{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8b4049c9-732d-5262-bcd2-c47ec6623749", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/localize", "purl": "pkg:npm/%40angular/localize@12.2.17-tuxcare.10", "type": "library", "bom-ref": "pkg:npm/%40angular/localize@12.2.17-tuxcare.10", "version": "12.2.17-tuxcare.10", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/localize@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:48d74288-e145-5be9-9388-c9b7461e32a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 12.2.17-tuxcare.10 of @angular/localize." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/localize@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:d3981bc1-3028-5c25-ad92-aebeba552788", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 12.2.17-tuxcare.10 of @angular/localize." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/localize@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:f7ead647-0a7e-59de-916c-7a4d39e5d4d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 12.2.17-tuxcare.10 of @angular/localize." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/localize@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:d479a625-c747-5e3d-ad3b-8be470e1d493", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 12.2.17-tuxcare.10 of @angular/localize." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/localize@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:5b984d25-d1bc-5826-8f8a-ad4d2dc6c1e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 12.2.17-tuxcare.10 of @angular/localize." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/localize@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:3592e21e-84c8-5742-92a6-f38b01add3ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 12.2.17-tuxcare.10 of @angular/localize." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/localize@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:b1c21f83-816b-5933-a0b1-f40d3f622d86", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 12.2.17-tuxcare.10 of @angular/localize." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/localize@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:30bf2a0e-3938-54a6-b9c0-6c3049930954", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 12.2.17-tuxcare.10 of @angular/localize." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/localize@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:caf00992-97e8-543e-82d9-120671178d54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 12.2.17-tuxcare.10 of @angular/localize." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/localize@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:93ecb0ac-7e52-51c8-aab8-97b5b8aa378b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 12.2.17-tuxcare.10 of @angular/localize." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/localize@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:af20ed40-10ae-547e-844e-3fb0e2a5120d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 12.2.17-tuxcare.10 of @angular/localize." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/localize@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:f57737e6-d88c-5639-b143-17d541360711", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 12.2.17-tuxcare.10 of @angular/localize." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/localize@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:ed0a5735-22dc-5c59-a924-9d2b1106c955", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 12.2.17-tuxcare.10 of @angular/localize." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/localize@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:c7a89c0b-943f-58cf-9793-76198adbf42c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 12.2.17-tuxcare.10 of @angular/localize." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/localize@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:4eafa76e-2c69-5db6-a570-59ff64bb4ea8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 12.2.17-tuxcare.10 of @angular/localize." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/localize@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:0797d15f-546a-5ea8-9f3c-4fdd44c96aa9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 12.2.17-tuxcare.10 of @angular/localize." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/localize@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:76599a1b-0b94-5278-829c-33a5b7b16a9f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 12.2.17-tuxcare.10 of @angular/localize." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/localize@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:fd5411c3-1bcd-58fd-814e-49a5d3b4cf7c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 12.2.17-tuxcare.10 of @angular/localize." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/localize@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:f4c64aee-8178-52e8-a894-06611d21c536", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 12.2.17-tuxcare.10 of @angular/localize." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/localize@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:9c6ce1e4-5b9a-5d55-9e8f-66b6bf271934", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 12.2.17-tuxcare.10 of @angular/localize. not_affected \u2014 Angular 12.2.17 does not contain the HttpTransferCache feature affected by CVE-2026-68945. HttpTransferCache, which caches HTTP requests during Server-Side Rendering (SSR), was first introduced in Angular 16.0.0\u2014approximately 4 major versions after the target version. The vulnerability concerns cache-key collision when repeated HTTP parameters are serialized, but since the entire HttpTransferCa...", "justification": "code_not_present" } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/localize@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:ca3d6152-7676-598e-aec5-79655f027453", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 12.2.17-tuxcare.10 of @angular/localize." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/localize@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:19cee871-e1a0-5073-9dfe-2a954196a651", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 12.2.17-tuxcare.10 of @angular/localize." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/localize@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:eaeb1375-b4bc-5042-937c-c735892d7190", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88056 affects version 12.2.17-tuxcare.10 of @angular/localize." } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/localize@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:b23e89da-a217-5658-93e9-4223e77b4c2a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 12.2.17-tuxcare.10 of @angular/localize." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/localize@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:6de768ef-dfe0-580f-a8bb-30625a7e0da0", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 12.2.17-tuxcare.10 of @angular/localize. not_affected \u2014 Angular 12.2.17-tuxcare.9 is not affected by CVE-2026-88059. The vulnerability requires HttpTransferCache, withRequestsMadeViaParent(), and provideClientHydration() features which were introduced in Angular 16.0.0. This version uses the older module-based HttpClientModule system and lacks the entire SSR hydration transfer-cache infrastructure. The vulnerable code pattern described in the CVE do...", "justification": "code_not_present" } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/localize@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:fa971e09-1228-5149-bedf-bfbe1bce60cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 12.2.17-tuxcare.10 of @angular/localize." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/localize@12.2.17-tuxcare.10" } ] }