{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e2286a15-ad00-5bec-9a76-354b125bade3",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/%40angular/localize@17.1.0-tuxcare.2",
      "type": "library",
      "name": "@angular/localize",
      "version": "17.1.0-tuxcare.2",
      "purl": "pkg:npm/%40angular/localize@17.1.0-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:aa08b347-95c6-5201-a107-cb42de3c24bb",
      "id": "CVE-2017-16009",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2017-16009 is fixed in version 17.1.0-tuxcare.2 of @angular/localize."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@17.1.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64b12fb2-e953-599e-94f3-462ea7a74eed",
      "id": "CVE-2025-59052",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-59052 is fixed in version 17.1.0-tuxcare.2 of @angular/localize."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@17.1.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a107ce2-ff8e-587b-ace4-853d7becc0b9",
      "id": "CVE-2025-66035",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66035 is fixed in version 17.1.0-tuxcare.2 of @angular/localize."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@17.1.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52c95cb7-fd5b-5709-96ce-ac09e579e9c2",
      "id": "CVE-2025-66412",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66412 affects version 17.1.0-tuxcare.2 of @angular/localize."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@17.1.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:192d6821-667e-544b-b70a-5e8072204202",
      "id": "CVE-2026-22610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22610 is fixed in version 17.1.0-tuxcare.2 of @angular/localize."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@17.1.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c85477eb-b70d-514c-8588-5a39caa29aab",
      "id": "CVE-2026-27970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27970 is fixed in version 17.1.0-tuxcare.2 of @angular/localize."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@17.1.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95050a12-1d27-534a-bb7f-52889cbd8a1e",
      "id": "CVE-2026-32635",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-32635 is fixed in version 17.1.0-tuxcare.2 of @angular/localize."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@17.1.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c5bda4b-f2a1-5ab2-b5cd-30f86d0f5731",
      "id": "CVE-2026-41423",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41423 is fixed in version 17.1.0-tuxcare.2 of @angular/localize."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@17.1.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f551319a-7f2b-56ad-9014-35fbb6cb93d5",
      "id": "CVE-2026-46417",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46417 is fixed in version 17.1.0-tuxcare.2 of @angular/localize."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@17.1.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:483ccc81-c6eb-5072-b0e1-7d7bf00c7325",
      "id": "CVE-2026-50168",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50168 is fixed in version 17.1.0-tuxcare.2 of @angular/localize."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@17.1.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fbbe48a7-1922-51b8-84db-462ab3d9b3a0",
      "id": "CVE-2026-50169",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50169 is fixed in version 17.1.0-tuxcare.2 of @angular/localize."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@17.1.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:187aaf1f-c630-5f24-8130-04f5cbdad506",
      "id": "CVE-2026-50170",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50170 is fixed in version 17.1.0-tuxcare.2 of @angular/localize."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@17.1.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5a60860-d94e-500e-be27-6bde1c96b245",
      "id": "CVE-2026-50171",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50171 is fixed in version 17.1.0-tuxcare.2 of @angular/localize."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@17.1.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c1e17bd-6491-57d0-9efa-cf1e87d8f090",
      "id": "CVE-2026-50184",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50184 is fixed in version 17.1.0-tuxcare.2 of @angular/localize."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@17.1.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6475f5a8-5593-5c5a-9234-9bd223427474",
      "id": "CVE-2026-50555",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50555 is fixed in version 17.1.0-tuxcare.2 of @angular/localize."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@17.1.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eed2094d-9fc7-5046-bd98-a57689c56c23",
      "id": "CVE-2026-50556",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-50556 does not affect version 17.1.0-tuxcare.2 of @angular/localize. not_affected \u2014 The Angular repository source code is NOT affected by CVE-2026-50556. The vulnerability exists in the external domino dependency (lib/NodeUtils.js), not in Angular's source code. TuxCare's own patch documentation explicitly states: 'DEPENDENCY fix, NOT Angular source' and 'domino is external/runtime (not bundled)'. Angular's code only imports and calls domino's API but does not contain domino's..."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@17.1.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3eb8ccc-2b30-50d2-9335-f389d307561e",
      "id": "CVE-2026-50557",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50557 is fixed in version 17.1.0-tuxcare.2 of @angular/localize."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@17.1.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d1e40f1-ed4d-5bb9-8831-c608e51510ec",
      "id": "CVE-2026-52725",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-52725 is fixed in version 17.1.0-tuxcare.2 of @angular/localize."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@17.1.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56b6fff6-c267-5433-8e34-d29996816b6d",
      "id": "CVE-2026-54264",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54264 is fixed in version 17.1.0-tuxcare.2 of @angular/localize."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@17.1.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2388f5bd-22a1-55a2-8cda-8945800306f1",
      "id": "CVE-2026-54265",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-54265 does not affect version 17.1.0-tuxcare.2 of @angular/localize. not_affected \u2014 Angular v17.1.0 does not have the TwoWayProperty IR operation that is the subject of CVE-2026-54265. Two-way bindings are desugared into separate property and event bindings before template pipeline processing, with the property half using the same parsePropertyBinding() code path as one-way property bindings, which are properly sanitized."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@17.1.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47039c2c-b7e9-584c-b9f6-181ab2cc5405",
      "id": "CVE-2026-54266",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54266 is fixed in version 17.1.0-tuxcare.2 of @angular/localize."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@17.1.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:568a0dc7-7f86-5e50-9acd-685d307b3197",
      "id": "CVE-2026-54267",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54267 is fixed in version 17.1.0-tuxcare.2 of @angular/localize."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@17.1.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4036b9f7-e397-55c4-9f13-8add3b75df16",
      "id": "CVE-2026-54268",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54268 is fixed in version 17.1.0-tuxcare.2 of @angular/localize."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/localize@17.1.0-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/localize@17.1.0-tuxcare.2"
    }
  ]
}