{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:7da25ca9-cadd-5cbe-9aa7-25b5118256b9", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/animations", "purl": "pkg:npm/%40angular/animations@16.2.12-tuxcare.11", "type": "library", "bom-ref": "pkg:npm/%40angular/animations@16.2.12-tuxcare.11", "version": "16.2.12-tuxcare.11", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.12-tuxcare.11" } ], "bom-ref": "urn:uuid:dfa4bca2-434f-5742-ac73-d71ce28a2eb3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 16.2.12-tuxcare.11 of @angular/animations." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.12-tuxcare.11" } ], "bom-ref": "urn:uuid:121bbe2a-1a46-53b7-826d-69e4871d69c6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 16.2.12-tuxcare.11 of @angular/animations." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.12-tuxcare.11" } ], "bom-ref": "urn:uuid:8ec52c48-bbed-5633-b60e-a68980222bcd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 16.2.12-tuxcare.11 of @angular/animations." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.12-tuxcare.11" } ], "bom-ref": "urn:uuid:fe3414c5-94a7-5e54-88cb-9f37b5d2b3fe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 16.2.12-tuxcare.11 of @angular/animations." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.12-tuxcare.11" } ], "bom-ref": "urn:uuid:747d99cc-65ad-5998-a345-b32d8d9e9958", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 16.2.12-tuxcare.11 of @angular/animations." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.12-tuxcare.11" } ], "bom-ref": "urn:uuid:64ef9792-4520-5402-b6f0-7c1057aecd16", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 16.2.12-tuxcare.11 of @angular/animations." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.12-tuxcare.11" } ], "bom-ref": "urn:uuid:bd4ff8c2-2ccd-5989-8668-e9da812a02d2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 16.2.12-tuxcare.11 of @angular/animations." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.12-tuxcare.11" } ], "bom-ref": "urn:uuid:6fcfcded-5b9f-5fef-bde7-a974b98e8859", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 16.2.12-tuxcare.11 of @angular/animations." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.12-tuxcare.11" } ], "bom-ref": "urn:uuid:a086a4c1-aed8-5bb3-872d-0e309ba30313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 16.2.12-tuxcare.11 of @angular/animations." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.12-tuxcare.11" } ], "bom-ref": "urn:uuid:4928ece7-729a-571d-a6e9-541ec5a1d9ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 16.2.12-tuxcare.11 of @angular/animations." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.12-tuxcare.11" } ], "bom-ref": "urn:uuid:993aa5c1-3596-52c3-860d-539bbc45b798", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 16.2.12-tuxcare.11 of @angular/animations." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.12-tuxcare.11" } ], "bom-ref": "urn:uuid:99a0a2f1-70de-55e0-842a-7a9bedb76189", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 16.2.12-tuxcare.11 of @angular/animations." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.12-tuxcare.11" } ], "bom-ref": "urn:uuid:96eeab9a-6db1-5eb7-aa30-f33398a91975", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 16.2.12-tuxcare.11 of @angular/animations." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.12-tuxcare.11" } ], "bom-ref": "urn:uuid:36e6ce34-b21f-55e3-be2d-b2fb1af39618", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 16.2.12-tuxcare.11 of @angular/animations." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.12-tuxcare.11" } ], "bom-ref": "urn:uuid:42b8c891-7880-5fd6-8022-011c4ff6d116", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 16.2.12-tuxcare.11 of @angular/animations." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.12-tuxcare.11" } ], "bom-ref": "urn:uuid:c4acabac-012e-5214-b0a7-9cc9dc6f0dce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 16.2.12-tuxcare.11 of @angular/animations." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.12-tuxcare.11" } ], "bom-ref": "urn:uuid:bdae2d7b-cca0-5bd5-b314-e56bbc33b0eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 16.2.12-tuxcare.11 of @angular/animations." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.12-tuxcare.11" } ], "bom-ref": "urn:uuid:339d7d4e-aeec-5939-9092-ef4c5f59595c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 16.2.12-tuxcare.11 of @angular/animations." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.12-tuxcare.11" } ], "bom-ref": "urn:uuid:bcee20aa-c85e-50f3-8b85-4bd2d364d9a9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 16.2.12-tuxcare.11 of @angular/animations." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.12-tuxcare.11" } ], "bom-ref": "urn:uuid:58826bf7-5f97-5e2a-aa53-f5a1eae3bedd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 16.2.12-tuxcare.11 of @angular/animations." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.12-tuxcare.11" } ], "bom-ref": "urn:uuid:cf84e071-999d-55d4-bfc0-2593019eaf16", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68945 affects version 16.2.12-tuxcare.11 of @angular/animations, and is fixed in 16.2.12-tuxcare.12." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.12-tuxcare.11" } ], "bom-ref": "urn:uuid:6064bfad-9953-5020-84eb-d08bedb74f6b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 16.2.12-tuxcare.11 of @angular/animations, and is fixed in 16.2.12-tuxcare.12." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.12-tuxcare.11" } ], "bom-ref": "urn:uuid:a25c4def-1e35-5de3-ab4c-872a7100e6fe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 16.2.12-tuxcare.11 of @angular/animations, and is fixed in 16.2.12-tuxcare.12." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.12-tuxcare.11" } ], "bom-ref": "urn:uuid:909d7236-3492-5c68-9833-ea36cb9d2def", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 16.2.12-tuxcare.11 of @angular/animations. not_affected \u2014 CVE-2026-88056 affects Angular versions 20.3.x, 21.2.x, and 22.x where a refactored URL parsing utility added String.prototype.trim() that strips Unicode whitespace, enabling SSRF bypasses. The target (Angular 16.2.12-tuxcare.12) is based on Angular 16.2.x architecture, which predates the vulnerable code pattern entirely. TuxCare created url.ts fresh on June 24, 2026 for CVE-2026-50168, modelin...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.12-tuxcare.11" } ], "bom-ref": "urn:uuid:6e476fca-3946-52de-91d1-0727ae8d6ef1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 16.2.12-tuxcare.11 of @angular/animations." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.12-tuxcare.11" } ], "bom-ref": "urn:uuid:4394d562-f18a-501d-8c1d-0229176f4937", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 16.2.12-tuxcare.11 of @angular/animations." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/animations@16.2.12-tuxcare.11" } ], "bom-ref": "urn:uuid:f55ddcfc-dbe9-5d80-ae87-fcb32828693f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 16.2.12-tuxcare.11 of @angular/animations." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/animations@16.2.12-tuxcare.11" } ] }