{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:9402df28-5c8f-5f9a-a57b-6ccd35f48c67", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/platform-browser-dynamic", "purl": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.10", "type": "library", "bom-ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.10", "version": "17.3.12-tuxcare.10", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.10" } ], "bom-ref": "urn:uuid:3d39221e-0ae1-54d3-9892-ff351d04014c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 17.3.12-tuxcare.10 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.10" } ], "bom-ref": "urn:uuid:ee77414f-67cd-5b11-ad54-bdd0504fa3d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 17.3.12-tuxcare.10 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.10" } ], "bom-ref": "urn:uuid:7e8f7765-5ab5-5561-9441-782ed1308d85", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 17.3.12-tuxcare.10 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.10" } ], "bom-ref": "urn:uuid:95c1d867-b8df-5557-8e1e-b941e15de905", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 17.3.12-tuxcare.10 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.10" } ], "bom-ref": "urn:uuid:f7ae1271-6cd4-59d0-8557-4a9789b4e4f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 17.3.12-tuxcare.10 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.10" } ], "bom-ref": "urn:uuid:56ebc984-027e-50dc-864c-748d78df3236", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 17.3.12-tuxcare.10 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.10" } ], "bom-ref": "urn:uuid:ccb1ddf0-1486-5aaa-b0ad-0fcd7c4cc75c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46417 affects version 17.3.12-tuxcare.10 of @angular/platform-browser-dynamic, and is fixed in 17.3.12-tuxcare.12." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.10" } ], "bom-ref": "urn:uuid:e1f7ede4-e1fa-5ac7-998d-94ce06bc982f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50168 affects version 17.3.12-tuxcare.10 of @angular/platform-browser-dynamic, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.10" } ], "bom-ref": "urn:uuid:dde4cf8e-9e51-54ad-9509-28e9587ae7c6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50169 affects version 17.3.12-tuxcare.10 of @angular/platform-browser-dynamic, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.10" } ], "bom-ref": "urn:uuid:1ac41a55-39b9-535f-84b8-772444225edc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50170 affects version 17.3.12-tuxcare.10 of @angular/platform-browser-dynamic, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.10" } ], "bom-ref": "urn:uuid:1e625a28-947d-5d29-92fa-e8169ab053ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50171 affects version 17.3.12-tuxcare.10 of @angular/platform-browser-dynamic, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.10" } ], "bom-ref": "urn:uuid:535f02bc-42c3-5e51-a58a-338a5209d3e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50184 affects version 17.3.12-tuxcare.10 of @angular/platform-browser-dynamic, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.10" } ], "bom-ref": "urn:uuid:623d7d28-10e3-59c1-b02a-752965b8090e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50555 affects version 17.3.12-tuxcare.10 of @angular/platform-browser-dynamic, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.10" } ], "bom-ref": "urn:uuid:0027b276-885a-5773-b466-51dff887ad28", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50556 affects version 17.3.12-tuxcare.10 of @angular/platform-browser-dynamic, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.10" } ], "bom-ref": "urn:uuid:52396233-2e9d-558e-9576-1092c455738d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50557 affects version 17.3.12-tuxcare.10 of @angular/platform-browser-dynamic, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.10" } ], "bom-ref": "urn:uuid:b835e860-4571-51ca-aeb5-4390fe4deb24", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-52725 affects version 17.3.12-tuxcare.10 of @angular/platform-browser-dynamic, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.10" } ], "bom-ref": "urn:uuid:46006fdd-1150-58bd-a242-b0636268b1ba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54264 affects version 17.3.12-tuxcare.10 of @angular/platform-browser-dynamic, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.10" } ], "bom-ref": "urn:uuid:01831589-56a5-556d-a27d-e8f914da5dbe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54265 affects version 17.3.12-tuxcare.10 of @angular/platform-browser-dynamic, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.10" } ], "bom-ref": "urn:uuid:378092aa-b088-54f8-9a1d-1578b83e1b7c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54266 affects version 17.3.12-tuxcare.10 of @angular/platform-browser-dynamic, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.10" } ], "bom-ref": "urn:uuid:155964f9-b6c9-59fb-99a8-6f4c0556360f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54267 affects version 17.3.12-tuxcare.10 of @angular/platform-browser-dynamic, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.10" } ], "bom-ref": "urn:uuid:27f532a8-d9f9-55cb-a8a4-8b87f21c74ad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54268 affects version 17.3.12-tuxcare.10 of @angular/platform-browser-dynamic, and is fixed in 17.3.12-tuxcare.13." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.10" } ], "bom-ref": "urn:uuid:dc5efa4a-b7b1-5d13-9387-6fa6482cddbc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68945 affects version 17.3.12-tuxcare.10 of @angular/platform-browser-dynamic, and is fixed in 17.3.12-tuxcare.14." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.10" } ], "bom-ref": "urn:uuid:bb4d7f7c-947a-5959-8bfe-2a4ee8e66846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 17.3.12-tuxcare.10 of @angular/platform-browser-dynamic, and is fixed in 17.3.12-tuxcare.14." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.10" } ], "bom-ref": "urn:uuid:16c9aa7d-b299-577a-96bd-37cc4296b8a0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 17.3.12-tuxcare.10 of @angular/platform-browser-dynamic, and is fixed in 17.3.12-tuxcare.14." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.10" } ], "bom-ref": "urn:uuid:17aa06ce-e542-5eac-a7e4-172303880b72", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 17.3.12-tuxcare.10 of @angular/platform-browser-dynamic. not_affected \u2014 Version 17.3.12 is not affected by CVE-2026-88056. The vulnerability involves String.prototype.trim() being applied during URL resolution in Angular's platform-server, converting validated same-origin URLs with Unicode whitespace into cross-origin protocol-relative URLs, leading to SSRF. This vulnerable code pattern was introduced in newer Angular versions (v20+) and does not exist in version 1...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.10" } ], "bom-ref": "urn:uuid:c8a98dff-d4b5-513d-8139-1617a46e0165", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 17.3.12-tuxcare.10 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.10" } ], "bom-ref": "urn:uuid:bc5d5ad7-6314-58c8-931e-6574346950a7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 17.3.12-tuxcare.10 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.10" } ], "bom-ref": "urn:uuid:61d3400c-7f52-517c-9c32-a8f675b6a03e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 17.3.12-tuxcare.10 of @angular/platform-browser-dynamic." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@17.3.12-tuxcare.10" } ] }