{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:6e63580f-f285-5108-932e-9d0a91fd7df1", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/bazel", "purl": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.14", "type": "library", "bom-ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.14", "version": "18.2.14-tuxcare.14", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:71ad7035-2f14-5ba9-a54f-1acfe5f52730", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.14 of @angular/bazel." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:592b8755-d351-579d-b593-f645e7a7463e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.14 of @angular/bazel." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:34ff7724-ffd9-5966-9b34-f9de27bd97e5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.14 of @angular/bazel." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:6abe7552-2687-514e-8506-ec1e87db8265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.14 of @angular/bazel." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:bef5feee-2389-5718-a48d-f88d20f09de9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.14 of @angular/bazel." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:257a2096-042a-5435-828c-bd6587cdbee1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 18.2.14-tuxcare.14 of @angular/bazel." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:7da77118-1c10-5da4-82d3-226430ed4720", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 18.2.14-tuxcare.14 of @angular/bazel." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:6bf5957f-c4fd-530a-aa11-3ccf6dec1d93", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 18.2.14-tuxcare.14 of @angular/bazel." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:6254330a-3e62-5809-963b-7d608a9dc4db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 18.2.14-tuxcare.14 of @angular/bazel." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:04793069-a57b-5e47-a6de-39214d4ad88f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 18.2.14-tuxcare.14 of @angular/bazel." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:309e6f03-2287-57be-b118-98c170db37b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 18.2.14-tuxcare.14 of @angular/bazel." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:dee7f00e-b26b-5dda-baa5-2c7cb29d66d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 18.2.14-tuxcare.14 of @angular/bazel." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:93c0b784-74f9-5402-a528-40996dd642da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 18.2.14-tuxcare.14 of @angular/bazel." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:18dc3c04-55fb-5dbf-ace9-0709cf22c41f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 18.2.14-tuxcare.14 of @angular/bazel." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:4be67036-f6f7-51f7-b658-f99ca5539bc7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 18.2.14-tuxcare.14 of @angular/bazel." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:cb1f135d-50de-5691-a8d6-712b4c835498", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 18.2.14-tuxcare.14 of @angular/bazel." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:6d42a304-7546-571d-82c9-1edf48cf863e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 18.2.14-tuxcare.14 of @angular/bazel." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:01fa6dd8-b090-55d1-be16-45b6673e20c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 18.2.14-tuxcare.14 of @angular/bazel." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:1cc618f0-133e-53a9-969d-fa5eadcc9bfd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 18.2.14-tuxcare.14 of @angular/bazel." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:c82a4a41-37fb-5555-a441-55463f4f4cf8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 18.2.14-tuxcare.14 of @angular/bazel." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:5261b6e9-7c24-5ff7-89bf-cc8218515601", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 18.2.14-tuxcare.14 of @angular/bazel." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:1c6f09bf-cda5-57fb-b43f-ba5a37a3e513", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 18.2.14-tuxcare.14 of @angular/bazel." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:1e3939ae-3ed4-5553-a918-bce0b58e32ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 18.2.14-tuxcare.14 of @angular/bazel." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:1d51ced3-bc5d-5c80-a03a-846aca43f7d1", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.14 of @angular/bazel. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:cb52b032-abff-565e-ab80-5f9766cd3eb6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.14 of @angular/bazel." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:96b126c1-77e6-5c62-b659-0464480506ec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.14 of @angular/bazel." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:26f817a5-c18f-5f05-a333-0b9a00684eef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.14 of @angular/bazel." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.14" } ] }