{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b33a5ff4-3703-5577-9386-71a50c7f1d02", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/animations", "purl": "pkg:npm/%40angular/animations@12.2.17-tuxcare.2", "type": "library", "bom-ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.2", "version": "12.2.17-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:4a861a00-59a5-5677-b344-4c66137f3745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-66035 affects version 12.2.17-tuxcare.2 of @angular/animations, and is fixed in 12.2.17-tuxcare.8." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:b4fbf107-9aaa-5767-b61e-ea284af0b4b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 12.2.17-tuxcare.2 of @angular/animations." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:592f938e-e830-5805-98bc-f8b81f5f719f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22610 affects version 12.2.17-tuxcare.2 of @angular/animations, and is fixed in 12.2.17-tuxcare.3." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:3d878ce2-5bb1-50ee-9f52-aa5057a7327b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27970 affects version 12.2.17-tuxcare.2 of @angular/animations, and is fixed in 12.2.17-tuxcare.4." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:2d2fa923-e898-5793-b964-087437bb4af8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46417 affects version 12.2.17-tuxcare.2 of @angular/animations, and is fixed in 12.2.17-tuxcare.6." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:a8c11ac4-9298-5ccd-b0f3-016d9b61d9e5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50168 affects version 12.2.17-tuxcare.2 of @angular/animations, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:8bfbca47-a4ec-5000-a6b1-3d7a36750347", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50169 affects version 12.2.17-tuxcare.2 of @angular/animations, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:c5335d52-dbe1-5b86-99d7-cc07eab5c49b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50170 affects version 12.2.17-tuxcare.2 of @angular/animations, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:c004931d-817b-5beb-b29b-e34973cf04d5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50171 affects version 12.2.17-tuxcare.2 of @angular/animations, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:24edfe87-f331-5055-95b1-7ebb983bb795", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50184 affects version 12.2.17-tuxcare.2 of @angular/animations, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:f8d63896-3993-5b8b-a94f-1217a3477610", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50555 affects version 12.2.17-tuxcare.2 of @angular/animations, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:d43e96dd-eed4-5e59-933b-839202b347d7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50556 affects version 12.2.17-tuxcare.2 of @angular/animations, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:29299c7d-9932-5c40-94e3-fa8d35c9a29c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50557 affects version 12.2.17-tuxcare.2 of @angular/animations, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:4849f9fc-38fe-59a8-bd26-dfed4a5ad983", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-52725 affects version 12.2.17-tuxcare.2 of @angular/animations, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:5fc44028-4fab-5915-9330-7cb236a5256b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54264 affects version 12.2.17-tuxcare.2 of @angular/animations, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:237d973d-d372-5d53-bf54-6f69b7d51171", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54265 affects version 12.2.17-tuxcare.2 of @angular/animations, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:cac656d4-96f9-5450-9692-b63585a4f641", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54266 affects version 12.2.17-tuxcare.2 of @angular/animations, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:887b3ecb-3090-5196-adee-a73b1e8c2fd2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54267 affects version 12.2.17-tuxcare.2 of @angular/animations, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:4a276e65-8ecc-5ae8-a7f3-5a048e1fe484", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54268 affects version 12.2.17-tuxcare.2 of @angular/animations, and is fixed in 12.2.17-tuxcare.7." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:daf1f341-01a6-5c3b-bb2a-0f788663f665", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 12.2.17-tuxcare.2 of @angular/animations. not_affected \u2014 Angular 12.2.17 does not contain the HttpTransferCache feature affected by CVE-2026-68945. HttpTransferCache, which caches HTTP requests during Server-Side Rendering (SSR), was first introduced in Angular 16.0.0\u2014approximately 4 major versions after the target version. The vulnerability concerns cache-key collision when repeated HTTP parameters are serialized, but since the entire HttpTransferCa...", "justification": "code_not_present" } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:3222b1b9-a121-5c2d-9c80-645b22c99f3c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 12.2.17-tuxcare.2 of @angular/animations, and is fixed in 12.2.17-tuxcare.9." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:820a8192-3a14-58db-80d9-47d447a1afee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 12.2.17-tuxcare.2 of @angular/animations, and is fixed in 12.2.17-tuxcare.9." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:605341d2-fd40-5a6f-97b7-bc567e59299f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88056 affects version 12.2.17-tuxcare.2 of @angular/animations." } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:d0c2c04b-0b7d-58a4-aeac-41d320629ab0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 12.2.17-tuxcare.2 of @angular/animations." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:0cda625c-1f41-5267-8c10-741e39bc5f0b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 12.2.17-tuxcare.2 of @angular/animations. not_affected \u2014 Angular 12.2.17-tuxcare.9 is not affected by CVE-2026-88059. The vulnerability requires HttpTransferCache, withRequestsMadeViaParent(), and provideClientHydration() features which were introduced in Angular 16.0.0. This version uses the older module-based HttpClientModule system and lacks the entire SSR hydration transfer-cache infrastructure. The vulnerable code pattern described in the CVE do...", "justification": "code_not_present" } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.2" } ], "bom-ref": "urn:uuid:5a3612f4-b5fb-5634-a798-1634faa3e36b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 12.2.17-tuxcare.2 of @angular/animations." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/animations@12.2.17-tuxcare.2" } ] }