{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:86098434-f6a9-5ec4-990e-3ddf9cc7b3f6", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/forms", "purl": "pkg:npm/%40angular/forms@12.2.17-tuxcare.10", "type": "library", "bom-ref": "pkg:npm/%40angular/forms@12.2.17-tuxcare.10", "version": "12.2.17-tuxcare.10", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/forms@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:c306bf57-c301-5fa1-a503-4715e51800c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 12.2.17-tuxcare.10 of @angular/forms." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/forms@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:177c6730-c698-5eb1-8b4c-8c79005843b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 12.2.17-tuxcare.10 of @angular/forms." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/forms@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:ba6860ff-01ac-5a64-aec0-c8640e75ae03", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 12.2.17-tuxcare.10 of @angular/forms." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/forms@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:ac8390cb-fece-5e7b-9420-13ab2f322343", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 12.2.17-tuxcare.10 of @angular/forms." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/forms@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:0f75d7c8-0745-5898-9840-386f69508a8c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 12.2.17-tuxcare.10 of @angular/forms." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/forms@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:e8e25031-cdb5-5f73-9f8e-1933751fcdb9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 12.2.17-tuxcare.10 of @angular/forms." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/forms@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:93b63c14-b61b-5f53-b7f8-6798021ad59c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 12.2.17-tuxcare.10 of @angular/forms." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/forms@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:e4592016-7f4e-5722-b597-02c40e731c73", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 12.2.17-tuxcare.10 of @angular/forms." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/forms@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:a4e43ffa-44d2-51b5-809a-22f7b038e240", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 12.2.17-tuxcare.10 of @angular/forms." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/forms@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:ea56ead1-b18b-51f7-8b88-6774e8a2ee24", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 12.2.17-tuxcare.10 of @angular/forms." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/forms@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:27e6eb87-ed69-59d9-a3dc-4cb1bfb6b70f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 12.2.17-tuxcare.10 of @angular/forms." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/forms@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:fd30c779-b3a0-5f74-bf00-6011485b39e5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 12.2.17-tuxcare.10 of @angular/forms." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/forms@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:2ec6e96e-b222-5d23-bb82-9a1dc0d1bd70", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 12.2.17-tuxcare.10 of @angular/forms." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/forms@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:8cc47bfa-5cac-5010-8fde-44b99d1484b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 12.2.17-tuxcare.10 of @angular/forms." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/forms@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:ff7819a3-932f-5f87-a955-607bfb56bfa4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 12.2.17-tuxcare.10 of @angular/forms." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/forms@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:b1224984-94a7-5262-a619-c31f031732bd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 12.2.17-tuxcare.10 of @angular/forms." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/forms@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:c0afe7f4-1f59-5b24-8fd4-f301394839e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 12.2.17-tuxcare.10 of @angular/forms." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/forms@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:7818d1bd-120a-5f17-adff-91dc1f297a13", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 12.2.17-tuxcare.10 of @angular/forms." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/forms@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:2e1c52b0-db1c-5f9a-8bc0-56dc76cd66e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 12.2.17-tuxcare.10 of @angular/forms." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/forms@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:7c2da194-6481-5acf-bdec-bf5c67254e68", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 12.2.17-tuxcare.10 of @angular/forms. not_affected \u2014 Angular 12.2.17 does not contain the HttpTransferCache feature affected by CVE-2026-68945. HttpTransferCache, which caches HTTP requests during Server-Side Rendering (SSR), was first introduced in Angular 16.0.0\u2014approximately 4 major versions after the target version. The vulnerability concerns cache-key collision when repeated HTTP parameters are serialized, but since the entire HttpTransferCa...", "justification": "code_not_present" } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/forms@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:4cb4dfe5-912a-51c0-834b-4e7f6acc83d4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 12.2.17-tuxcare.10 of @angular/forms." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/forms@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:27ba50f2-8c4a-5185-b8e1-61d4383c21aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 12.2.17-tuxcare.10 of @angular/forms." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/forms@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:299a52c2-0fda-53d1-8cbe-1477e008d2a2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88056 affects version 12.2.17-tuxcare.10 of @angular/forms." } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/forms@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:eef39e18-8f62-5130-8d10-006642ae9d2c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 12.2.17-tuxcare.10 of @angular/forms." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/forms@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:64cb5164-fbdd-5c20-89e4-6e612efae5ca", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 12.2.17-tuxcare.10 of @angular/forms. not_affected \u2014 Angular 12.2.17-tuxcare.9 is not affected by CVE-2026-88059. The vulnerability requires HttpTransferCache, withRequestsMadeViaParent(), and provideClientHydration() features which were introduced in Angular 16.0.0. This version uses the older module-based HttpClientModule system and lacks the entire SSR hydration transfer-cache infrastructure. The vulnerable code pattern described in the CVE do...", "justification": "code_not_present" } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/forms@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:b89b6a4e-7b29-500a-bfc5-05d5940dc8a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 12.2.17-tuxcare.10 of @angular/forms." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/forms@12.2.17-tuxcare.10" } ] }