{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:7c804134-7a2b-5aae-8a4d-a5b40cac55c2", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/platform-browser", "purl": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.3", "type": "library", "bom-ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.3", "version": "16.2.11-tuxcare.3", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:09703f75-df8d-5061-b30a-3c6a4aa41b09", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-59052 affects version 16.2.11-tuxcare.3 of @angular/platform-browser." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:2f1c52b0-3c42-5c99-a356-674e77b11b76", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 16.2.11-tuxcare.3 of @angular/platform-browser." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:9843e0a9-073c-58a9-aee1-f56c4b4ee98a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 16.2.11-tuxcare.3 of @angular/platform-browser." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:bc48f043-118a-553b-bf0d-c78baddb8fe9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 16.2.11-tuxcare.3 of @angular/platform-browser." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:99c7adc6-44b8-5497-a4d5-4165ba63eab8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 16.2.11-tuxcare.3 of @angular/platform-browser." } }, { "id": "CVE-2026-41423", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:3957b47c-9ecd-5176-a69f-d5fb0bfb560d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 16.2.11-tuxcare.3 of @angular/platform-browser." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:4f36397d-8f6d-5b52-b568-d50cfd87d0d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 16.2.11-tuxcare.3 of @angular/platform-browser." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:d91024f3-348e-5148-b224-288c1da1510d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 16.2.11-tuxcare.3 of @angular/platform-browser." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:82324e78-6b7d-5524-9129-668fd832f6bd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 16.2.11-tuxcare.3 of @angular/platform-browser." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:15496259-e5b0-59c5-8630-09dddbb4f7ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 16.2.11-tuxcare.3 of @angular/platform-browser." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:1d20890a-c0a2-51ab-a96e-88815ee1f9ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 16.2.11-tuxcare.3 of @angular/platform-browser." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:92dc57b3-5e93-5968-add2-00a7a1d827f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 16.2.11-tuxcare.3 of @angular/platform-browser." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:225d3b82-6462-5c2f-9c61-800927bf8a68", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 16.2.11-tuxcare.3 of @angular/platform-browser." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:19269d28-e75f-510e-871b-90a810d3ae01", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 16.2.11-tuxcare.3 of @angular/platform-browser." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:147e90b7-2489-5d2c-af17-b6c8c3068408", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 16.2.11-tuxcare.3 of @angular/platform-browser." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:a1705918-e32a-5ee2-9518-e494a157504e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 16.2.11-tuxcare.3 of @angular/platform-browser." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:ef76d23b-4136-54d2-9596-3c977fcb9545", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 16.2.11-tuxcare.3 of @angular/platform-browser." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:e44ba563-9a13-556b-8082-ec0e70851a6d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 16.2.11-tuxcare.3 of @angular/platform-browser." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:6f2265fe-27b7-5dd7-9d28-69461e615aec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 16.2.11-tuxcare.3 of @angular/platform-browser." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:7a2bfade-86de-5688-906b-3b7ec3d2cfa7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 16.2.11-tuxcare.3 of @angular/platform-browser." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:30358285-e281-5023-9b03-1d4eb420c6cf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 16.2.11-tuxcare.3 of @angular/platform-browser." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:8e74d8fb-541f-5136-ac5c-80a9141a566b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 16.2.11-tuxcare.3 of @angular/platform-browser." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:f40645ff-fb47-5916-bd77-35daf2d7a10b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 16.2.11-tuxcare.3 of @angular/platform-browser." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:1a87b434-c9b9-5295-b653-e25f067a5960", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 16.2.11-tuxcare.3 of @angular/platform-browser." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:ab96d3eb-4d35-5677-860e-1256389a4c18", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 16.2.11-tuxcare.3 of @angular/platform-browser. not_affected \u2014 Angular 16.2.11-tuxcare.2 is NOT affected by CVE-2026-88056. The vulnerability requires WHATWG URL validation combined with String.prototype.trim() on URLs during SSR, creating a discrepancy that enables SSRF. While the target uses WHATWG URL parsing (backported in commit c03fbfd7cc for CVE-2026-50168), it does NOT call String.prototype.trim() on URLs. The attack chain is broken at the trim() s...", "justification": "code_not_reachable" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:71ecc2af-25a0-5cf2-aefc-660646a72335", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 16.2.11-tuxcare.3 of @angular/platform-browser." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:76157d57-6814-50ab-a9c3-c440cf4815ea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 16.2.11-tuxcare.3 of @angular/platform-browser." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.3" } ], "bom-ref": "urn:uuid:8233cef8-98ee-5409-9943-bd0b518a42e6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 16.2.11-tuxcare.3 of @angular/platform-browser." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-browser@16.2.11-tuxcare.3" } ] }