{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a1c0a396-bec3-51d9-9c2e-2a6a029ab446", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/compiler-cli", "purl": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.14", "type": "library", "bom-ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.14", "version": "18.2.14-tuxcare.14", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:5e00c4da-ba12-52e1-951e-f66fd432b88e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler-cli." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:ffbdb58a-80a5-5c08-b10b-f4e289436d54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler-cli." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:6859694c-60c2-5762-94bd-632d80dbaab2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler-cli." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:d0e41ec4-dbc7-50cb-80ac-51a04ee1a505", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler-cli." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:bd41058f-6c36-542e-a917-7ed318bff550", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler-cli." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:f0240736-7416-5dd2-a6b4-d14cb889910c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler-cli." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:e1d05202-4621-5478-8bce-941b2f6250a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler-cli." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:695a049f-2de1-59ae-92cf-a592a6b45d1e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler-cli." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:33efc8dd-5bbc-5578-98b9-025503c55841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler-cli." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:89d25173-5189-552b-88ab-c41c53f3b857", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler-cli." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:f1165b76-9cf4-5419-a528-4d3495dcd4f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler-cli." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:a20b3cda-b0ea-54f9-b174-c5cf218f0a74", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler-cli." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:61d634c8-8912-5e5f-a616-10a8fcf9779c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler-cli." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:fb1bb350-fe77-5fd9-9d59-1b50d933f19d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler-cli." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:7e94b19a-b6d2-59b6-9600-ba6bb27db9bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler-cli." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:55563b78-8d5d-581a-9d4d-09e06bf5cc82", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler-cli." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:4a55dfc5-3e12-51f7-9e9f-b99e14b35ea8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler-cli." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:e9bb2dd4-7384-5f3f-96d9-97890cce4540", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler-cli." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:4d54f564-c032-58a5-b73c-c8a3b12f4d03", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler-cli." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:4e726483-ecc6-59ce-b3ba-4ed49e464511", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler-cli." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:76a0849d-d487-50e3-9e95-e5d9120884c6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler-cli." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:bf5615a2-505e-56a3-be2f-d80e1a5831ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler-cli." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:94751805-c3a7-5307-a4f5-270aff1a65c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 18.2.14-tuxcare.14 of @angular/compiler-cli." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:2ef8ccb8-67ff-542a-b513-5aaf6ba0a6fd", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.14 of @angular/compiler-cli. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:b62adae3-5896-5272-904e-830671ee6512", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.14 of @angular/compiler-cli." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:9e698d3b-b7bf-5f3d-944f-222d71e8626e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.14 of @angular/compiler-cli." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:0b0caeed-9d82-5206-8ef4-7537eb929a1f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.14 of @angular/compiler-cli." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.14" } ] }