{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:7f7246ff-fa1e-500f-a1ef-992cabb3be3a", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/platform-server", "purl": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.15", "type": "library", "bom-ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.15", "version": "17.3.12-tuxcare.15", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:d303a241-832b-53aa-a76d-ff7a56825d7e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:d3a72516-f841-52a6-bbeb-b25e630f262c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:2e0e76cf-882a-572c-bd73-4791985d4ebb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:5f17c42f-78bc-54c1-85e2-10a78b1679fe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:87cdb4ce-d0e6-5034-9eb4-89c4882c85c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:1fbc8ea6-54d4-5fba-b0f0-e61365574d3b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:422c666f-09b8-5823-9e4d-19c52f5c7440", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:7bd7259e-5f4c-5e4b-86a0-8417b626b73d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:e0df9930-8fd7-5378-a43b-09d9f3a4a107", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:4de497eb-4498-501a-afae-f86b7e151a31", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:688f6b0a-f0ba-5657-89b8-6915373e150d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:ac424174-2979-5119-a867-647091a04ae5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:11af8b2e-0aac-5520-a0b9-2dd6462ef70b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:8e13cedd-96af-5003-a83d-7b0dad1a32e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:1c395ec8-0c27-5188-a3d1-8c39727c4a56", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:f5d5f35d-4ce9-5cd2-9037-26ecf88e6c20", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:5fff05b5-9be6-5968-8f59-9ae1735fe23e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:af24036c-7996-5910-956d-b6ffcf41d6bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:56d5fc47-5f89-504b-9017-49c4f8f15ed4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:e6cfc506-b5b1-573a-841f-a9fc8ffd801e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:2968adfa-247c-55bb-9d85-2dc3d426341a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:4c7aac8e-b69c-56bb-91b0-27cfc1d25cc3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:6c2af2ca-d6f4-578b-857a-e9f2083b7478", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:1ac042f0-617e-54ac-8348-4243d37fedb1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 17.3.12-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:bf40b290-8f90-5852-aca6-7b3cca78a4bf", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 17.3.12-tuxcare.15 of @angular/platform-server. not_affected \u2014 Version 17.3.12 is not affected by CVE-2026-88056. The vulnerability involves String.prototype.trim() being applied during URL resolution in Angular's platform-server, converting validated same-origin URLs with Unicode whitespace into cross-origin protocol-relative URLs, leading to SSRF. This vulnerable code pattern was introduced in newer Angular versions (v20+) and does not exist in version 1...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:25a4c9ca-9e99-5035-be1c-1d1f9024201f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 17.3.12-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:3984d356-91ee-51bf-aaf1-99d524f77c3f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 17.3.12-tuxcare.15 of @angular/platform-server." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.15" } ], "bom-ref": "urn:uuid:d3f6c66d-1767-5815-aa77-f55007a858ba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 17.3.12-tuxcare.15 of @angular/platform-server." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-server@17.3.12-tuxcare.15" } ] }