{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e8d691a9-f843-5a48-9886-92e599b6b3ed", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/elements", "purl": "pkg:npm/%40angular/elements@16.2.11-tuxcare.3", "type": "library", "bom-ref": "pkg:npm/%40angular/elements@16.2.11-tuxcare.3", "version": "16.2.11-tuxcare.3", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/elements@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:191f1ef4-21d4-5960-bacd-8ff67449662a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59052 affects version 16.2.11-tuxcare.3 of @angular/elements." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/elements@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:72e73b77-0a6a-5a87-a4ca-ae41ddf7fc56", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 16.2.11-tuxcare.3 of @angular/elements." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/elements@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:9250af22-8197-585e-a684-342f547a4acf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 16.2.11-tuxcare.3 of @angular/elements." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/elements@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:b55d68d1-1b6f-506c-be0e-bccf2e838c0f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 16.2.11-tuxcare.3 of @angular/elements." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/elements@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:09108530-0c73-5924-9c65-11fa9a0f6d01", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 16.2.11-tuxcare.3 of @angular/elements." } }, { "id": "CVE-2026-41423", "affects": [ { "ref": "pkg:npm/%40angular/elements@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:e7e3c1f7-80f8-5645-894a-3d89cf9a2c14", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 16.2.11-tuxcare.3 of @angular/elements." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/elements@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:33302d6e-dfb5-5210-add8-1063b42b10a8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 16.2.11-tuxcare.3 of @angular/elements." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/elements@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:323e9ec1-3df8-5ea3-a99e-6fc9840a310a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 16.2.11-tuxcare.3 of @angular/elements." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/elements@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:93fc9ad7-d434-5886-bfdc-83eac1ba6183", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 16.2.11-tuxcare.3 of @angular/elements." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/elements@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:60ff7d9b-3caa-5e88-bc7b-e70070a596d2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 16.2.11-tuxcare.3 of @angular/elements." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/elements@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:57bb1aa8-1120-5354-9c74-cee46c7adb14", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 16.2.11-tuxcare.3 of @angular/elements." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/elements@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:59b22317-de76-5dfe-8324-42d97abb0e8c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 16.2.11-tuxcare.3 of @angular/elements." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/elements@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:8a8c52c7-51e2-500e-99ad-43f45c44cb3d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 16.2.11-tuxcare.3 of @angular/elements." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/elements@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:dcd75dc4-6a3c-5d73-b67b-da9e268bb4ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 16.2.11-tuxcare.3 of @angular/elements." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/elements@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:38bbc940-a285-5ff1-a715-246e8f27401c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 16.2.11-tuxcare.3 of @angular/elements." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/elements@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:d3c2d5cf-1828-5469-aa8e-bec4bf9e9fdc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 16.2.11-tuxcare.3 of @angular/elements." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/elements@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:b38d4ccc-82c5-5126-b022-c2f1adf415d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 16.2.11-tuxcare.3 of @angular/elements." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/elements@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:85a0f960-87f5-5cdd-8b7f-f76c144e66d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 16.2.11-tuxcare.3 of @angular/elements." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/elements@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:3f1869fa-183a-5aef-941b-e072b5ad1db8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 16.2.11-tuxcare.3 of @angular/elements." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/elements@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:d7a38f08-67c1-5258-99f2-c46ae6923113", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 16.2.11-tuxcare.3 of @angular/elements." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/elements@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:eb5c48e1-4495-5cee-b25a-5640568699f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 16.2.11-tuxcare.3 of @angular/elements." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/elements@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:fdd4ad16-e6fe-54bf-8ea0-32d0eeb8e730", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 16.2.11-tuxcare.3 of @angular/elements." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/elements@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:0e190277-15b8-5f1d-8cb9-8bc1985f994b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 16.2.11-tuxcare.3 of @angular/elements." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/elements@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:1f936549-1818-54a5-9565-b9a4e6d083fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 16.2.11-tuxcare.3 of @angular/elements." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/elements@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:d237ecfc-f1c9-5439-bd38-abc64fd6e915", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 16.2.11-tuxcare.3 of @angular/elements. not_affected \u2014 Angular 16.2.11-tuxcare.2 is NOT affected by CVE-2026-88056. The vulnerability requires WHATWG URL validation combined with String.prototype.trim() on URLs during SSR, creating a discrepancy that enables SSRF. While the target uses WHATWG URL parsing (backported in commit c03fbfd7cc for CVE-2026-50168), it does NOT call String.prototype.trim() on URLs. The attack chain is broken at the trim() s...", "justification": "code_not_reachable" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/elements@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:6797a2ca-a78a-58d6-b91f-dcd3e5599795", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 16.2.11-tuxcare.3 of @angular/elements." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/elements@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:168db096-daa4-55cc-8b37-dc7dd2eecbc8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 16.2.11-tuxcare.3 of @angular/elements." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/elements@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:16ed4de5-9026-57f8-9f84-6cef88e15330", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 16.2.11-tuxcare.3 of @angular/elements." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/elements@16.2.11-tuxcare.3" } ] }