{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:ac028295-476c-525a-a991-f566b1f7b8fd", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/platform-server", "purl": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.13", "type": "library", "bom-ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.13", "version": "16.2.12-tuxcare.13", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:5a2a158c-63df-56ec-8f10-89b094fcccd6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-server." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:4c65fe4b-5620-55a2-9efe-341a0de3e8ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-server." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:01c94080-31bd-5219-ab3d-df6e5fef60d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-server." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:b6349747-5506-5d11-8ac1-010507a45bdc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-server." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:19cc683f-1cfc-53b2-b67b-6412fb4c79cc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-server." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:2e862f68-00e0-5fec-a552-4becac0f1f31", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-server." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:63198136-35cb-5248-b02c-8e96aad1bb4c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-server." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:e4d6f049-3271-530a-8fc9-5e3a133e1056", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-server." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:8ff859e0-f47a-5664-9f3f-d5abd62629e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-server." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:727b721b-8908-59f5-95e3-1eadb7adc768", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-server." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:29679fd0-8c48-5b7c-8fe0-191abf9804cc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-server." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:d905c06c-5abc-5884-ba33-3aefda13d2e5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-server." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:e3106dcd-30e5-5167-9881-67a6c512888b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-server." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:9ddb9347-754e-51af-8d09-080aec8d7b1c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-server." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:0f112150-0a79-53c9-a5ec-4d66c4c0b6dc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-server." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:3c576d82-bd25-5571-8781-a24b46c2fdb3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-server." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:ac49b631-35ae-5379-b118-850e2c0bb543", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-server." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:2ce8e880-11ed-5e6f-a274-8f1797f5bd4e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-server." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:9eb9d36f-b346-58c1-8ef9-9f8eab1e933d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-server." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:9fa14be6-e6be-530a-92a1-040dccaee538", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-server." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:a1f7be69-facf-5314-a4b9-555d7ef712c4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-server." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:8049e51e-881d-57ac-832b-3ca8fa16236d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-server." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:6fed7e64-77be-5270-9637-4417736d4005", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 16.2.12-tuxcare.13 of @angular/platform-server." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:5820a1fd-1d39-54e3-af0d-690cdfa56b68", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 16.2.12-tuxcare.13 of @angular/platform-server. not_affected \u2014 CVE-2026-88056 affects Angular versions 20.3.x, 21.2.x, and 22.x where a refactored URL parsing utility added String.prototype.trim() that strips Unicode whitespace, enabling SSRF bypasses. The target (Angular 16.2.12-tuxcare.12) is based on Angular 16.2.x architecture, which predates the vulnerable code pattern entirely. TuxCare created url.ts fresh on June 24, 2026 for CVE-2026-50168, modelin...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:110eaa99-ebb0-5fbc-8eef-d769c657b0cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 16.2.12-tuxcare.13 of @angular/platform-server." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:354b8400-a9a1-5413-8d95-54d40355b148", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 16.2.12-tuxcare.13 of @angular/platform-server." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.13" } ], "bom-ref": "urn:uuid:2218783a-15a3-529b-abdb-7588225bff5f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 16.2.12-tuxcare.13 of @angular/platform-server." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-server@16.2.12-tuxcare.13" } ] }