{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:39f18e5a-18e3-5247-b945-28d8ad199819",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:npm/%40angular/upgrade@20.3.12",
      "type": "library",
      "name": "@angular/upgrade",
      "version": "20.3.12",
      "purl": "pkg:npm/%40angular/upgrade@20.3.12"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:03665991-4bb8-55a3-935a-a0f2b3c5831e",
      "id": "CVE-2025-66035",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66035 affects version 20.3.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@20.3.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69f44424-de18-5747-bbec-66c211ebdf5d",
      "id": "CVE-2025-66412",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66412 affects version 20.3.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@20.3.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4faefa53-813c-5a67-bdbe-11dd8ec375de",
      "id": "CVE-2026-22610",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22610 affects version 20.3.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@20.3.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a15a0745-f87c-5c34-b094-8c10f652bece",
      "id": "CVE-2026-27970",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-27970 affects version 20.3.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@20.3.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a6d1899-6281-5609-8cc1-18436e8b144a",
      "id": "CVE-2026-32635",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32635 affects version 20.3.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@20.3.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7097a182-9d4b-59f5-996a-77d8d5cf87d7",
      "id": "CVE-2026-41423",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41423 affects version 20.3.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@20.3.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a54f4ba9-1298-5c10-a5e8-3eafcfb2caf8",
      "id": "CVE-2026-46417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46417 affects version 20.3.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@20.3.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53c043ac-7241-5379-8e72-ac059ac9e3a3",
      "id": "CVE-2026-50168",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50168 affects version 20.3.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@20.3.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b1ab05c-ba1e-5048-b90a-7d4793275a66",
      "id": "CVE-2026-50169",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50169 affects version 20.3.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@20.3.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:149f6361-6d64-59af-82ca-9a2057a67501",
      "id": "CVE-2026-50170",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50170 affects version 20.3.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@20.3.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9117ccb6-138a-593a-a210-48bc68dd2b46",
      "id": "CVE-2026-50171",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50171 affects version 20.3.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@20.3.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:17b8eaa4-a4ed-557e-8f81-2c01e4dfcdbc",
      "id": "CVE-2026-50184",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50184 affects version 20.3.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@20.3.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cbc7c54b-71c0-5d0f-b3ba-dd6f08b5281c",
      "id": "CVE-2026-50555",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50555 affects version 20.3.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@20.3.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09edaac3-bd77-576c-8696-ab31eb6ace13",
      "id": "CVE-2026-50556",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50556 affects version 20.3.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@20.3.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a81c254-fa9a-5e3e-a377-bd2ab38450f2",
      "id": "CVE-2026-50557",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50557 affects version 20.3.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@20.3.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f89e1781-cd45-5e4d-8474-4d70f4311a96",
      "id": "CVE-2026-52725",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-52725 affects version 20.3.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@20.3.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fff2ac9c-a7d2-5938-bedd-fa60e5d3f67c",
      "id": "CVE-2026-54264",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54264 affects version 20.3.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@20.3.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e694fba-6c98-5181-9534-1f2c88fd9e4a",
      "id": "CVE-2026-54265",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54265 affects version 20.3.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@20.3.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c66fd4b6-22e1-5ceb-a4ff-8590759a956d",
      "id": "CVE-2026-54266",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54266 affects version 20.3.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@20.3.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0c7d4d8-4f5f-5611-a2f2-92961e87df77",
      "id": "CVE-2026-54267",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54267 affects version 20.3.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@20.3.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:283dc543-c375-5b44-a90a-7bc071eefb7d",
      "id": "CVE-2026-54268",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54268 affects version 20.3.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@20.3.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a705b905-79bd-52e5-899c-34ecde76a62c",
      "id": "CVE-2026-68945",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-68945 affects version 20.3.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@20.3.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1a7a060-3062-5636-92a7-97c2ba822fec",
      "id": "CVE-2026-69149",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69149 affects version 20.3.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@20.3.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:99317d21-495e-5a97-9ca0-e8896254e210",
      "id": "CVE-2026-69151",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69151 affects version 20.3.12 of @angular/upgrade."
      },
      "affects": [
        {
          "ref": "pkg:npm/%40angular/upgrade@20.3.12"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/%40angular/upgrade@20.3.12"
    }
  ]
}