{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:2926b52b-a0c7-58f8-8cd7-87247c7a40a1", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/animations", "purl": "pkg:npm/%40angular/animations@16.2.11-tuxcare.3", "type": "library", "bom-ref": "pkg:npm/%40angular/animations@16.2.11-tuxcare.3", "version": "16.2.11-tuxcare.3", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:f55ae7b0-8ba6-5f27-ab2e-c66fc3550bc9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59052 affects version 16.2.11-tuxcare.3 of @angular/animations." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:96976e98-937d-5a7d-b1fd-ae2d348c687c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 16.2.11-tuxcare.3 of @angular/animations." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:1c79c915-6421-5cb3-844a-9e2768ae56f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 16.2.11-tuxcare.3 of @angular/animations." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:262f352d-418f-579b-8779-c0d2e1903bec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 16.2.11-tuxcare.3 of @angular/animations." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:3dc68eda-ff51-5716-a567-f327539b1e31", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 16.2.11-tuxcare.3 of @angular/animations." } }, { "id": "CVE-2026-41423", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:643426a7-a929-56db-a125-714a94752b18", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 16.2.11-tuxcare.3 of @angular/animations." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:8f5d8a09-393a-5a6b-b0e3-808259da5be3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 16.2.11-tuxcare.3 of @angular/animations." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:b232937c-29d8-561e-9d6b-1366e2cb24b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 16.2.11-tuxcare.3 of @angular/animations." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:3a2c37bc-19da-5d26-85c3-07fed6902b9d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 16.2.11-tuxcare.3 of @angular/animations." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:af523a88-e41e-5ea3-8521-9200a894a60b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 16.2.11-tuxcare.3 of @angular/animations." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:7e8eb196-1e2f-511f-9dbf-be680f37e9ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 16.2.11-tuxcare.3 of @angular/animations." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:65f69ca0-5fa1-563b-bab0-2c10f92a4015", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 16.2.11-tuxcare.3 of @angular/animations." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:25b25623-bbbd-5a2e-b200-ca4ff777bb3a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 16.2.11-tuxcare.3 of @angular/animations." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:26b43216-701e-5918-8797-128e97e74bac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 16.2.11-tuxcare.3 of @angular/animations." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:3bd3b692-779d-5cfe-ae33-29bc93f05e36", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 16.2.11-tuxcare.3 of @angular/animations." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:d7e15382-f5c0-58ba-b079-c31f0c888b1b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 16.2.11-tuxcare.3 of @angular/animations." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:d80576b1-a44e-5766-af1f-c7eff7070fe9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 16.2.11-tuxcare.3 of @angular/animations." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:676d4fef-afd7-510d-aa72-32163e708c99", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 16.2.11-tuxcare.3 of @angular/animations." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:75354628-f265-5d1d-852c-6f27bccb8b61", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 16.2.11-tuxcare.3 of @angular/animations." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:f8838ce9-077d-5f68-bd7f-ff7321e1badf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 16.2.11-tuxcare.3 of @angular/animations." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:470912fc-c793-583e-a509-708d859e84cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 16.2.11-tuxcare.3 of @angular/animations." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:7d10fc51-203e-5734-8f1e-b109c0cd5e97", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 16.2.11-tuxcare.3 of @angular/animations." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:e24a0820-526e-58ef-b451-2676f74d6c93", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 16.2.11-tuxcare.3 of @angular/animations." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:9f26283b-440b-52f6-bcae-bb164d242517", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 16.2.11-tuxcare.3 of @angular/animations." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:d849f197-f364-5ae3-b672-daebefea8ce0", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 16.2.11-tuxcare.3 of @angular/animations. not_affected \u2014 Angular 16.2.11-tuxcare.2 is NOT affected by CVE-2026-88056. The vulnerability requires WHATWG URL validation combined with String.prototype.trim() on URLs during SSR, creating a discrepancy that enables SSRF. While the target uses WHATWG URL parsing (backported in commit c03fbfd7cc for CVE-2026-50168), it does NOT call String.prototype.trim() on URLs. The attack chain is broken at the trim() s...", "justification": "code_not_reachable" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:0919e62b-bc85-56f0-a118-4758f73d85e9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 16.2.11-tuxcare.3 of @angular/animations." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:72087501-e28b-5bde-bcd3-328be8747929", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 16.2.11-tuxcare.3 of @angular/animations." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:5feb621e-76fc-533d-9d8b-f84b51bd779d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 16.2.11-tuxcare.3 of @angular/animations." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/animations@16.2.11-tuxcare.3" } ] }