{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:874a082f-3907-5359-b4f4-bee072fc506b", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/animations", "purl": "pkg:npm/%40angular/animations@18.2.14-tuxcare.5", "type": "library", "bom-ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.5", "version": "18.2.14-tuxcare.5", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.5" } ], "bom-ref": "urn:uuid:c4cf59ea-22b5-5be4-b97d-9e3d87614bb2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.5 of @angular/animations." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.5" } ], "bom-ref": "urn:uuid:19382b50-91e8-5a01-b0ee-6466abef9c88", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.5 of @angular/animations." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.5" } ], "bom-ref": "urn:uuid:d94f0a02-e88c-534b-8302-a26658d1f677", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.5 of @angular/animations." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.5" } ], "bom-ref": "urn:uuid:f1459568-9a65-5db8-aaa9-6b13c4fe22b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27970 affects version 18.2.14-tuxcare.5 of @angular/animations, and is fixed in 18.2.14-tuxcare.7." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.5" } ], "bom-ref": "urn:uuid:62c5de85-7578-5016-8ed2-0abda25a543d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.5 of @angular/animations." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.5" } ], "bom-ref": "urn:uuid:7a2fca8c-1fc7-5605-a338-efdfb334c14d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46417 affects version 18.2.14-tuxcare.5 of @angular/animations, and is fixed in 18.2.14-tuxcare.10." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.5" } ], "bom-ref": "urn:uuid:1452c9e4-295f-5f4c-8766-b0fe10eaa713", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50168 affects version 18.2.14-tuxcare.5 of @angular/animations, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.5" } ], "bom-ref": "urn:uuid:496de896-f29b-5cec-a961-4d342ceb81c5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50169 affects version 18.2.14-tuxcare.5 of @angular/animations, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.5" } ], "bom-ref": "urn:uuid:07a87ccd-633d-552d-a159-fe5e4c9d37af", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50170 affects version 18.2.14-tuxcare.5 of @angular/animations, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.5" } ], "bom-ref": "urn:uuid:2abf88dd-3e28-5e11-abec-5bed5302914d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50171 affects version 18.2.14-tuxcare.5 of @angular/animations, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.5" } ], "bom-ref": "urn:uuid:f8a72980-358e-5900-b385-093045828063", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50184 affects version 18.2.14-tuxcare.5 of @angular/animations, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.5" } ], "bom-ref": "urn:uuid:0434e555-e52e-5c0f-9996-f899ed4ba482", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50555 affects version 18.2.14-tuxcare.5 of @angular/animations, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.5" } ], "bom-ref": "urn:uuid:da9462a7-db4a-5f3c-8dfe-75ad52fa3b2e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50556 affects version 18.2.14-tuxcare.5 of @angular/animations, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.5" } ], "bom-ref": "urn:uuid:caa88adf-5a65-5782-b35d-bbbd3f7ec4de", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50557 affects version 18.2.14-tuxcare.5 of @angular/animations, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.5" } ], "bom-ref": "urn:uuid:93b509bb-1cc1-5281-b968-5ab0568a3cab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-52725 affects version 18.2.14-tuxcare.5 of @angular/animations, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.5" } ], "bom-ref": "urn:uuid:a986197a-254d-5c43-b6de-6c6a4407bbfc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54264 affects version 18.2.14-tuxcare.5 of @angular/animations, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.5" } ], "bom-ref": "urn:uuid:80bf1e41-d87a-5843-9729-113373bb2700", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54265 affects version 18.2.14-tuxcare.5 of @angular/animations, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.5" } ], "bom-ref": "urn:uuid:fb922436-5036-5b53-b28f-0a81cfe49ed0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54266 affects version 18.2.14-tuxcare.5 of @angular/animations, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.5" } ], "bom-ref": "urn:uuid:5d4d4602-7da5-513e-8157-af413086d6f7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54267 affects version 18.2.14-tuxcare.5 of @angular/animations, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.5" } ], "bom-ref": "urn:uuid:699fdbe6-0d48-56ea-ac34-c6b6328b5fa2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54268 affects version 18.2.14-tuxcare.5 of @angular/animations, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.5" } ], "bom-ref": "urn:uuid:03c8b1eb-d2c0-5375-8833-f2b669c7a7e6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68945 affects version 18.2.14-tuxcare.5 of @angular/animations, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.5" } ], "bom-ref": "urn:uuid:400a7dfe-7be5-5183-b35e-a6d4cef32db3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 18.2.14-tuxcare.5 of @angular/animations, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.5" } ], "bom-ref": "urn:uuid:dac73010-e137-5bad-a02d-52929f818a0c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 18.2.14-tuxcare.5 of @angular/animations, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.5" } ], "bom-ref": "urn:uuid:afbd31fb-2340-5ddb-bc3b-f0745e28e67f", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.5 of @angular/animations. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.5" } ], "bom-ref": "urn:uuid:a44772ac-032e-55b1-a46d-f2a4ea39af7e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.5 of @angular/animations." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.5" } ], "bom-ref": "urn:uuid:0d4a0488-89e6-51b8-b484-79f76b13cf28", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.5 of @angular/animations." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.5" } ], "bom-ref": "urn:uuid:077f8429-5443-5985-89fe-f47e1c96005d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.5 of @angular/animations." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.5" } ] }