{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:519a7651-0585-55ef-a601-89e8871daa36", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/animations", "purl": "pkg:npm/%40angular/animations@12.2.17-tuxcare.1", "type": "library", "bom-ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.1", "version": "12.2.17-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.1" } ], "bom-ref": "urn:uuid:4fb4aa71-bc02-539b-a3fd-f071177aa204", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-66035 affects version 12.2.17-tuxcare.1 of @angular/animations, and is fixed in 12.2.17-tuxcare.8." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.1" } ], "bom-ref": "urn:uuid:f71a686f-3e76-57e2-a321-9038bce2ddd5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-66412 affects version 12.2.17-tuxcare.1 of @angular/animations, and is fixed in 12.2.17-tuxcare.2." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.1" } ], "bom-ref": "urn:uuid:1e3fc803-1267-5fa3-8012-bf23dab88eae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22610 affects version 12.2.17-tuxcare.1 of @angular/animations, and is fixed in 12.2.17-tuxcare.3." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.1" } ], "bom-ref": "urn:uuid:020c27d9-4468-5498-bba1-1ee8ea5c4edb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27970 affects version 12.2.17-tuxcare.1 of @angular/animations, and is fixed in 12.2.17-tuxcare.4." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.1" } ], "bom-ref": "urn:uuid:8ea156dc-f971-5cce-8987-6a42a9d77965", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46417 affects version 12.2.17-tuxcare.1 of @angular/animations, and is fixed in 12.2.17-tuxcare.6." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.1" } ], "bom-ref": "urn:uuid:d99c86d2-6989-50b2-8246-7d3c3f381caa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50168 affects version 12.2.17-tuxcare.1 of @angular/animations, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.1" } ], "bom-ref": "urn:uuid:e730f5bd-f8bf-541b-8ecf-4e2bba83e557", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50169 affects version 12.2.17-tuxcare.1 of @angular/animations, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.1" } ], "bom-ref": "urn:uuid:49111d0c-3b5d-5c35-b4ab-209413d0abcd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50170 affects version 12.2.17-tuxcare.1 of @angular/animations, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.1" } ], "bom-ref": "urn:uuid:70e3c4a3-d714-5d76-9555-db0f60269dea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50171 affects version 12.2.17-tuxcare.1 of @angular/animations, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.1" } ], "bom-ref": "urn:uuid:52f94237-6ba2-5234-bc2d-a2abbdc1b50b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50184 affects version 12.2.17-tuxcare.1 of @angular/animations, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.1" } ], "bom-ref": "urn:uuid:76cd8de2-eaa5-5950-b6af-5fc89daa4db7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50555 affects version 12.2.17-tuxcare.1 of @angular/animations, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.1" } ], "bom-ref": "urn:uuid:057082b3-d39a-51ee-bf81-b95560c8f508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50556 affects version 12.2.17-tuxcare.1 of @angular/animations, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.1" } ], "bom-ref": "urn:uuid:f8f0f69c-e88b-5c39-849e-bad4441cdef1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50557 affects version 12.2.17-tuxcare.1 of @angular/animations, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.1" } ], "bom-ref": "urn:uuid:3bf7a901-11b9-502e-9860-f99d3de9d9d7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-52725 affects version 12.2.17-tuxcare.1 of @angular/animations, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.1" } ], "bom-ref": "urn:uuid:d118493d-eb85-582e-a1b2-b3f188c1d7c7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54264 affects version 12.2.17-tuxcare.1 of @angular/animations, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.1" } ], "bom-ref": "urn:uuid:0910e059-7f6d-5a8c-8845-a54c55e57820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54265 affects version 12.2.17-tuxcare.1 of @angular/animations, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.1" } ], "bom-ref": "urn:uuid:79c8ab16-6a32-590c-b3cc-0c7c8dcc83c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54266 affects version 12.2.17-tuxcare.1 of @angular/animations, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.1" } ], "bom-ref": "urn:uuid:7c95dbbf-a2f3-5e4e-90a4-0cbfdbdba371", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54267 affects version 12.2.17-tuxcare.1 of @angular/animations, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.1" } ], "bom-ref": "urn:uuid:65257223-99ef-59bf-afe8-e45686aee400", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54268 affects version 12.2.17-tuxcare.1 of @angular/animations, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.1" } ], "bom-ref": "urn:uuid:24e1039c-0b87-5229-bd32-acc9f48528e3", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 12.2.17-tuxcare.1 of @angular/animations. not_affected \u2014 Angular 12.2.17 does not contain the HttpTransferCache feature affected by CVE-2026-68945. HttpTransferCache, which caches HTTP requests during Server-Side Rendering (SSR), was first introduced in Angular 16.0.0\u2014approximately 4 major versions after the target version. The vulnerability concerns cache-key collision when repeated HTTP parameters are serialized, but since the entire HttpTransferCa...", "justification": "code_not_present" } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.1" } ], "bom-ref": "urn:uuid:7d8968c1-9148-58ef-bd5f-5cf469ad1a3d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 12.2.17-tuxcare.1 of @angular/animations, and is fixed in 12.2.17-tuxcare.9." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.1" } ], "bom-ref": "urn:uuid:0b0fc084-3a79-55e0-b387-ef11a7e5d459", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 12.2.17-tuxcare.1 of @angular/animations, and is fixed in 12.2.17-tuxcare.9." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.1" } ], "bom-ref": "urn:uuid:c00317ac-b7b0-5ece-9aec-5bbe59a11665", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88056 affects version 12.2.17-tuxcare.1 of @angular/animations." } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.1" } ], "bom-ref": "urn:uuid:0d9cb42d-8f26-5c8c-9dae-a6782225e0bb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 12.2.17-tuxcare.1 of @angular/animations." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.1" } ], "bom-ref": "urn:uuid:2ce6f8f4-a513-5105-89c4-6cce4efe6178", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 12.2.17-tuxcare.1 of @angular/animations. not_affected \u2014 Angular 12.2.17-tuxcare.9 is not affected by CVE-2026-88059. The vulnerability requires HttpTransferCache, withRequestsMadeViaParent(), and provideClientHydration() features which were introduced in Angular 16.0.0. This version uses the older module-based HttpClientModule system and lacks the entire SSR hydration transfer-cache infrastructure. The vulnerable code pattern described in the CVE do...", "justification": "code_not_present" } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.1" } ], "bom-ref": "urn:uuid:ccba74a5-17ce-5edb-8e28-21c64bc4abec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 12.2.17-tuxcare.1 of @angular/animations." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.1" } ] }