{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:49eb83f6-5fc8-5375-828c-deca1f8a51e6", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/platform-browser", "purl": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.11", "type": "library", "bom-ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.11", "version": "18.2.14-tuxcare.11", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:0d2c7ab9-5364-52d2-912a-e390869197d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.11 of @angular/platform-browser." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:f1066238-b861-53bc-95f2-3359fe537ae6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.11 of @angular/platform-browser." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:a726dcc3-97b7-5c40-bdc1-948501962a7a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.11 of @angular/platform-browser." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:83e012e7-1d08-5ca6-9532-025f42c0ced8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.11 of @angular/platform-browser." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:77db70e3-c58d-50c8-a25b-42f85a77c2e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.11 of @angular/platform-browser." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:0a12d1b5-0d68-5468-87f5-bdef711e47e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 18.2.14-tuxcare.11 of @angular/platform-browser." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:56aea5d0-c36f-5908-bcc6-ea7943d32283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 18.2.14-tuxcare.11 of @angular/platform-browser." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:6ef303db-ccd7-5a52-a1fb-e24fd16d966f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 18.2.14-tuxcare.11 of @angular/platform-browser." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:597142b3-fcf9-5b14-855b-8260591bdade", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 18.2.14-tuxcare.11 of @angular/platform-browser." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:75be466f-9d04-5475-81f9-f3842468fa37", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 18.2.14-tuxcare.11 of @angular/platform-browser." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:48a04f10-19bb-53de-a48d-8ea4d851973e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 18.2.14-tuxcare.11 of @angular/platform-browser." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:3142da5b-7601-5df3-bb1a-55fda1f24921", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 18.2.14-tuxcare.11 of @angular/platform-browser." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:b40bb1e1-0cdd-5ef5-8d3d-cd610f3e3bc3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 18.2.14-tuxcare.11 of @angular/platform-browser." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:f9dfcb31-4162-5f4b-aa64-8e5bcd43f309", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 18.2.14-tuxcare.11 of @angular/platform-browser." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:47de16d7-143a-5195-851d-521eaec30eb5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 18.2.14-tuxcare.11 of @angular/platform-browser." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:a753dc16-4b65-5dc4-bff9-42023550c9e8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54264 affects version 18.2.14-tuxcare.11 of @angular/platform-browser, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:fb7aa0ea-8aab-59cb-8ec8-d3eccb67d222", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54265 affects version 18.2.14-tuxcare.11 of @angular/platform-browser, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:3d64bb60-503e-5a68-93e7-ff163d2bcf35", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54266 affects version 18.2.14-tuxcare.11 of @angular/platform-browser, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:99c801c2-14ab-57e5-9656-a0baace57c2f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54267 affects version 18.2.14-tuxcare.11 of @angular/platform-browser, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:278e3623-29eb-5e04-8063-37fefda0efb6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54268 affects version 18.2.14-tuxcare.11 of @angular/platform-browser, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:c0fae2df-3aa4-54dd-92c2-a217709a2d7b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68945 affects version 18.2.14-tuxcare.11 of @angular/platform-browser, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:70404415-5585-5865-b519-2aa36095fd5c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 18.2.14-tuxcare.11 of @angular/platform-browser, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:b37b02e5-567d-5035-9ca2-912fb760504b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 18.2.14-tuxcare.11 of @angular/platform-browser, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:f46a60fb-5a28-58d9-ac47-8d50a3c82009", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.11 of @angular/platform-browser. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:71c632e7-1e38-50a0-9920-c84045b1dc2f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.11 of @angular/platform-browser." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:af3b0e53-5410-5ba9-8c4b-29164d400b9a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.11 of @angular/platform-browser." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:3a2c9718-6846-5ed4-b54d-9e9a19c92289", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.11 of @angular/platform-browser." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-browser@18.2.14-tuxcare.11" } ] }