{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:7781a12f-040b-5072-b7af-81fa5c60dab3", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/language-service", "purl": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.14", "type": "library", "bom-ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.14", "version": "18.2.14-tuxcare.14", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:d100c1fa-2184-5303-999d-d3e95bff411b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.14 of @angular/language-service." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:7de9498c-4329-54de-8d66-3aab9131dc1c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.14 of @angular/language-service." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:8dcd3978-a191-58cb-8db7-57cd0fd8d50b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.14 of @angular/language-service." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:d0b7d5ee-b34f-5fc8-b5ce-c372f2b36e5e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.14 of @angular/language-service." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:6cc579e0-7cd8-5dd6-90a5-67634fb2f794", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.14 of @angular/language-service." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:9b3692ee-d642-5f35-a2b4-86ca89f27409", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 18.2.14-tuxcare.14 of @angular/language-service." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:897aaf9f-f1a9-56b8-81cc-1ae2689cd28a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 18.2.14-tuxcare.14 of @angular/language-service." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:dc3d3084-3922-5a09-a326-fbb438c28bdb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 18.2.14-tuxcare.14 of @angular/language-service." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:7a77e233-2df0-5ebe-ad12-208c3ca87d10", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 18.2.14-tuxcare.14 of @angular/language-service." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:021f37ea-4c87-5039-ab5a-bb66d77fdc15", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 18.2.14-tuxcare.14 of @angular/language-service." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:36dc12c6-0b81-52e9-8b91-147791ff2250", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 18.2.14-tuxcare.14 of @angular/language-service." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:6cb85f81-6729-54c8-b005-cabde9c0a34e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 18.2.14-tuxcare.14 of @angular/language-service." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:0503b3f3-bc32-50a1-92eb-79ad1616c144", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 18.2.14-tuxcare.14 of @angular/language-service." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:9501af54-a42f-5239-ab54-2159a4381ab4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 18.2.14-tuxcare.14 of @angular/language-service." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:455370cf-5488-5c70-8cae-74c23a62cbec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 18.2.14-tuxcare.14 of @angular/language-service." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:e4176117-110f-5001-b76e-854a23362165", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 18.2.14-tuxcare.14 of @angular/language-service." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:40fe194f-a6e9-5a33-9672-732895c69826", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 18.2.14-tuxcare.14 of @angular/language-service." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:e47b0001-2425-5fbf-803f-c644a6aa52ed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 18.2.14-tuxcare.14 of @angular/language-service." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:9e1c3b70-3916-5542-99f7-309048bb02b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 18.2.14-tuxcare.14 of @angular/language-service." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:d8a1864b-f024-5a7f-bd51-7ba987998623", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 18.2.14-tuxcare.14 of @angular/language-service." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:e976b3ee-62c7-51f6-88bf-4e9103523d62", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 18.2.14-tuxcare.14 of @angular/language-service." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:59c113d4-aa26-5fec-8d85-eec64f00c842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 18.2.14-tuxcare.14 of @angular/language-service." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:b74c6127-7e2a-5f2a-9798-77a1d46804dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 18.2.14-tuxcare.14 of @angular/language-service." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:c235446a-4579-5da7-bbd1-32928e996775", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.14 of @angular/language-service. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:d487a90e-ca10-5ceb-b247-705598ccf119", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.14 of @angular/language-service." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:e2c7a758-60ee-500f-b8f0-a0386630ac60", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.14 of @angular/language-service." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.14" } ], "bom-ref": "urn:uuid:7efa98c2-6db5-5d08-aa52-b4969fb38171", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.14 of @angular/language-service." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.14" } ] }