{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:7ac3c765-b159-5f97-a7c0-09c4ae83b288", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/platform-browser-dynamic", "purl": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.13", "type": "library", "bom-ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.13", "version": "16.2.12-tuxcare.13", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:38c896ec-b207-534d-9f74-62b49f36a630", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:d4976e71-275d-5169-9428-7a757fc91ef1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:cf8218c5-1b30-5ffc-b6c5-6ad867ca21af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:f22a423e-4895-5a87-ad4a-61f01cf81b5c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:87dbb93b-0ce2-5bab-a743-03f4670ab67e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:6cf94a0c-b519-52b7-8cf6-354f13c4ce52", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:a31d60dd-609e-5ab0-8da7-50e9974e7cd9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:8be7f322-80ce-583c-aafa-3fcfb11f4fda", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:9626fa2e-36cf-5004-a200-e8af9150cd33", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:e508e971-1a6a-523c-8ce8-de3bf25d421c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:1dd80c1c-6912-5460-a345-3a325c4f45fd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:036be43b-9adc-5987-b702-01a47f0fdfbd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:92b16a7f-25bd-5dab-b337-ad00998de2e5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:a2ab5543-a93f-5eec-a376-ac4479e21365", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:418b0e14-7fd6-5522-92ae-287bc1ed390b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:083fa0fc-a846-589f-83c7-1f523f423c3e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:25fa39d2-5566-5bec-8f81-78662c838c67", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:d00c4c3c-db8c-5f50-93e1-27c3e579ace4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:561085fe-7d38-5e26-bc1f-c4692cce33d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:835d0a9f-ec13-5ee2-8620-68999426c8f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:15ff6a3e-ef09-53ca-b4e8-d5be98bac59a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:e2cbd8ca-a176-56f4-bca2-9ed2e3985ed4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:d7392612-b77a-5600-81da-0a3c19d2c7e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:18e11349-1a00-5dc2-9f6e-fad34f474d12", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 16.2.12-tuxcare.13 of @angular/platform-browser-dynamic. not_affected \u2014 CVE-2026-88056 affects Angular versions 20.3.x, 21.2.x, and 22.x where a refactored URL parsing utility added String.prototype.trim() that strips Unicode whitespace, enabling SSRF bypasses. The target (Angular 16.2.12-tuxcare.12) is based on Angular 16.2.x architecture, which predates the vulnerable code pattern entirely. TuxCare created url.ts fresh on June 24, 2026 for CVE-2026-50168, modelin...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:b3947b37-a006-5fcd-9465-244ef65b97e5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 16.2.12-tuxcare.13 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:165f1211-bae2-5f1b-aa2c-6b571b2f7e2c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 16.2.12-tuxcare.13 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:5fa62ef4-61d0-572b-b4f6-311ee4ff823e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 16.2.12-tuxcare.13 of @angular/platform-browser-dynamic." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@16.2.12-tuxcare.13" } ] }