aa9-5a5f-9bae-b1754fecceef",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54266 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2026-54267",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:e7e8be8f-ef55-5987-9801-10aa9b658503",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54267 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2026-54268",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:af3cd579-d6a5-588b-9bcb-59fc1146dc38",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54268 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2026-68945",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:3ed7e41d-2673-5e35-866c-02a8299f356c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-68945 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2026-69149",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:7e3b0fe8-9b16-5d08-b179-56dfb77147c5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69149 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2026-69151",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:05b626e5-54b2-5641-87d4-e0d7ee88c185",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69151 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2026-88056",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:7c304d76-e7a7-5b8b-8c87-1b019151fe4c",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-88056 does not affect version 17.3.12-tuxcare.15 of @angular/platform-browser-dynamic. not_affected \u2014 Version 17.3.12 is not affected by CVE-2026-88056. The vulnerability involves String.prototype.trim() being applied during URL resolution in Angular's platform-server, converting validated same-origin URLs with Unicode whitespace into cross-origin protocol-relative URLs, leading to SSRF. This vulnerable code pattern was introduced in newer Angular versions (v20+) and does not exist in version 1...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-88057",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:e8d7927f-1482-5cde-a096-19288adb5ec6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88057 affects version 17.3.12-tuxcare.15 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2026-88059",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:65e66bc4-1e5d-5d33-a685-dd60d523bf59",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88059 affects version 17.3.12-tuxcare.15 of @angular/platform-browser-dynamic."
      }
    },
    {
      "id": "CVE-2026-88060",
      "affects": [
        {
          "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.15"
        }
      ],
      "bom-ref": "urn:uuid:624a9d23-4eaa-561a-bcba-2cb9bf1aed20",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-88060 affects version 17.3.12-tuxcare.15 of @angular/platform-browser-dynamic."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.15"
    }
  ]
}