{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:427947cb-fd70-5db1-826a-36f50b007688",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/%40angular/animations@17.1.0-tuxcare.3",
      "type": "library",
      "name": "@angular/animations",
      "version": "17.1.0-tuxcare.3",
      "purl": "pkg:npm/%40angular/animations@17.1.0-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:76eff1d5-611e-5902-9106-c7dcb9ff677a",
      "id": "CVE-2017-16009",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2017-16009 is fixed in version 17.1.0-tuxcare.3 of @angular/animations."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.1.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a45cea0-4cce-5422-b556-edd8bcd7840f",
      "id": "CVE-2025-59052",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59052 is fixed in version 17.1.0-tuxcare.3 of @angular/animations."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.1.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd9777af-ec8c-5ebd-a2db-58873499c597",
      "id": "CVE-2025-66035",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66035 is fixed in version 17.1.0-tuxcare.3 of @angular/animations."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.1.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9285845c-c253-53d0-88f8-4b83ccebdda6",
      "id": "CVE-2025-66412",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66412 is fixed in version 17.1.0-tuxcare.3 of @angular/animations."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.1.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d08137f-2f6a-54bd-bc9d-5e8d7a6dd57d",
      "id": "CVE-2026-22610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22610 is fixed in version 17.1.0-tuxcare.3 of @angular/animations."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.1.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e7daba9-9f05-5658-aa2c-b969bfef9bc3",
      "id": "CVE-2026-27970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27970 is fixed in version 17.1.0-tuxcare.3 of @angular/animations."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.1.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52ffe713-8dc4-5ed9-b806-f8eba79b3a49",
      "id": "CVE-2026-32635",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-32635 is fixed in version 17.1.0-tuxcare.3 of @angular/animations."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.1.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23441658-e663-5a7c-8ff0-8b174389bd02",
      "id": "CVE-2026-41423",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41423 is fixed in version 17.1.0-tuxcare.3 of @angular/animations."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.1.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac3edbb4-d447-59ef-bcec-e567884a094d",
      "id": "CVE-2026-46417",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46417 is fixed in version 17.1.0-tuxcare.3 of @angular/animations."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.1.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38ff04ea-d311-5599-80d7-0a7ea64a9923",
      "id": "CVE-2026-50168",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50168 is fixed in version 17.1.0-tuxcare.3 of @angular/animations."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.1.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a827c68-39cd-50f1-ba94-3e5395c144a4",
      "id": "CVE-2026-50169",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50169 is fixed in version 17.1.0-tuxcare.3 of @angular/animations."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.1.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2bd3741f-8128-52ce-8f66-72e74391ba06",
      "id": "CVE-2026-50170",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50170 is fixed in version 17.1.0-tuxcare.3 of @angular/animations."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.1.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8bb0bfbb-857d-5cb4-8e01-11fea9043cab",
      "id": "CVE-2026-50171",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50171 is fixed in version 17.1.0-tuxcare.3 of @angular/animations."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.1.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e097d715-90ec-57fc-acf2-b4587a0bc3c7",
      "id": "CVE-2026-50184",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50184 is fixed in version 17.1.0-tuxcare.3 of @angular/animations."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.1.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:085ba488-a44b-5d84-89da-7ce7213a76e2",
      "id": "CVE-2026-50555",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50555 is fixed in version 17.1.0-tuxcare.3 of @angular/animations."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.1.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b44de7e3-173c-5546-8d7e-5c84aef64aea",
      "id": "CVE-2026-50556",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-50556 does not affect version 17.1.0-tuxcare.3 of @angular/animations. not_affected \u2014 The Angular repository source code is NOT affected by CVE-2026-50556. The vulnerability exists in the external domino dependency (lib/NodeUtils.js), not in Angular's source code. TuxCare's own patch documentation explicitly states: 'DEPENDENCY fix, NOT Angular source' and 'domino is external/runtime (not bundled)'. Angular's code only imports and calls domino's API but does not contain domino's..."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.1.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f236ea77-574a-530c-8ae4-bbfb5e4d5a64",
      "id": "CVE-2026-50557",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50557 is fixed in version 17.1.0-tuxcare.3 of @angular/animations."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.1.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6ba91b4-6392-5d9a-8b17-1b577bebf3c8",
      "id": "CVE-2026-52725",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-52725 is fixed in version 17.1.0-tuxcare.3 of @angular/animations."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.1.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8cbd02e1-6304-5732-a439-7a911ccf784f",
      "id": "CVE-2026-54264",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54264 is fixed in version 17.1.0-tuxcare.3 of @angular/animations."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.1.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5bb0894-569d-5834-b8b8-2b6f793b3fe3",
      "id": "CVE-2026-54265",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-54265 does not affect version 17.1.0-tuxcare.3 of @angular/animations. not_affected \u2014 Angular v17.1.0 does not have the TwoWayProperty IR operation that is the subject of CVE-2026-54265. Two-way bindings are desugared into separate property and event bindings before template pipeline processing, with the property half using the same parsePropertyBinding() code path as one-way property bindings, which are properly sanitized."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.1.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7af1263a-471c-582b-a0a0-cd0a95e2c69e",
      "id": "CVE-2026-54266",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54266 is fixed in version 17.1.0-tuxcare.3 of @angular/animations."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.1.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6ecfcec-0674-5b16-9086-6e8557263eea",
      "id": "CVE-2026-54267",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54267 is fixed in version 17.1.0-tuxcare.3 of @angular/animations."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.1.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:993baaf0-3573-5fd8-a427-ecb1429033bd",
      "id": "CVE-2026-54268",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54268 is fixed in version 17.1.0-tuxcare.3 of @angular/animations."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/animations@17.1.0-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/animations@17.1.0-tuxcare.3"
    }
  ]
}