{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:106bcb58-5b43-52d3-8e8b-e5b23f0e763f", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/animations", "purl": "pkg:npm/%40angular/animations@17.3.12-tuxcare.13", "type": "library", "bom-ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.13", "version": "17.3.12-tuxcare.13", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:e9efff82-21af-50e7-93a5-99a6bac53c16", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 17.3.12-tuxcare.13 of @angular/animations." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:0ff8af87-2813-5b6b-b115-ea3174eb7e60", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 17.3.12-tuxcare.13 of @angular/animations." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:ad528309-d37a-5a07-ae20-66e7b0636f3d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 17.3.12-tuxcare.13 of @angular/animations." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:1f721f4a-3a36-5fdb-a2ef-64bcc764539c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 17.3.12-tuxcare.13 of @angular/animations." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:321c4bb1-392b-5b2d-8645-795ba75fc8a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 17.3.12-tuxcare.13 of @angular/animations." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:c29c5886-7cde-5909-bce4-fbb3249cb105", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 17.3.12-tuxcare.13 of @angular/animations." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:ce06c0c8-971f-520a-baf1-f032f46bb2d4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 17.3.12-tuxcare.13 of @angular/animations." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:bcb2d999-0350-5e3e-a9c4-464ff6819e9f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 17.3.12-tuxcare.13 of @angular/animations." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:ee623d4b-1af8-58a3-838d-1157e4cebd39", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 17.3.12-tuxcare.13 of @angular/animations." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:dff6851f-664b-57f8-8fa0-0b272fbe4c63", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 17.3.12-tuxcare.13 of @angular/animations." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:098030b3-18dc-5079-a3dd-94138da77626", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 17.3.12-tuxcare.13 of @angular/animations." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:09fe5224-b2b3-5b70-a885-fe8f87273db8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 17.3.12-tuxcare.13 of @angular/animations." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:30fb901d-bed5-5efd-9628-d39af16a6cf9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 17.3.12-tuxcare.13 of @angular/animations." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:f3d805bb-5791-5fc6-8b94-a58f1d219e59", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 17.3.12-tuxcare.13 of @angular/animations." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:4aa8fa3b-7a0e-5867-bb83-e18ae4d5a1d2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 17.3.12-tuxcare.13 of @angular/animations." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:610333ed-bc42-51ec-8462-08b556122fdf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 17.3.12-tuxcare.13 of @angular/animations." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:5e2af5a0-174e-50f4-8df4-9e338ced4a62", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 17.3.12-tuxcare.13 of @angular/animations." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:b2bec110-e87b-5100-8eef-2815ee195de3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 17.3.12-tuxcare.13 of @angular/animations." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:22f315a6-293e-5aa0-a904-b2894cf1ae35", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 17.3.12-tuxcare.13 of @angular/animations." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:fca3b437-426d-5666-829b-4c850cc047b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 17.3.12-tuxcare.13 of @angular/animations." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:2b5b6be3-8b32-52ad-8895-7adeaca8c0e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 17.3.12-tuxcare.13 of @angular/animations." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:2718b754-5f9c-5efe-8e3b-03ce43cdf8a5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68945 affects version 17.3.12-tuxcare.13 of @angular/animations, and is fixed in 17.3.12-tuxcare.14." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:f04f2b89-5f15-5942-a22c-af108d12ce4c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 17.3.12-tuxcare.13 of @angular/animations, and is fixed in 17.3.12-tuxcare.14." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:d32ec75d-b799-5e7e-9a5b-26a1d9c3131f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 17.3.12-tuxcare.13 of @angular/animations, and is fixed in 17.3.12-tuxcare.14." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:0c474ac5-d3c4-5407-b1e3-e355b56b5264", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 17.3.12-tuxcare.13 of @angular/animations. not_affected \u2014 Version 17.3.12 is not affected by CVE-2026-88056. The vulnerability involves String.prototype.trim() being applied during URL resolution in Angular's platform-server, converting validated same-origin URLs with Unicode whitespace into cross-origin protocol-relative URLs, leading to SSRF. This vulnerable code pattern was introduced in newer Angular versions (v20+) and does not exist in version 1...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:6213c138-8807-5c17-b602-59fe9d5ec9e3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 17.3.12-tuxcare.13 of @angular/animations." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:49c0d49b-20d1-5c53-862b-702f2905ca81", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 17.3.12-tuxcare.13 of @angular/animations." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:f7979094-b10f-57b7-bb89-2bd88eeb9aa9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 17.3.12-tuxcare.13 of @angular/animations." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/animations@17.3.12-tuxcare.13" } ] }