{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:ec927cbf-1b36-5af8-8920-3f8c7886b18d", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/animations", "purl": "pkg:npm/%40angular/animations@17.3.12-tuxcare.7", "type": "library", "bom-ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.7", "version": "17.3.12-tuxcare.7", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.7" } ], "bom-ref": "urn:uuid:6efddbb2-0e81-5b06-b84d-6d78c9b64975", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 17.3.12-tuxcare.7 of @angular/animations." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.7" } ], "bom-ref": "urn:uuid:53ff6e39-2a74-5359-b038-e2f33b567603", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 17.3.12-tuxcare.7 of @angular/animations." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.7" } ], "bom-ref": "urn:uuid:5d521912-fa2a-516f-90fc-90f4f62b0174", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 17.3.12-tuxcare.7 of @angular/animations." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.7" } ], "bom-ref": "urn:uuid:6b691543-571f-544f-96c0-9c81d5a52c26", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 17.3.12-tuxcare.7 of @angular/animations." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.7" } ], "bom-ref": "urn:uuid:08510c4d-0f40-58bb-a058-a7fc5d896e42", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27970 affects version 17.3.12-tuxcare.7 of @angular/animations, and is fixed in 17.3.12-tuxcare.9." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.7" } ], "bom-ref": "urn:uuid:754a586a-e083-5ede-9e89-978503c0a4c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 17.3.12-tuxcare.7 of @angular/animations." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.7" } ], "bom-ref": "urn:uuid:cb15de03-5315-5d0b-a357-2d4c3b803255", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46417 affects version 17.3.12-tuxcare.7 of @angular/animations, and is fixed in 17.3.12-tuxcare.12." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.7" } ], "bom-ref": "urn:uuid:438cce07-9daa-500c-9782-a5f352488da3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50168 affects version 17.3.12-tuxcare.7 of @angular/animations, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.7" } ], "bom-ref": "urn:uuid:8f6940ac-2ea1-5507-a37f-114502fc4ddd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50169 affects version 17.3.12-tuxcare.7 of @angular/animations, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.7" } ], "bom-ref": "urn:uuid:86e5a049-30fd-5e11-aba2-d6c8d7eed3ca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50170 affects version 17.3.12-tuxcare.7 of @angular/animations, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.7" } ], "bom-ref": "urn:uuid:230011bb-6f61-5416-91fe-360d76ffabed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50171 affects version 17.3.12-tuxcare.7 of @angular/animations, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.7" } ], "bom-ref": "urn:uuid:8518be44-3a8c-5ef5-9b6f-cf1e3fb612ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50184 affects version 17.3.12-tuxcare.7 of @angular/animations, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.7" } ], "bom-ref": "urn:uuid:ca54d754-3d4b-5c51-bfad-9f83818ada17", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50555 affects version 17.3.12-tuxcare.7 of @angular/animations, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.7" } ], "bom-ref": "urn:uuid:05e09ed0-cbbe-5d66-a920-e92098866ed0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50556 affects version 17.3.12-tuxcare.7 of @angular/animations, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.7" } ], "bom-ref": "urn:uuid:f0a7bbc8-14e0-5a84-a6ce-3b07aa358574", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50557 affects version 17.3.12-tuxcare.7 of @angular/animations, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.7" } ], "bom-ref": "urn:uuid:7e97e5d9-7aac-5e11-a42f-f7d069636eaf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-52725 affects version 17.3.12-tuxcare.7 of @angular/animations, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.7" } ], "bom-ref": "urn:uuid:427c9d64-2527-54d4-9a92-cd8c83a259c8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54264 affects version 17.3.12-tuxcare.7 of @angular/animations, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.7" } ], "bom-ref": "urn:uuid:2bcaa71b-0d7f-593c-b108-70d76e076416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54265 affects version 17.3.12-tuxcare.7 of @angular/animations, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.7" } ], "bom-ref": "urn:uuid:db0cbb58-6508-5078-80b8-215e115a1b16", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54266 affects version 17.3.12-tuxcare.7 of @angular/animations, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.7" } ], "bom-ref": "urn:uuid:1885add5-b50e-5752-bd3d-296fe48619f7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54267 affects version 17.3.12-tuxcare.7 of @angular/animations, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.7" } ], "bom-ref": "urn:uuid:f33fb6be-07b0-58ef-bb0c-82206ce8b4b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54268 affects version 17.3.12-tuxcare.7 of @angular/animations, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.7" } ], "bom-ref": "urn:uuid:19992114-ed18-5ae1-84da-1f8a485da892", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68945 affects version 17.3.12-tuxcare.7 of @angular/animations, and is fixed in 17.3.12-tuxcare.14." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.7" } ], "bom-ref": "urn:uuid:43a6312a-50b5-5f6c-9890-9491c0e4cf4b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 17.3.12-tuxcare.7 of @angular/animations, and is fixed in 17.3.12-tuxcare.14." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.7" } ], "bom-ref": "urn:uuid:68ffa4f6-6206-5b63-b61c-a26f1a556ad4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 17.3.12-tuxcare.7 of @angular/animations, and is fixed in 17.3.12-tuxcare.14." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.7" } ], "bom-ref": "urn:uuid:a5c4b79d-371f-58ac-b444-3566d552664e", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 17.3.12-tuxcare.7 of @angular/animations. not_affected \u2014 Version 17.3.12 is not affected by CVE-2026-88056. The vulnerability involves String.prototype.trim() being applied during URL resolution in Angular's platform-server, converting validated same-origin URLs with Unicode whitespace into cross-origin protocol-relative URLs, leading to SSRF. This vulnerable code pattern was introduced in newer Angular versions (v20+) and does not exist in version 1...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.7" } ], "bom-ref": "urn:uuid:32ee2949-0626-531b-85d0-fad832fd4ed6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 17.3.12-tuxcare.7 of @angular/animations." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.7" } ], "bom-ref": "urn:uuid:600e6077-45bd-5a30-aebb-d7a990de2b0e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 17.3.12-tuxcare.7 of @angular/animations." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.7" } ], "bom-ref": "urn:uuid:84202472-f332-5fe3-b115-7fba39e3b1f3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 17.3.12-tuxcare.7 of @angular/animations." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.7" } ] }