{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:0baabda2-51bc-57ac-aee1-7a55f55aad17", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/compiler", "purl": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.13", "type": "library", "bom-ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.13", "version": "17.3.12-tuxcare.13", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:921ca778-29b4-56f8-8257-8ddb07909271", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:3d989633-2567-5242-aa11-4eca40e4a632", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:e26993df-9395-5ddc-825f-701f8dd0b002", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:14f23d97-8708-5d3c-b072-c0bd2afcecee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:5295a275-5e9f-5841-8756-c05e35489d9d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:0fc3f1d2-e2bb-5e6e-8715-5194826d79c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:f29af58c-111d-57e2-a0b9-71ed4b9ca3c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:050d7885-fb7d-5ff8-ad54-e6b62bcedd16", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:6829404e-be28-5583-bc0a-8d536a39cfb9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:6eb2db83-50da-55b2-8df9-d345e0d720c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:73616bd2-37b9-5843-8ec8-3f2ec2eef994", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:2cdc3a35-350f-5876-b91b-62e7c6d4c538", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:9419e21b-a22b-5120-bb2a-b78ec16abe8c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:c1862659-9fb4-598b-b996-a852470200ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:d5fcb00d-836d-5a48-b368-1632ad4f4c3d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:5b02c0c1-c8b9-59e4-b1ff-3be377d12566", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:a43eea0a-5730-5f3f-8fa0-471a17c31069", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:29d2cd2d-d361-57b6-8415-c408d13bd044", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:b2eb52fd-be01-59c7-8369-5156ba143c3b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:6b78cdb4-c434-5c79-9ed0-27da6345e5a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:76b4b3e5-52e8-56e8-82f0-c5499091b0ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:17225832-8eef-5765-a1a9-ab5d36039d33", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68945 affects version 17.3.12-tuxcare.13 of @angular/compiler, and is fixed in 17.3.12-tuxcare.14." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:97cc1cfc-1c31-577e-b42e-13fa9a11f745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 17.3.12-tuxcare.13 of @angular/compiler, and is fixed in 17.3.12-tuxcare.14." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:0bd65532-ff9e-5b86-9238-dfbe6e2a9c48", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 17.3.12-tuxcare.13 of @angular/compiler, and is fixed in 17.3.12-tuxcare.14." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:cc8d5353-b86a-5581-b611-5e7f789a8db6", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 17.3.12-tuxcare.13 of @angular/compiler. not_affected \u2014 Version 17.3.12 is not affected by CVE-2026-88056. The vulnerability involves String.prototype.trim() being applied during URL resolution in Angular's platform-server, converting validated same-origin URLs with Unicode whitespace into cross-origin protocol-relative URLs, leading to SSRF. This vulnerable code pattern was introduced in newer Angular versions (v20+) and does not exist in version 1...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:9a0e25e4-33e9-5838-9bed-853b9f2e6fd2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 17.3.12-tuxcare.13 of @angular/compiler." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:ac65ab2e-f5a9-56a8-94b6-29ac9d079421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 17.3.12-tuxcare.13 of @angular/compiler." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:b1de567c-9153-58d1-b8b3-cb4d02a5ddc8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 17.3.12-tuxcare.13 of @angular/compiler." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/compiler@17.3.12-tuxcare.13" } ] }