{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e7793dfc-f1e1-51ce-8772-f0b77c76d732", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/bazel", "purl": "pkg:npm/%40angular/bazel@16.2.12-tuxcare.13", "type": "library", "bom-ref": "pkg:npm/%40angular/bazel@16.2.12-tuxcare.13", "version": "16.2.12-tuxcare.13", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:a76f942a-7137-5c7a-8148-c0d7ffce7033", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 16.2.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:1ea0201f-09dc-544a-94f6-06bf46de03b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 16.2.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:5136afd1-6234-5a23-b438-6630c7b70840", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 16.2.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:d31ecc93-40af-5909-80e6-8f9a76458724", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 16.2.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:de23192d-65f3-54c5-b360-255a94656763", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 16.2.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:b5a42dd5-1265-5f91-8c37-91901ffe0ebf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 16.2.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:6561eee0-b7ae-57a5-8ffb-eb8ba10e20ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 16.2.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:e25b63d3-d23a-50b7-87c2-cfe2d071bab3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 16.2.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:a15a1dd0-bf98-53d6-9802-d88b26e687dc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 16.2.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:ee1c7072-a974-501c-a16b-52340006953a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 16.2.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:0dd29d8e-e4f2-50bf-89b9-24943e8bd4aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 16.2.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:a3dbad8f-fe74-5a93-9654-2be635b45c59", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 16.2.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:e5931a3c-807e-57fb-a18e-4986751314bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 16.2.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:c3b60583-7eb4-5dae-9396-e3d5089c82ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 16.2.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:faad117c-7894-5f70-b1ab-5b1481bc93c6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 16.2.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:9a2856ac-b21e-5814-ae38-db14cd407650", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 16.2.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:7f7046da-c74b-58b3-a822-bec2d83fc2e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 16.2.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:b967633d-e878-518c-ab3e-895ead307714", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 16.2.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:055d56c8-ea49-5830-8c19-e1658b3c3d57", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 16.2.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:2c74c49b-cf8f-59cf-841d-5b36b0f2cb0b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 16.2.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:394c95e5-ccd4-5456-b42e-f609fa5bd4f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 16.2.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:19911f7d-a0f0-5cfa-bd81-e8604f90b219", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 16.2.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:1cbde274-56d7-5882-8971-041f236f9afd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 16.2.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:07703c7a-8104-5ab3-a18a-94db127e78db", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 16.2.12-tuxcare.13 of @angular/bazel. not_affected \u2014 CVE-2026-88056 affects Angular versions 20.3.x, 21.2.x, and 22.x where a refactored URL parsing utility added String.prototype.trim() that strips Unicode whitespace, enabling SSRF bypasses. The target (Angular 16.2.12-tuxcare.12) is based on Angular 16.2.x architecture, which predates the vulnerable code pattern entirely. TuxCare created url.ts fresh on June 24, 2026 for CVE-2026-50168, modelin...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:0eb1186d-298e-58ff-8bc0-7f2a8daa3be5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 16.2.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:cf71c131-7d18-5923-b564-1efe43e91ec4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 16.2.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/bazel@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:76b08252-cd73-57d8-a317-6491b8e9f485", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 16.2.12-tuxcare.13 of @angular/bazel." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/bazel@16.2.12-tuxcare.13" } ] }